Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: GxwSOuAx2svGe+IbT3E94tCDAsKF6UgSstiMw2iMACs=
Subject key identifier: DF:1C:56:C0:7E:B9:A5:2A:C6:3B:A7:D9:BA:8E:E9:91:07:FD:F6:EB
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 019A04ED262721B4C4B3CE29E9242412CA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 170D
Signing time: Tue 21 Oct 2025 04:00:41 +0000
Manifest this update: Tue 21 Oct 2025 04:00:41 +0000
Manifest next update: Wed 22 Oct 2025 04:00:41 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: AlL4TChy/8JmhaKVlBu6S8VUjh7CZz68ymfoqW2Bz0g=)
2: u_ghsQLM6dmD-XVgn-Vg2mnh0tk.roa (hash: lRkXttFTDs1AOwYwNPIjE7pzB4e1N5TVkpZRKvN8plQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ed:26:27:21:b4:c4:b3:ce:29:e9:24:24:12:ca:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Oct 21 04:00:41 2025 GMT
Not After : Oct 22 04:00:41 2025 GMT
Subject: CN=df1c56c07eb9a52ac63ba7d9ba8ee99107fdf6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:51:69:4a:5d:b0:e0:03:43:ce:ee:51:8e:
11:c4:7f:2d:2e:6e:0a:90:d4:85:28:10:e3:34:8e:
74:06:44:69:80:18:6b:c7:d5:31:d7:21:80:9a:8f:
e6:a5:f0:90:27:d3:26:be:30:de:f4:43:b1:fe:83:
7d:15:79:c0:2d:c4:35:85:3a:43:05:84:64:c4:64:
68:2d:51:a2:af:b3:65:6e:e3:76:f0:3a:d5:0c:40:
a2:e9:c9:99:8f:1d:c7:8d:0f:80:b1:d9:80:d7:d8:
e7:be:2f:f6:74:a0:13:6d:06:c9:41:89:8b:a8:ca:
68:db:2c:f0:71:6e:22:0b:fb:08:be:65:a7:b0:76:
ce:7c:96:aa:05:88:fa:b8:19:7d:19:28:e9:14:8d:
f7:fb:b0:d5:bf:4a:b6:9d:91:23:44:82:3e:61:eb:
46:19:49:72:aa:df:45:6b:48:26:55:02:2e:4a:b9:
8f:f1:d0:02:be:79:67:2f:2b:ce:d5:1a:d3:70:44:
d6:ba:8a:ba:da:f5:ca:0a:2b:20:3a:30:e0:35:28:
dc:30:15:78:e8:93:4c:1e:ad:ce:00:1b:43:ee:fb:
43:0b:12:28:d5:ff:46:e1:0f:e4:63:b3:c2:f6:12:
e7:ca:22:70:df:c3:ea:9c:51:64:a3:d5:99:b8:24:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1C:56:C0:7E:B9:A5:2A:C6:3B:A7:D9:BA:8E:E9:91:07:FD:F6:EB
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:66:68:3e:a9:a7:ea:a6:af:43:f3:17:fa:64:52:50:76:b8:
06:55:54:c7:b8:7d:90:39:d2:22:d6:dc:52:b0:0e:47:78:08:
0e:c2:65:37:5e:cf:6d:a0:d3:28:99:4f:a3:72:5e:e8:7a:c3:
fc:e5:5c:05:bc:44:27:da:75:24:83:06:7a:92:59:c8:19:64:
30:12:f8:17:e7:07:6c:8d:15:ac:5c:d3:10:00:8e:94:58:fd:
ec:5c:3e:71:5f:5e:a6:c8:ca:5d:e8:0d:bb:c3:ee:6b:50:59:
2b:14:32:82:ce:4f:b4:e1:30:30:de:15:4b:e1:d2:fb:6a:b6:
ae:a6:20:1f:82:3d:d6:55:9c:26:b2:fe:3a:3a:18:de:c5:43:
b2:9f:d7:2a:4f:52:32:79:8e:f4:da:1c:95:cb:d2:43:b0:a1:
a8:2c:62:84:ca:98:cd:ae:b5:6e:a7:19:57:32:ec:0b:e1:60:
cf:c7:c3:28:90:4a:7b:2c:e0:88:26:d0:b3:d2:5b:9b:2f:b1:
5b:da:77:a9:e5:68:31:31:e1:47:a7:04:4e:53:26:2f:2d:fa:
92:cd:b4:5a:b9:63:91:a2:25:e5:08:a0:8c:03:30:ab:e0:08:
f3:25:d9:5c:31:e1:e9:ee:12:52:e1:e1:99:e8:10:d6:32:9f:
6d:01:e7:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoE7SYnIbTEs84p6SQkEsoBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzM4YTA2YTM5YjIwYjhkYTQwMDA5MjM3ZDc2YWNkZDI4
ZTcxYTUwHhcNMjUxMDIxMDQwMDQxWhcNMjUxMDIyMDQwMDQxWjAzMTEwLwYDVQQD
EyhkZjFjNTZjMDdlYjlhNTJhYzYzYmE3ZDliYThlZTk5MTA3ZmRmNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUdRaUpdsOADQ87uUY4RxH8tLm4K
kNSFKBDjNI50BkRpgBhrx9Ux1yGAmo/mpfCQJ9MmvjDe9EOx/oN9FXnALcQ1hTpD
BYRkxGRoLVGir7NlbuN28DrVDECi6cmZjx3HjQ+AsdmA19jnvi/2dKATbQbJQYmL
qMpo2yzwcW4iC/sIvmWnsHbOfJaqBYj6uBl9GSjpFI33+7DVv0q2nZEjRII+YetG
GUlyqt9Fa0gmVQIuSrmP8dACvnlnLyvO1RrTcETWuoq62vXKCisgOjDgNSjcMBV4
6JNMHq3OABtD7vtDCxIo1f9G4Q/kY7PC9hLnyiJw38PqnFFko9WZuCQFLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8cVsB+uaUqxjun2bqO6ZEH/fbrMB8GA1UdIwQY
MBaAFAHDigajmyC42kAAkjfXas3SjnGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAt
YjI5ZjEwY2MwMzI4LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAtYjI5ZjEwY2MwMzI4
LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGZoPqmn
6qavQ/MX+mRSUHa4BlVUx7h9kDnSItbcUrAOR3gIDsJlN17PbaDTKJlPo3Je6HrD
/OVcBbxEJ9p1JIMGepJZyBlkMBL4F+cHbI0VrFzTEACOlFj97Fw+cV9epsjKXegN
u8Pua1BZKxQygs5PtOEwMN4VS+HS+2q2rqYgH4I91lWcJrL+OjoY3sVDsp/XKk9S
MnmO9NoclcvSQ7ChqCxihMqYza61bqcZVzLsC+Fgz8fDKJBKeyzgiCbQs9Jbmy+x
W9p3qeVoMTHhR6cETlMmLy36ks20WrljkaIl5QigjAMwq+AI8yXZXDHh6e4SUuHh
megQ1jKfbQHnlw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:00:04 2025 by rpki-client