Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: 5kqxwjDyW7Xv75fpRnAmhZII4x5S4N1ZrrHdjB+U+KY=
Subject key identifier: D5:42:CB:04:B5:99:15:35:C9:60:9F:26:7F:F8:B7:0C:29:35:B2:FC
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 0198D54DF390699A2658FAA7B6BFF78FA0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 166F
Signing time: Sat 23 Aug 2025 05:01:52 +0000
Manifest this update: Sat 23 Aug 2025 05:01:52 +0000
Manifest next update: Sun 24 Aug 2025 05:01:52 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: J7IvFG0xazDtaVCee/qFcpF0kOFGQASrxTlfdyO2J0g=)
2: DLqkJtVUmV3t_NSFK9gSKIls7d0.roa (hash: mC4NzL71O1LVPsjh1kWalWyRrj4+h6csfx67YmiitPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f3:90:69:9a:26:58:fa:a7:b6:bf:f7:8f:a0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Aug 23 05:01:52 2025 GMT
Not After : Aug 24 05:01:52 2025 GMT
Subject: CN=d542cb04b5991535c9609f267ff8b70c2935b2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:f8:2b:1f:32:4b:10:92:75:28:6c:21:35:
66:55:a4:76:f4:c2:a2:b2:2a:76:c0:36:13:29:4e:
11:04:90:a7:c7:96:70:82:d2:bd:f5:49:7f:9e:ba:
2a:1b:b3:4b:6c:d9:ad:3a:68:f2:86:14:ce:28:b1:
ea:d7:a4:95:a6:cf:54:20:c2:b0:76:90:79:6b:af:
a3:b1:b9:da:23:8d:4b:06:1e:c2:5a:35:fa:4a:24:
a7:c2:55:f4:f3:26:59:58:2d:0b:81:b5:2e:96:1a:
5a:81:26:6c:aa:f2:09:94:5e:16:52:c3:b8:de:f4:
99:41:2e:aa:ff:7a:9a:e7:44:8a:cb:f4:b6:28:87:
7b:1a:ec:03:65:a9:d4:c2:76:61:56:8c:cc:ed:a3:
87:bd:63:55:fd:4d:8f:b1:be:67:e0:08:31:59:54:
62:82:a9:ae:64:03:55:c2:6e:b2:1d:3c:d6:88:56:
38:e3:cd:84:94:9b:ca:ad:a8:71:1a:31:8f:bb:29:
ed:10:cb:71:13:41:be:ef:ac:93:62:77:5b:d9:1a:
e1:c0:18:2f:2a:aa:0c:93:aa:33:87:4a:0e:e1:c4:
ef:eb:53:65:8b:1c:68:5d:f2:e4:25:83:82:ae:88:
53:91:44:d7:7b:af:7d:21:84:90:6a:d4:3e:97:e7:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:42:CB:04:B5:99:15:35:C9:60:9F:26:7F:F8:B7:0C:29:35:B2:FC
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ee:79:2c:c2:36:2a:4f:5d:25:33:11:90:12:76:a0:44:be:
bf:bb:0f:97:75:be:a2:1e:eb:78:63:03:32:e8:e9:40:5b:43:
1e:dd:aa:1b:74:bb:06:72:06:81:ae:9a:c5:21:43:ed:8f:a1:
d5:0d:ec:e9:f7:7a:25:4e:cc:89:95:60:ad:c3:07:7a:7f:b7:
b9:22:79:de:4b:48:39:9a:b7:6c:3d:ab:9a:fa:d1:df:7e:f0:
cc:13:71:e9:0c:ef:e6:28:5a:24:ca:24:30:96:f4:a5:50:3c:
ca:41:2c:a9:9a:66:0f:3a:e1:ae:aa:27:48:56:15:e7:fe:3a:
9e:6c:4d:63:1d:50:cf:46:2d:3a:52:a8:61:55:b9:d1:a9:e7:
fe:7b:07:01:41:87:51:29:da:be:03:98:fe:f7:a4:d7:fa:f9:
cf:b2:4e:14:28:b7:af:b8:fc:5c:5d:4b:b5:9e:95:c0:a2:80:
86:6e:23:22:9f:cb:b7:b6:88:04:91:29:a9:7b:e7:8f:c7:4f:
2d:0e:b6:64:3f:eb:52:ba:de:04:99:dd:a1:10:5a:41:67:4f:
5f:22:de:f0:e5:d9:de:12:55:d1:3b:58:e6:a6:8e:f8:9e:69:
b4:3b:e3:0a:fe:3f:6e:39:fe:db:d2:b3:39:84:d7:6a:00:f9:
50:b6:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:25 2025 by rpki-client