Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: 93XGJADFi9/nyn0E8V+xjVpjVsA5OLogjJJ068RzojM=
Subject key identifier: E6:78:54:A6:50:8A:D0:41:CC:20:95:BC:E2:2E:26:15:A3:92:8B:02
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 0198D5BC4D8F1841A1CE310DA74D83B10D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 028D
Signing time: Sat 23 Aug 2025 07:02:24 +0000
Manifest this update: Sat 23 Aug 2025 07:02:24 +0000
Manifest next update: Sun 24 Aug 2025 07:02:24 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: 1aMPptqZYocKrxF0EtnEY5AVjUA7Y1GFDTW+CE/gFzY=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4d:8f:18:41:a1:ce:31:0d:a7:4d:83:b1:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Aug 23 07:02:24 2025 GMT
Not After : Aug 24 07:02:24 2025 GMT
Subject: CN=e67854a6508ad041cc2095bce22e2615a3928b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:ad:45:8e:25:23:32:80:be:3b:f5:d7:c8:
65:83:9c:07:a1:3b:0c:f3:6a:e2:59:a6:3d:f3:07:
6b:44:6a:ae:22:01:ae:29:2c:44:3e:43:43:86:3e:
23:41:cd:74:34:29:a6:04:d1:ca:e3:b6:9f:08:bd:
21:28:78:f7:c0:89:1e:c7:29:15:b3:85:da:9f:14:
36:04:ec:ca:a8:53:7b:0b:c7:09:c4:dd:05:a0:df:
b9:b1:0b:fa:31:99:02:2b:fc:84:ee:0d:ae:e7:65:
ef:43:6c:8a:a8:00:ad:4c:22:ba:12:f2:c0:d3:d3:
80:4c:e4:d9:9c:7e:02:e0:34:b7:e2:8b:8d:21:e6:
7a:18:8b:cf:2b:e6:5f:d1:81:6f:41:04:18:0d:56:
df:d3:51:3d:15:e9:87:7e:67:b6:6f:0a:38:0c:5b:
47:f3:78:f7:2d:45:7a:69:7b:d1:46:75:e6:3c:a1:
7d:7f:c9:27:1a:88:49:62:23:49:61:ef:f8:73:13:
dc:2d:78:28:80:e4:c4:ab:9f:01:52:85:21:cf:5c:
ac:e5:90:20:aa:be:b2:6a:4d:1a:8a:b3:25:f1:63:
a6:01:6a:d9:e5:54:80:a1:18:27:a2:f1:9f:55:87:
3c:64:ad:80:75:24:4e:b1:a6:2e:12:ff:a1:b0:98:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:78:54:A6:50:8A:D0:41:CC:20:95:BC:E2:2E:26:15:A3:92:8B:02
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:13:ae:b9:09:8b:fc:cc:0a:bf:9a:2f:be:37:4c:fb:01:e1:
34:c7:9d:c1:a6:94:09:7a:10:bb:a2:28:d6:01:74:12:1e:27:
45:6a:64:3c:b7:46:d8:9c:eb:2c:55:40:b6:ef:cc:69:84:26:
ee:17:41:c7:ac:90:95:f5:1a:c2:ee:bf:d8:f0:8b:48:da:84:
e8:86:1d:95:82:1c:3b:2e:55:3f:0d:d1:c1:1b:70:c5:0f:5a:
25:de:07:a0:d5:1e:46:c6:f7:a8:1f:31:cb:dc:08:d0:19:13:
dc:27:16:d3:a2:2f:f9:8c:b7:3d:b6:ea:a0:63:e7:cd:ad:ce:
06:af:b2:e0:12:bf:4d:97:0f:03:75:3f:dd:2d:c7:e7:39:b0:
fd:ab:f4:ad:ca:d2:23:7a:44:a5:b3:2c:cc:bc:f9:85:32:94:
e4:bc:f0:22:93:3c:c0:0b:8e:49:13:d2:a4:52:3d:bd:b0:31:
79:e1:31:1d:96:d3:91:48:eb:1c:6a:8b:3d:1e:f6:20:bf:92:
bc:2e:6b:b0:32:c6:e9:36:d3:1d:42:f0:17:49:ba:ca:4e:55:
41:0b:da:a8:87:48:4d:92:e7:15:ea:db:8c:7a:37:fe:f6:96:
63:3b:ba:fd:68:17:31:17:d3:25:55:ec:c3:65:20:1b:78:bf:
8b:e9:38:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvE2PGEGhzjENp02DsQ2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDcwMjkzMjgwMmMyNzQzZDMzNWY2N2Q0N2E0MjM4YzMz
MjQ1MzMwHhcNMjUwODIzMDcwMjI0WhcNMjUwODI0MDcwMjI0WjAzMTEwLwYDVQQD
EyhlNjc4NTRhNjUwOGFkMDQxY2MyMDk1YmNlMjJlMjYxNWEzOTI4YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIutRY4lIzKAvjv118hlg5wHoTsM
82riWaY98wdrRGquIgGuKSxEPkNDhj4jQc10NCmmBNHK47afCL0hKHj3wIkexykV
s4XanxQ2BOzKqFN7C8cJxN0FoN+5sQv6MZkCK/yE7g2u52XvQ2yKqACtTCK6EvLA
09OATOTZnH4C4DS34ouNIeZ6GIvPK+Zf0YFvQQQYDVbf01E9FemHfme2bwo4DFtH
83j3LUV6aXvRRnXmPKF9f8knGohJYiNJYe/4cxPcLXgogOTEq58BUoUhz1ys5ZAg
qr6yak0airMl8WOmAWrZ5VSAoRgnovGfVYc8ZK2AdSROsaYuEv+hsJhfewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZ4VKZQitBBzCCVvOIuJhWjkosCMB8GA1UdIwQY
MBaAFAgHApMoAsJ0PTNfZ9R6QjjDMkUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODct
NDgwZmViOTJkNzE4LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODctNDgwZmViOTJkNzE4
LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxOuuQmL
/MwKv5ovvjdM+wHhNMedwaaUCXoQu6Io1gF0Eh4nRWpkPLdG2JzrLFVAtu/MaYQm
7hdBx6yQlfUawu6/2PCLSNqE6IYdlYIcOy5VPw3RwRtwxQ9aJd4HoNUeRsb3qB8x
y9wI0BkT3CcW06Iv+Yy3PbbqoGPnza3OBq+y4BK/TZcPA3U/3S3H5zmw/av0rcrS
I3pEpbMszLz5hTKU5LzwIpM8wAuOSRPSpFI9vbAxeeExHZbTkUjrHGqLPR72IL+S
vC5rsDLG6TbTHULwF0m6yk5VQQvaqIdITZLnFerbjHo3/vaWYzu6/WgXMRfTJVXs
w2UgG3i/i+k41A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:07 2025 by rpki-client