Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: XaqXkU2JNFTCbZBkh8iC49+dTr6xnz3UOHoGob8RmPc=
Subject key identifier: BF:09:12:40:F6:22:66:01:4C:EC:93:45:BE:81:5F:97:17:ED:27:51
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 019A0110EC3FD37A2BE367BDAE279C8BB708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 0328
Signing time: Mon 20 Oct 2025 10:01:17 +0000
Manifest this update: Mon 20 Oct 2025 10:01:17 +0000
Manifest next update: Tue 21 Oct 2025 10:01:17 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: vR5mKhLhbRQCCGSsxvaKdWckSmh9VHeE1g1f8qiRycE=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:ec:3f:d3:7a:2b:e3:67:bd:ae:27:9c:8b:b7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Oct 20 10:01:17 2025 GMT
Not After : Oct 21 10:01:17 2025 GMT
Subject: CN=bf091240f62266014cec9345be815f9717ed2751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:d3:a8:ca:f0:ec:45:98:48:5d:50:0f:fb:
7b:c4:cd:db:e9:c0:62:8f:7a:2c:64:7c:d2:7d:1c:
72:14:d3:17:00:94:2a:14:1b:d1:68:cd:d8:3d:7e:
28:2a:9c:0b:8b:de:a9:ef:2a:b9:df:0e:42:b2:51:
67:9b:82:ef:f1:86:2e:e7:f2:df:10:1a:3b:6d:d3:
9e:6a:50:b8:b8:13:06:14:e2:fd:ac:67:26:b9:9e:
1a:e6:37:32:e5:53:c7:78:94:ab:b0:4a:de:65:47:
9c:7e:97:60:c9:02:56:ab:de:34:a3:1d:ca:dc:b8:
a4:04:da:53:5f:b8:f8:f3:c8:0c:e3:89:82:4a:fe:
f0:8d:24:05:d9:1d:4d:70:e5:bb:b2:fc:db:7e:cb:
1c:5c:7c:62:ef:11:ba:69:91:7a:6f:bb:be:08:63:
55:7c:96:46:d1:72:0a:b6:b8:0a:fc:5d:c3:4a:e4:
6b:6e:39:61:44:3c:07:db:47:ba:64:31:22:6b:eb:
ae:c5:71:79:bd:ec:cb:48:f6:7e:1c:e4:45:2c:d4:
2d:3f:e3:2c:ed:d9:ac:41:48:d2:2c:df:ad:e9:77:
ec:bc:6b:8e:b6:7a:f9:55:6e:4c:52:97:5a:dd:97:
ea:de:e6:80:bc:c6:5a:5d:0f:0b:4b:f7:ef:cf:55:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:12:40:F6:22:66:01:4C:EC:93:45:BE:81:5F:97:17:ED:27:51
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:77:6a:6c:d0:e3:94:f0:87:d5:f4:13:d8:57:80:48:3c:fe:
c3:f3:b2:dc:8a:27:81:c0:e3:a4:6a:22:00:4a:49:9f:5a:f7:
8b:06:a4:98:b3:3b:09:3b:60:89:41:95:88:fb:ff:a0:e3:bb:
f2:42:8d:ad:65:33:71:47:3d:67:3b:0b:c3:e0:2f:ed:1c:04:
eb:ca:e9:6e:fe:78:29:3a:a2:c4:73:b0:e0:19:c1:ab:bd:0e:
92:08:ff:8c:38:4c:e7:d4:c1:50:ef:8f:fa:8d:25:db:ab:75:
30:99:3e:e8:bf:c3:7c:1f:10:3a:4d:30:2a:5f:e3:cb:56:cb:
6e:ed:40:74:42:7f:23:42:b5:8d:97:5c:7a:bd:5f:41:19:0c:
d6:7c:eb:a1:5b:41:00:82:25:a9:05:b6:16:2e:7e:c2:7f:90:
48:9d:d6:3f:1b:bd:bc:e9:c2:67:67:06:36:5f:5e:53:3b:e8:
a0:8a:58:33:37:8c:1c:de:07:e4:07:0b:5e:f0:d3:83:d3:6d:
f8:4f:0b:28:b3:18:26:43:3e:39:f1:76:18:28:8f:43:20:33:
5d:22:cc:8f:06:33:36:c3:72:d8:26:26:8e:4b:ca:e8:a5:f3:
bd:f1:94:c5:28:c7:79:a1:54:3d:8a:36:11:9b:2c:5b:e6:9d:
35:58:24:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:29 2025 by rpki-client