Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier: BbHe4KUZCsN4D1K01+HCPUt4hgWhWGYj9XSg4goCaXc=
Subject key identifier: 14:FB:E8:93:01:7E:7D:D1:88:69:73:FF:6F:E5:11:AD:F3:24:75:36
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial: 0199FDD905BB607A8C42711EB2604FCE6555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number: 0C58
Signing time: Sun 19 Oct 2025 19:01:22 +0000
Manifest this update: Sun 19 Oct 2025 19:01:22 +0000
Manifest next update: Mon 20 Oct 2025 19:01:22 +0000
Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: Qxbh81yjcEPa6+j1k1E55IMQPiHfyv0KLOLgsZVrT/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:05:bb:60:7a:8c:42:71:1e:b2:60:4f:ce:65:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Validity
Not Before: Oct 19 19:01:22 2025 GMT
Not After : Oct 20 19:01:22 2025 GMT
Subject: CN=14fbe893017e7dd1886973ff6fe511adf3247536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:b8:df:e9:6c:da:d1:02:e7:e4:40:9e:50:
d0:b8:cd:03:ca:4c:76:8f:70:a9:a0:6d:e7:65:1b:
90:ae:0c:b6:2a:c1:b8:c5:1f:91:0b:de:55:3c:7f:
79:26:99:e1:04:6b:21:e5:e7:67:7c:e7:80:ee:c5:
88:79:f5:20:b9:22:14:84:2b:6a:d0:ee:91:7f:2b:
62:c6:84:b4:71:88:bb:79:80:5b:d3:e1:a3:c4:b3:
f8:3c:5c:14:7b:f5:7c:c8:12:37:94:dc:f2:80:79:
26:f0:d8:b9:1a:3d:36:45:1b:74:39:b7:fb:6d:03:
aa:59:be:15:e9:e2:5f:68:01:20:cc:9e:68:f6:61:
4a:01:52:82:3d:6c:02:73:bc:64:2f:70:1d:4f:8b:
b5:e6:65:b7:e6:de:a0:f9:4f:36:44:95:ce:3a:36:
a6:ac:38:c0:aa:1a:79:f0:8a:ac:1f:f6:39:af:af:
ba:00:2c:92:d7:92:28:2b:12:9a:06:36:da:d5:4f:
1a:ab:5b:3c:bc:5c:c6:e6:1c:1d:e4:66:c2:74:0b:
34:7b:74:ca:5b:45:02:5e:38:2c:46:e2:17:1f:07:
f6:45:f6:3c:02:d6:54:97:a8:7a:91:88:7d:61:e9:
57:ed:12:a4:e4:fd:b5:d3:c7:32:de:e1:f1:b2:d7:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:E8:93:01:7E:7D:D1:88:69:73:FF:6F:E5:11:AD:F3:24:75:36
X509v3 Authority Key Identifier:
keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7d:4f:a9:3d:82:da:84:03:91:45:e6:96:60:32:18:a6:b3:
43:77:dc:ee:b7:70:18:a6:de:0f:d9:23:a7:b1:95:18:e8:36:
6d:aa:20:8d:75:2d:50:8d:ad:9d:bd:a5:dd:b2:12:0f:4a:a6:
ca:84:b4:39:7c:92:f1:58:41:08:bd:cc:76:30:60:5e:72:3f:
2b:d3:09:4c:7d:0d:09:9c:af:bf:2c:a8:e6:7a:61:98:17:53:
e7:f3:c9:b9:2c:79:be:83:b8:e0:b9:cb:16:eb:cb:50:59:62:
b1:71:d1:71:e7:19:42:d9:9d:8e:b0:dd:ff:9a:5b:07:a6:c6:
4b:f8:d9:86:3b:ec:6a:dd:8d:96:b8:39:d6:fb:65:57:93:e7:
a4:f5:c1:c3:e9:da:39:2e:1d:1f:da:91:dc:7a:bf:53:d0:b4:
1d:76:be:ca:f3:41:30:3e:75:1c:38:5a:a4:fa:1f:13:fe:a2:
49:ca:a5:2b:a2:eb:60:38:36:22:47:c1:13:84:fe:08:ed:ff:
69:7f:86:e2:ea:a0:ef:41:84:a0:3c:73:a0:fd:83:49:30:5a:
db:e4:5f:9d:37:cb:33:ed:e1:2d:9a:4c:f5:a7:8b:0b:ad:bd:
da:f1:99:20:d5:70:f5:85:51:4f:8f:20:76:20:73:a5:c9:82:
1f:9b:b6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:52 2025 by rpki-client