Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: BsOOg8A+cSoqGSYd7bHlLNQUoS10tdlnN51AAE3f/C0=
Subject key identifier: 60:79:2F:62:72:09:45:61:AD:DE:03:9E:F5:75:53:AB:DD:30:48:B0
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 0199FF22E6FAE175620CD2EC1919E601BC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 118F
Signing time: Mon 20 Oct 2025 01:01:41 +0000
Manifest this update: Mon 20 Oct 2025 01:01:41 +0000
Manifest next update: Tue 21 Oct 2025 01:01:41 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: 6MX7ToqsIeROQsGtieGw/fXh8en9xMRggX8cgSMrLGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e6:fa:e1:75:62:0c:d2:ec:19:19:e6:01:bc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Oct 20 01:01:41 2025 GMT
Not After : Oct 21 01:01:41 2025 GMT
Subject: CN=60792f6272094561adde039ef57553abdd3048b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:41:d8:a3:d4:a9:7b:41:3a:ff:09:e6:23:
eb:07:7d:ea:b2:02:aa:36:59:69:6f:46:2c:79:6c:
2b:2c:8d:91:16:b0:70:8b:02:43:33:71:88:ff:2d:
be:88:81:79:84:5c:bd:44:d1:f0:d6:11:e0:37:5b:
95:31:81:dc:77:33:b8:6f:ed:2d:e6:d4:b4:1d:64:
7b:56:73:f5:5a:4a:b0:2b:d3:0f:20:39:95:8d:aa:
2b:fb:21:2a:e0:1b:35:f6:9a:c7:5d:c1:77:ea:ed:
6f:4c:17:c4:4a:e4:fd:df:b8:85:2e:57:a1:55:ba:
70:0f:12:f2:b8:1c:de:6e:04:0e:8c:41:f9:cd:01:
b8:5e:aa:30:d6:9a:c3:36:27:fb:65:7a:7c:cf:62:
0b:70:88:3f:3f:12:d4:50:24:b6:97:f4:6c:e4:cb:
ae:b8:79:da:b6:bc:a5:97:74:dd:9e:2e:34:69:9d:
b1:1d:45:70:2b:0a:f1:b1:24:ed:77:e2:98:c7:cb:
11:fd:84:13:23:b1:b7:61:b3:98:71:c6:6b:5d:06:
64:2d:35:eb:9b:42:db:30:5b:98:c0:3a:16:20:f9:
0f:ec:77:01:d2:bf:82:b7:7e:93:9e:b7:a9:c4:26:
cc:df:af:5c:4e:f1:bf:32:08:ee:07:43:3b:dc:f6:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:79:2F:62:72:09:45:61:AD:DE:03:9E:F5:75:53:AB:DD:30:48:B0
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d9:e3:9a:8c:d0:28:c0:a8:80:51:aa:f3:2f:c9:ea:3a:89:
5e:8b:a8:5c:14:9e:b5:0e:6d:0f:59:68:43:bc:a8:a4:83:f2:
7f:dd:53:ef:ec:eb:88:1f:a8:88:c6:7d:6b:9e:62:a3:f9:e5:
e1:8f:49:10:77:39:d4:86:f0:44:db:b9:06:6a:dc:f6:4d:12:
03:c0:88:c9:38:83:d6:22:18:84:f8:f2:26:2a:4a:c9:df:cb:
de:e6:35:9c:30:e1:ea:f7:61:fa:c5:a1:e1:46:53:6c:6a:8f:
4b:2b:94:75:91:5b:4d:f5:3f:21:9d:34:60:7f:ee:b5:40:73:
da:b2:84:09:6c:56:00:33:89:16:86:f2:45:c1:61:dd:d8:f0:
76:c5:e1:9a:a1:b4:d6:01:75:5f:4e:91:f5:06:b9:26:57:37:
77:bf:cf:ed:9f:20:0a:c3:d8:f3:ab:81:4c:4d:e7:e5:4b:87:
70:95:62:9b:b4:07:af:f7:fc:ac:0a:fe:fa:ac:8b:ce:4c:f8:
fa:be:f9:c1:2d:27:2e:75:12:16:47:18:40:ea:31:b1:6b:00:
4c:09:0c:31:87:43:a9:4f:e8:d9:f0:5e:c8:cb:31:a6:81:60:
67:36:0f:06:11:54:5c:3c:ab:a5:23:99:5b:4f:6f:92:ae:0b:
f4:52:9a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Iub64XViDNLsGRnmAbyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmFkZTY0YTNkMmJkYmU4ZjdjZTgzNjEwZDJlN2M2NWZi
MzNlYWQwHhcNMjUxMDIwMDEwMTQxWhcNMjUxMDIxMDEwMTQxWjAzMTEwLwYDVQQD
Eyg2MDc5MmY2MjcyMDk0NTYxYWRkZTAzOWVmNTc1NTNhYmRkMzA0OGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIZB2KPUqXtBOv8J5iPrB33qsgKq
Nllpb0YseWwrLI2RFrBwiwJDM3GI/y2+iIF5hFy9RNHw1hHgN1uVMYHcdzO4b+0t
5tS0HWR7VnP1WkqwK9MPIDmVjaor+yEq4Bs19prHXcF36u1vTBfESuT937iFLleh
VbpwDxLyuBzebgQOjEH5zQG4Xqow1prDNif7ZXp8z2ILcIg/PxLUUCS2l/Rs5Muu
uHnatryll3Tdni40aZ2xHUVwKwrxsSTtd+KYx8sR/YQTI7G3YbOYccZrXQZkLTXr
m0LbMFuYwDoWIPkP7HcB0r+Ct36TnrepxCbM369cTvG/MgjuB0M73PZM5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB5L2JyCUVhrd4DnvV1U6vdMEiwMB8GA1UdIwQY
MBaAFAAq3mSj0r2+j3zoNhDS58Zfsz6tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NjEzNGEtZWU0ZC00NjM3LWE0ZDQt
YzU3Y2Y4ZjFjZDU0LzEvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84NjEzNGEtZWU0ZC00NjM3LWE0ZDQtYzU3Y2Y4ZjFjZDU0
LzEvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdnjmozQ
KMCogFGq8y/J6jqJXouoXBSetQ5tD1loQ7yopIPyf91T7+zriB+oiMZ9a55io/nl
4Y9JEHc51IbwRNu5Bmrc9k0SA8CIyTiD1iIYhPjyJipKyd/L3uY1nDDh6vdh+sWh
4UZTbGqPSyuUdZFbTfU/IZ00YH/utUBz2rKECWxWADOJFobyRcFh3djwdsXhmqG0
1gF1X06R9Qa5Jlc3d7/P7Z8gCsPY86uBTE3n5UuHcJVim7QHr/f8rAr++qyLzkz4
+r75wS0nLnUSFkcYQOoxsWsATAkMMYdDqU/o2fBeyMsxpoFgZzYPBhFUXDyrpSOZ
W09vkq4L9FKaYg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:36 2025 by rpki-client