Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier: C2hcsMuSJX2tbi4LXgPE/S4WsYTT+lhLWgfC6nYn1tw=
Subject key identifier: 05:3A:29:0F:F8:D5:D4:45:37:54:FD:8C:E2:91:0B:45:92:5B:0C:A3
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 0198D54EBC43FC4097849922CD721BB84893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number: 161A
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: T1S66m+qGgFkD+VHUWyN2QHeJkwk8l8v/yRjqj/gWC4=)
2: FGVVapfPvK0QzFf1pALkp5bEruw.roa (hash: TSwtNe6AniR+9RFExziwrrS0q9Xsbcr++0YQr2+oyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bc:43:fc:40:97:84:99:22:cd:72:1b:b8:48:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=053a290ff8d5d4453754fd8ce2910b45925b0ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:3b:a7:83:47:e4:57:02:e9:66:88:1b:13:
69:ea:8d:17:df:40:a5:d7:f5:ae:b7:fa:ab:a7:14:
dd:6b:4b:bb:8f:2f:19:20:c3:dc:1b:70:72:fc:71:
79:4d:4c:78:74:d2:34:21:5c:d8:2c:e7:75:a3:4d:
8c:5f:ed:13:ab:63:f8:aa:5e:f8:81:be:fc:9c:9d:
88:b8:e6:a1:f9:97:89:9a:d2:e7:28:c9:b7:24:40:
54:2f:88:e2:4a:0d:0c:36:40:14:99:fc:96:04:18:
6d:a1:62:d8:c3:18:2e:19:0d:d3:32:3a:2b:91:58:
58:ec:3f:8d:e5:53:23:ab:da:81:22:43:36:5c:5c:
71:6d:46:6d:26:27:48:16:5b:27:45:23:f5:bd:b6:
2b:73:c3:66:3d:3c:55:ad:e8:d2:ba:e9:95:51:dc:
5c:6e:c8:78:2c:1d:96:eb:69:ec:39:e6:f5:1a:6b:
62:d6:34:aa:f2:b0:5f:86:31:3f:11:33:85:ab:04:
c1:6a:84:de:20:30:b7:96:6b:e1:60:c4:c2:d0:e1:
8a:85:7d:70:32:27:96:19:9f:c7:54:87:d0:25:e5:
81:1f:29:55:cc:34:f7:e0:1e:1e:6f:7a:19:81:a2:
0e:e4:94:e9:84:4b:1c:de:96:45:6d:88:0b:44:b6:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3A:29:0F:F8:D5:D4:45:37:54:FD:8C:E2:91:0B:45:92:5B:0C:A3
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e4:0c:b7:ba:2d:12:cb:ab:f7:80:e7:9f:47:0e:3a:a6:b1:
04:15:cd:df:45:31:1c:fb:26:f2:3a:86:83:cd:0c:3d:de:42:
42:ae:5f:0a:fa:51:c8:e7:23:d9:70:4b:d2:2a:da:0e:ad:de:
f6:af:b1:da:a6:7a:52:c7:80:79:9b:4d:fa:7c:a4:57:97:80:
4e:18:1e:05:ec:da:37:04:c6:39:df:df:98:0d:75:d7:c2:c5:
17:ad:99:34:37:fa:96:39:a7:97:fc:2b:48:e3:cd:d6:d6:e5:
11:4e:e4:59:51:78:59:ae:ae:01:2c:07:38:17:3d:4e:bc:d6:
56:ad:41:b7:ea:ab:1e:b8:bc:bf:99:34:c2:c7:1e:13:c4:d2:
c7:95:75:5b:05:74:ef:ff:0a:6c:22:b9:40:92:b5:4b:5d:c8:
e1:6f:d8:c2:ab:9c:1c:aa:81:b6:b6:46:0c:b2:70:82:86:45:
bc:18:d6:02:e1:79:6f:07:7a:61:0d:5f:eb:cc:ea:e4:8c:a7:
87:a2:93:5b:53:68:b6:ca:41:b4:33:44:2e:61:5c:6d:56:81:
38:5a:60:bc:eb:0f:de:e5:f8:9f:cd:d7:2b:86:36:a3:3f:f0:
e9:a9:35:8f:1d:db:6c:85:7c:07:0f:f5:d2:49:4d:d6:34:2b:
7c:43:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:54 2025 by rpki-client