Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: NWKsBokGJF4Z6AobPVytEXkb3HHaIXNQikXrpagcunw=
Subject key identifier: 37:D8:B9:CE:75:3F:FD:08:50:98:BE:7D:D0:A9:D0:32:4B:A2:4C:15
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 0199FB0EF8C0E20C54443680FC7335016266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 06:01:26 +0000
Manifest this update: Sun 19 Oct 2025 06:01:26 +0000
Manifest next update: Mon 20 Oct 2025 06:01:26 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: y60WkRGv4e0yADXi/6rUsA3i2N+Yidaif1fDJUlv82E=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f8:c0:e2:0c:54:44:36:80:fc:73:35:01:62:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Oct 19 06:01:26 2025 GMT
Not After : Oct 20 06:01:26 2025 GMT
Subject: CN=37d8b9ce753ffd085098be7dd0a9d0324ba24c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:9a:da:c5:84:52:2d:de:b8:64:7f:62:48:
cf:73:c3:41:d1:4e:da:05:c3:cf:c4:8f:68:fd:c6:
71:b8:25:8f:72:de:b8:e2:b3:e6:52:69:09:23:af:
67:f4:95:7f:56:c0:2b:96:d6:17:05:31:1b:de:c9:
34:fc:31:2a:bb:f9:f6:f5:dc:75:c6:fe:db:01:16:
56:3c:ec:1d:4e:ef:ea:e6:b9:2d:3b:7b:70:45:ff:
72:74:04:06:b6:7a:19:9c:9d:6a:34:03:d7:f3:2d:
af:96:00:07:c4:10:2e:8e:47:2a:fa:f2:62:1c:9a:
8d:42:ef:05:b5:70:c8:36:d2:4f:23:14:8d:25:78:
a0:fd:1f:68:46:a7:b6:d0:06:21:ac:0a:9f:07:a1:
d1:57:7f:94:35:39:ca:b6:8a:68:43:7d:c3:a2:7b:
36:9f:49:01:3c:8f:77:e8:91:a1:26:8d:ed:8c:b7:
18:ad:1e:4a:43:6a:ba:7f:eb:60:f6:51:db:96:e8:
19:03:c9:c3:59:b5:58:35:cd:30:58:19:18:29:e9:
35:5e:0e:13:04:d7:c7:a4:ac:81:52:df:d7:f4:d2:
d3:88:64:ff:9d:0a:b1:80:98:50:41:f2:cd:91:23:
f6:cf:b0:49:22:cf:9e:af:89:c1:7a:a4:b9:23:c6:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D8:B9:CE:75:3F:FD:08:50:98:BE:7D:D0:A9:D0:32:4B:A2:4C:15
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:59:81:cf:db:43:4f:b3:b7:2d:66:03:f9:15:0c:38:78:b2:
ef:75:43:0e:2b:a4:fa:41:09:97:7d:f6:ce:4e:be:60:41:36:
0e:eb:cb:eb:6f:8f:bb:27:1f:b1:03:8c:2f:9b:c1:36:51:4d:
74:0e:33:c0:09:e3:71:e0:9f:5d:fd:7c:4a:bd:e3:97:5d:d3:
6b:12:86:8a:0a:13:97:e2:fb:ba:07:bb:24:4a:46:43:73:7c:
9a:f6:37:f6:ef:7e:2b:fd:ac:c0:90:14:39:02:1e:01:6d:bb:
3a:68:59:12:3e:3f:4f:ae:05:31:6b:24:09:33:e8:73:91:ed:
24:82:b8:bd:76:09:bf:0d:94:ef:1e:f9:e1:fe:56:f5:70:b2:
85:7b:4d:79:83:c0:a9:6a:06:4b:d8:01:13:d3:0c:31:ca:92:
0a:fc:d4:38:e5:fb:e0:c0:65:33:00:a3:56:1b:a2:29:5f:dd:
c1:ef:52:a7:5d:be:0d:6e:f9:39:8d:32:18:f3:26:c1:43:ec:
53:9d:14:89:f2:a1:f0:58:6b:93:57:e5:5b:98:ec:8b:01:e8:
97:89:6d:b0:61:e4:1f:67:fe:e0:0b:08:d0:2f:cd:d4:a9:27:
3d:53:97:a7:ee:27:c0:b2:b4:43:17:6f:c4:a2:4c:cb:b4:e2:
3e:51:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:25 2025 by rpki-client