Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier: 9F0Mo6rMIKefYGvxTEJOqQ+1D1ywwFjiYRE3nd8ZoV8=
Subject key identifier: 0C:F7:27:6D:03:BB:A6:80:38:6A:C2:17:EF:E9:94:4F:88:1E:22:44
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial: 0198D47264566DC569607FFC6DD6360070FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:03 +0000
Manifest this update: Sat 23 Aug 2025 01:02:03 +0000
Manifest next update: Sun 24 Aug 2025 01:02:03 +0000
Files and hashes: 1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: v6EsXqvJCg59nnVU20zwQPDvGvu3Kju1GCspf44sggU=)
2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:64:56:6d:c5:69:60:7f:fc:6d:d6:36:00:70:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Validity
Not Before: Aug 23 01:02:03 2025 GMT
Not After : Aug 24 01:02:03 2025 GMT
Subject: CN=0cf7276d03bba680386ac217efe9944f881e2244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:df:73:bc:3a:62:f5:97:49:62:6e:18:d5:
48:03:8c:41:f8:11:df:ff:8d:76:56:22:95:d4:f4:
fa:83:fb:b1:cf:dd:9f:50:4b:14:d2:17:b9:b7:c7:
65:af:f6:38:f9:b0:1e:a2:37:0c:95:81:3b:fe:1d:
3f:fa:8d:c5:a8:9d:ed:01:62:c9:0e:5f:55:0c:b8:
ad:6c:16:c5:d7:0a:7f:fc:2c:2d:48:f2:5e:c5:f3:
cf:fa:20:22:33:9d:7b:12:fc:91:08:2b:a3:e9:b8:
ec:c1:9e:51:22:97:2f:45:28:42:d8:9c:12:c4:e4:
2a:4a:37:25:7c:1d:58:0a:63:54:33:e1:e6:8c:be:
46:c2:df:d8:bc:ae:1d:67:db:0d:69:7c:76:aa:1c:
26:ec:93:8c:12:60:75:67:8c:65:41:26:fb:78:df:
d2:91:ef:12:fc:f0:5e:21:d6:e8:cd:52:e6:43:14:
8e:06:d5:1a:d5:7e:d9:ca:92:4a:88:be:bc:ae:bf:
20:21:ee:49:89:5e:59:71:7a:d6:03:01:15:90:fc:
4c:f9:7e:55:65:38:42:db:85:12:1e:3e:ba:e3:73:
5d:a8:37:be:a9:dd:f2:dd:83:d4:34:7e:5c:02:a1:
71:03:20:35:51:09:c6:aa:34:83:8d:43:8e:7e:9c:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F7:27:6D:03:BB:A6:80:38:6A:C2:17:EF:E9:94:4F:88:1E:22:44
X509v3 Authority Key Identifier:
keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:21:27:00:48:66:85:35:38:15:a7:b8:df:15:01:c7:89:1d:
fd:5b:50:4e:e4:8c:3b:c5:87:18:65:74:4d:4b:0b:ae:bc:75:
47:f2:53:a9:2f:59:b1:77:6c:6a:f2:01:ce:76:31:76:13:83:
03:9c:4c:aa:8f:55:b6:b1:db:a8:b7:b7:f7:da:ff:7c:a4:24:
8d:f9:1b:e6:89:46:69:ac:b9:90:f1:af:06:67:53:65:53:bf:
8c:c2:55:47:fb:a8:ed:00:5e:e9:72:7d:82:da:3a:c9:22:d1:
3a:46:0b:e2:77:10:88:e9:cc:82:ba:e7:a1:db:da:98:3e:7c:
21:ef:e1:43:81:da:8d:62:c3:96:a7:7e:cb:b8:4c:a6:68:9b:
df:9c:22:3c:4c:b5:82:68:6d:8c:aa:d7:98:dc:2f:e8:7f:f1:
bf:59:15:ee:47:f4:a4:8c:fe:42:04:48:9c:7d:2e:68:9a:9f:
df:a1:02:3a:fc:d3:e1:ba:3f:42:8d:78:22:3d:de:07:12:15:
32:8a:db:ab:df:57:f9:42:ea:e6:26:0b:ff:f1:9d:02:37:22:
63:47:ea:99:ec:e1:88:77:fc:f8:66:ef:21:fc:4d:b8:ec:07:
1e:47:6a:a5:80:c1:45:94:cf:12:8f:ec:33:71:9c:52:e1:d8:
70:a8:57:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:13 2025 by rpki-client