Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: DW+xgXCENr5VQWn9wfjyj55UKwvtf4mMPbd7jQ9FMh4=
Subject key identifier: D1:DA:55:C7:64:13:B8:50:EA:87:B7:EE:7A:E1:9E:18:9B:F4:FC:21
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 0199FFC7F4499C37C69CE8DD3A8FEA791A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0D14
Signing time: Mon 20 Oct 2025 04:01:58 +0000
Manifest this update: Mon 20 Oct 2025 04:01:58 +0000
Manifest next update: Tue 21 Oct 2025 04:01:58 +0000
Files and hashes: 1: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: m5aYZaROBWDbkFlJaffDllRI9uGvblQLvgH36bLjMTI=)
2: F8t05KMRne3MsUcmQpBcGXGBMI8.roa (hash: d6IcpYMjJ62EgVhlSLiumFte8BB2LXTHsEgOP/d/Rss=)
3: FXe_JPwCxokWG0F8sL8Vx_t96gE.roa (hash: 9THWoynL84G88vnVxVYdONxnlu6uMlCDE+r39l01xOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:f4:49:9c:37:c6:9c:e8:dd:3a:8f:ea:79:1a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Oct 20 04:01:58 2025 GMT
Not After : Oct 21 04:01:58 2025 GMT
Subject: CN=d1da55c76413b850ea87b7ee7ae19e189bf4fc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:f3:35:20:2c:6b:01:b4:7e:37:f8:dd:4d:
da:ab:5c:cd:52:e3:e4:a4:3f:28:fd:24:f5:57:1e:
bc:0f:31:c9:46:32:d1:5f:b7:b4:ed:21:60:be:ed:
8d:34:16:a2:03:1e:c0:2b:40:fd:60:ec:0d:03:65:
fd:b0:57:2d:96:32:01:0f:48:1a:8f:ab:6b:70:1e:
2e:77:6a:c4:fe:4b:27:c4:9c:dd:a1:cc:cb:53:ce:
28:33:2f:e3:5f:23:e7:dd:05:6d:54:2a:ed:80:02:
c9:00:5e:cd:a4:f3:49:df:8e:13:53:53:a2:e0:64:
b6:7b:27:a9:b5:d8:35:71:f4:54:c5:d0:74:67:68:
a0:45:d4:07:40:9e:27:bb:8c:87:eb:31:3c:e9:ae:
b7:a8:87:9b:ac:15:96:27:72:67:b9:95:72:11:18:
57:5b:77:ae:c6:94:f1:53:e9:d3:c1:31:d3:d5:f7:
ab:c5:c9:a2:af:67:e0:10:c8:68:d6:fc:fa:dd:6e:
33:96:4e:71:79:64:7a:f1:84:a0:02:f5:30:2e:97:
16:5c:93:77:10:ab:ed:10:82:7b:d5:99:64:80:49:
cc:10:be:7b:35:dc:ae:fa:1f:a7:ea:21:c5:0f:a9:
8f:db:22:67:c3:e2:5a:d3:c3:9b:90:1b:8e:68:33:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:55:C7:64:13:B8:50:EA:87:B7:EE:7A:E1:9E:18:9B:F4:FC:21
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:14:2f:13:72:f0:e3:97:0b:6e:b7:30:80:94:55:88:8e:ec:
46:f0:0b:1e:a5:d4:8e:d0:68:38:ad:f3:88:31:c3:fc:68:09:
c6:38:e7:0f:da:5a:a0:8f:07:04:f9:d9:6c:09:e1:62:5b:3e:
11:f5:3c:6f:84:29:09:90:42:8e:4e:1e:21:5d:5d:fb:2f:f6:
41:2f:ea:04:0f:03:7a:de:b5:73:00:5c:4d:07:1b:b2:65:eb:
1b:32:9f:d4:61:97:74:1b:d2:7f:81:56:ce:cc:de:c7:13:16:
19:e1:ad:5a:f4:e5:7f:f9:7a:2f:da:dd:f3:bf:8a:ba:1f:9f:
33:cd:de:ca:dd:95:3e:36:3f:b7:79:7d:c9:fd:6e:76:c8:6c:
bb:14:3a:52:ae:c9:06:54:b6:c3:01:ce:5f:96:79:9c:8b:50:
86:00:a2:91:a8:b4:2c:a9:a4:18:4a:8d:70:6d:3c:ad:1d:91:
48:96:95:c3:06:d8:22:b6:9a:36:41:08:d1:da:12:f4:91:1c:
ec:48:ce:ec:b2:c4:7e:af:18:50:d8:20:02:63:17:51:ff:8a:
72:18:03:8b:13:7b:de:99:4d:eb:cb:e9:69:e1:ab:e0:68:3a:
39:25:f8:50:6a:1b:81:e1:5c:65:fa:8a:56:fe:3a:23:56:a2:
f6:4f:17:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:40 2025 by rpki-client