Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier: r4wtPYZ7bPj+BLVpuMIn/ILyYTW8o/a6i/hWRJjCbbY=
Subject key identifier: E3:BD:40:52:A1:26:7F:D5:4E:5B:52:A0:FE:D4:FE:01:21:8F:19:9A
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial: 0198D5833CDFD2D5D141AF3309CF613498FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number: 0350
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: lg1wX5C8p/XDEMqNkhvjOICpl+Pa6XC+TqR4OQ1OVPQ=)
2: rygZTFCBNWEkh81f14PWqNNI1kI.roa (hash: Nw/ZIl2uHVeZMov8V5+Nv9xGTV5/WVlGxw5x2u+Et/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3c:df:d2:d5:d1:41:af:33:09:cf:61:34:98:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=e3bd4052a1267fd54e5b52a0fed4fe01218f199a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:40:e5:25:31:77:bf:eb:88:56:c4:cf:6e:
fd:74:77:01:df:1d:2b:f7:8b:94:0e:a1:ce:3d:1a:
c8:9b:59:e3:af:e6:76:31:ba:cc:16:16:44:6b:c7:
6a:5b:1c:fd:66:80:b9:10:02:88:61:c9:2a:a2:4b:
ea:a1:47:09:2f:3b:be:2a:f2:be:28:3e:9e:5e:3f:
63:c5:97:b4:4b:8a:82:38:75:7c:3a:8c:83:d1:42:
5c:7f:9b:2a:7d:65:1a:59:e9:0b:06:00:75:43:4c:
34:6b:42:59:8e:e7:f0:6c:18:c3:7e:00:ba:83:bc:
66:73:4d:ff:47:79:de:5d:37:f8:f0:86:9e:8f:46:
f1:45:51:c2:84:8a:a7:a0:aa:c0:60:b5:0b:50:c9:
dc:14:5d:25:7e:89:7d:f5:e5:5a:2e:2c:69:d2:24:
97:0d:8d:b2:a0:e9:c4:36:64:2e:79:98:9d:76:52:
9b:5f:11:40:c4:ba:c3:72:c8:02:24:d4:6c:5b:3e:
e3:4b:50:5e:1b:3e:e0:c9:e5:bf:c0:8e:db:1e:b5:
a5:43:67:2a:4b:92:f3:a7:3f:e7:14:fb:28:6b:c4:
56:a3:89:1b:05:cf:6f:42:78:ae:8e:a2:68:32:c1:
a4:76:1e:af:86:21:82:cd:07:6e:0f:6e:b0:db:24:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BD:40:52:A1:26:7F:D5:4E:5B:52:A0:FE:D4:FE:01:21:8F:19:9A
X509v3 Authority Key Identifier:
keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:43:cf:b2:8f:fd:6b:44:66:1f:36:3a:a3:81:2e:31:cb:79:
c1:d5:64:b0:47:d1:a1:e9:94:e1:86:13:ad:b1:fc:5e:67:2f:
35:25:4c:4f:3e:72:4a:d9:e6:2d:c5:40:33:a0:04:6e:4c:f4:
9e:68:09:9c:0c:b0:64:33:5b:2c:1f:42:87:7c:2d:de:4d:c5:
10:bb:4c:34:ee:43:7b:c2:08:d0:b4:21:a7:ff:d9:0f:d4:6a:
ef:30:89:9f:37:4d:2d:8e:66:42:d4:93:fc:90:96:84:87:a0:
cb:27:ac:60:4a:a7:ed:ac:6f:de:85:72:6e:8a:1e:c3:7c:49:
64:ea:83:ee:db:e3:27:52:b6:4b:b5:c2:12:e8:c5:91:d9:17:
dd:0e:f3:e7:ca:99:e9:86:99:d2:55:7f:2a:8f:89:11:4d:f7:
a3:0c:29:61:5e:2d:a1:57:93:eb:bd:5a:ac:3b:da:f9:9a:5b:
53:ec:07:59:50:cf:f9:c1:03:e6:40:37:d2:59:6d:4b:83:44:
8f:e0:a8:c1:41:b1:b3:7d:4a:42:5e:e1:f1:99:20:2c:2a:34:
52:f1:a2:d8:53:c9:eb:0d:71:54:5d:d9:41:eb:4d:03:ba:10:
e8:1c:78:fe:b6:95:6d:39:bf:de:ec:b1:d7:24:0e:ed:ae:ea:
e6:62:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:05 2025 by rpki-client