Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier: 3BWZ4Uqg4cvgQ3epR5KOXu7VSxT8wabf1N9U010+IAE=
Subject key identifier: 17:F4:AC:26:C4:D0:9B:30:A1:3D:7B:C6:2B:88:E9:EE:5A:11:03:C8
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 0198D5F1B9BA83139F2AD59C893DD2140974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number: 0FDC
Signing time: Sat 23 Aug 2025 08:00:45 +0000
Manifest this update: Sat 23 Aug 2025 08:00:45 +0000
Manifest next update: Sun 24 Aug 2025 08:00:45 +0000
Files and hashes: 1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: 5Fx17/hTaokMP5mpeqNHK47ryR8UhFGRXQvSr1FVZq0=)
2: lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa (hash: pkORWbBvX/TB59ufAxJ53BtkrDGiG+iuAuMuYoIsXog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b9:ba:83:13:9f:2a:d5:9c:89:3d:d2:14:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Aug 23 08:00:45 2025 GMT
Not After : Aug 24 08:00:45 2025 GMT
Subject: CN=17f4ac26c4d09b30a13d7bc62b88e9ee5a1103c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:cb:aa:a4:a4:71:16:9b:1a:f5:fb:22:7e:
8b:55:7d:41:69:34:60:1b:a3:ad:b1:ee:c3:08:5a:
16:0d:71:c7:74:53:30:b6:cb:dc:d5:33:9e:9d:bf:
a0:ae:7e:74:12:b0:19:b4:8b:7d:7f:c2:be:c3:5b:
5a:8a:19:6a:17:af:ad:eb:e8:66:d7:75:58:03:9a:
41:34:8f:e7:cf:eb:83:40:9e:d3:90:46:69:2a:5d:
d3:98:a0:d7:2e:d2:4a:f5:8b:19:ac:02:ed:ec:38:
51:b5:27:da:94:fe:d5:bc:1a:a3:d7:ff:30:8d:55:
be:e5:31:8d:7d:fa:89:5d:ae:46:0b:e4:51:67:5d:
1e:85:37:27:09:78:0d:5e:2e:61:db:69:a8:55:e6:
34:1e:ab:b9:b3:0a:bf:a8:a9:d0:18:29:43:93:4d:
a4:2f:5b:52:3d:8e:b5:ac:52:1e:df:a1:4b:e5:20:
de:66:3b:9e:15:b2:24:06:99:9e:59:e1:a1:28:9a:
c8:bf:c7:84:7d:91:eb:95:2a:c9:aa:d2:13:04:4b:
92:88:be:dc:ea:68:5e:65:ae:a4:6e:c5:cc:59:1b:
b6:99:ba:11:c7:70:76:d0:f2:b1:95:cf:6a:55:e1:
ae:25:bf:ea:08:3b:fe:5f:25:8a:e4:4f:d4:55:fe:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:AC:26:C4:D0:9B:30:A1:3D:7B:C6:2B:88:E9:EE:5A:11:03:C8
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:b7:bd:ce:ec:f0:fd:6c:82:75:d5:45:fb:65:bd:35:5f:
c1:14:e8:87:8c:11:d7:b5:7a:32:f1:10:22:54:ce:73:19:0e:
c8:66:39:f3:87:71:0a:a7:b4:df:8c:4c:2d:d9:31:24:12:33:
78:0f:8d:23:0f:b8:00:87:ab:7d:9d:e7:82:8b:ef:db:5e:3f:
a9:6e:33:f2:20:e0:43:c8:6b:fc:d2:bb:a7:6b:32:85:f5:41:
e7:b3:04:2c:8d:b2:3c:fb:ff:f3:19:03:d7:ee:14:9a:51:0e:
22:45:23:13:26:90:84:e7:70:e7:63:09:2a:33:8f:ef:ba:f6:
a1:5a:37:8d:7b:fa:da:50:ab:ae:32:ca:36:d0:f0:0b:19:d8:
0d:11:a1:27:a0:89:c1:89:3c:af:82:ec:81:a8:28:73:84:81:
ef:27:8b:d7:50:b4:e3:0a:09:ad:4b:e1:f1:65:9a:4b:58:0d:
d2:45:1b:a9:75:84:97:8d:77:00:56:66:81:7a:6a:a2:7c:b7:
df:48:d2:df:5b:76:55:3b:54:e2:20:52:fc:6e:02:7e:18:74:
9c:32:30:53:c2:99:51:7e:ec:b7:48:02:7f:e7:97:73:b0:82:
99:ea:46:d4:3b:ea:25:0a:8b:b6:5f:70:c7:e5:08:7e:cf:7a:
99:f9:42:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8bm6gxOfKtWciT3SFAl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzM1MjExOGZkNWY3NTQ1NGNmYzYxYmU2MWE0MmFiZWY0
ZGM0ZjgwHhcNMjUwODIzMDgwMDQ1WhcNMjUwODI0MDgwMDQ1WjAzMTEwLwYDVQQD
EygxN2Y0YWMyNmM0ZDA5YjMwYTEzZDdiYzYyYjg4ZTllZTVhMTEwM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQHLqqSkcRabGvX7In6LVX1BaTRg
G6Otse7DCFoWDXHHdFMwtsvc1TOenb+grn50ErAZtIt9f8K+w1taihlqF6+t6+hm
13VYA5pBNI/nz+uDQJ7TkEZpKl3TmKDXLtJK9YsZrALt7DhRtSfalP7VvBqj1/8w
jVW+5TGNffqJXa5GC+RRZ10ehTcnCXgNXi5h22moVeY0Hqu5swq/qKnQGClDk02k
L1tSPY61rFIe36FL5SDeZjueFbIkBpmeWeGhKJrIv8eEfZHrlSrJqtITBEuSiL7c
6mheZa6kbsXMWRu2mboRx3B20PKxlc9qVeGuJb/qCDv+XyWK5E/UVf5zfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf0rCbE0JswoT17xiuI6e5aEQPIMB8GA1UdIwQY
MBaAFAHDUhGP1fdUVM/GG+YaQqvvTcT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81ZThhMmEtNDU3My00MzZiLTkwMmEt
ZWYwMWUxZGM3ZGFjLzEvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81ZThhMmEtNDU3My00MzZiLTkwMmEtZWYwMWUxZGM3ZGFj
LzEvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2C3vc7s
8P1sgnXVRftlvTVfwRToh4wR17V6MvEQIlTOcxkOyGY584dxCqe034xMLdkxJBIz
eA+NIw+4AIerfZ3ngovv214/qW4z8iDgQ8hr/NK7p2syhfVB57MELI2yPPv/8xkD
1+4UmlEOIkUjEyaQhOdw52MJKjOP77r2oVo3jXv62lCrrjLKNtDwCxnYDRGhJ6CJ
wYk8r4Lsgagoc4SB7yeL11C04woJrUvh8WWaS1gN0kUbqXWEl413AFZmgXpqony3
30jS31t2VTtU4iBS/G4Cfhh0nDIwU8KZUX7st0gCf+eXc7CCmepG1DvqJQqLtl9w
x+UIfs96mflCFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:24 2025 by rpki-client