Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: f/ZHdy4G6ZNiKwzTMvH2OqGphyptTjZEszoxcakjgxQ=
Subject key identifier: 69:65:B6:83:86:A1:AD:ED:E2:32:13:EE:72:20:DD:82:C4:A7:C1:2C
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 0199FBEB8773378991D6DC92DB7B8D5C00A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 0A73
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: ZPK3mItV8lTV6isaajIj90b0U5CfbC4iZMn/PUjOhN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:87:73:37:89:91:d6:dc:92:db:7b:8d:5c:00:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=6965b68386a1adede23213ee7220dd82c4a7c12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:3e:1b:82:5f:58:b9:ab:39:4a:97:3a:ae:
18:1d:3c:d5:97:38:84:34:de:11:81:12:76:37:a2:
57:b5:42:9e:46:2a:58:88:c0:14:49:a7:f2:3a:e0:
0f:39:f6:66:a4:40:60:6a:83:a2:62:f2:46:f9:f9:
e2:c8:94:62:23:0b:ad:52:9d:b8:6d:31:09:df:33:
b1:31:61:c8:38:5c:70:ab:75:df:8e:36:4c:2d:13:
fa:2e:6a:d0:b9:f4:a2:3b:e5:80:19:c2:ee:e8:cb:
77:a2:ed:4f:eb:1d:ad:d2:d3:49:47:94:9c:ef:75:
db:94:39:6c:de:2e:ad:79:a9:e4:2c:45:f6:4a:d6:
f9:96:3e:d5:cc:5f:ae:f4:63:b0:8f:95:70:1a:d3:
23:41:9a:9a:11:14:ec:e1:10:bc:1e:6e:5f:85:c5:
31:37:65:72:97:5a:20:c8:5c:51:a5:0f:fe:9f:a5:
8e:5d:35:53:c1:63:02:8e:a0:cd:cd:69:36:e2:45:
81:7f:a3:ab:c4:11:0d:18:0d:de:d5:9b:5e:f6:3c:
f2:9f:89:0c:ef:ea:c0:49:96:7f:e6:9a:1a:33:c9:
38:32:42:e9:98:c7:92:3c:55:b3:18:4c:84:10:5e:
10:86:0f:15:ee:da:7b:f5:03:25:51:26:b2:b6:54:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:B6:83:86:A1:AD:ED:E2:32:13:EE:72:20:DD:82:C4:A7:C1:2C
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cf:57:8a:36:94:a3:78:77:59:8b:fd:43:9a:26:8f:64:fb:
8c:77:6f:34:f7:e0:2d:bc:47:60:da:f2:8d:ba:af:d3:2a:90:
7a:95:d4:41:94:fe:6d:a5:d7:86:4c:40:c5:71:40:5a:ba:7d:
13:09:b7:38:cd:a5:39:81:40:bf:c7:31:da:d8:07:a9:2f:c9:
04:4f:fa:a5:2f:b0:01:3d:c9:cd:90:c5:b7:f9:7a:d1:8e:a9:
34:82:a2:6c:d1:d5:f0:6e:a0:97:9a:f5:61:60:07:c8:48:7b:
50:35:32:2d:61:1f:8c:d5:6b:e0:96:67:35:f7:a5:12:1d:e3:
42:14:98:64:f7:54:d3:12:53:0b:5c:2b:6a:25:c9:02:d6:5e:
1c:7e:7f:86:2c:59:5c:6f:cb:e7:0d:10:d0:39:c3:95:a8:9a:
2c:e9:34:31:3a:c9:62:f9:00:54:b8:c0:fe:5a:16:9d:e7:00:
35:38:51:6a:0d:e3:08:03:e4:91:7b:2b:04:6b:0b:ec:d2:2f:
a4:be:46:dd:07:03:b3:da:8e:e6:d5:a2:fb:0c:54:88:e1:a3:
27:ce:b7:9e:20:99:f6:eb:ac:ea:91:96:65:be:5e:c7:83:bc:
08:b8:d0:f0:25:06:6b:39:57:89:50:fc:d2:65:11:a1:35:4c:
57:9d:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:18 2025 by rpki-client