Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: ou8je/NJ5BKXOV3YRQC8HxonxC+9aPHzYhvHbwLPkKg=
Subject key identifier: AA:E6:A1:FD:EA:94:56:48:5F:1B:33:FF:8C:FE:62:05:28:F9:E3:B0
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 0199FC8F60A84BAF3CA0F326AB4B45B5B2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 056D
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: 09dHm2J+LE7oD3DGaFFxqYxfXPOuDFVKHSgmmouD7C8=)
2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:60:a8:4b:af:3c:a0:f3:26:ab:4b:45:b5:b2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=aae6a1fdea9456485f1b33ff8cfe620528f9e3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:f6:d2:2a:e2:5c:0a:00:2d:b2:4c:84:0f:
c5:f1:5b:aa:fe:5b:5c:a0:05:c3:57:47:27:34:1e:
b0:ee:6b:6f:01:36:c9:64:96:0a:fd:3d:a8:2d:11:
02:0c:8a:16:89:e0:f4:54:4c:f5:aa:88:3f:2c:0f:
2f:37:2e:c1:a3:ff:bd:3e:3a:86:bb:dd:5d:14:b1:
92:d3:ab:28:47:9a:32:e4:64:aa:5f:89:e9:08:5a:
a3:52:42:21:21:bc:08:1d:d7:bd:65:d7:12:c4:46:
28:19:d8:fb:ea:d8:eb:bf:94:6f:f7:46:18:22:34:
f4:ec:44:5e:06:69:13:27:dd:42:d0:15:63:92:2b:
cc:ec:f2:3b:07:59:44:bf:c7:b2:c0:e3:a0:85:74:
7c:23:64:19:9e:c8:e8:8a:23:59:04:c9:90:25:5b:
56:bc:de:b0:0d:c3:40:7c:3a:2b:64:09:4d:fa:5e:
6e:de:34:d5:77:2f:a9:6f:e1:e6:21:60:ca:f5:b1:
d8:de:f4:45:19:6c:0f:60:17:ea:12:56:03:59:bd:
c8:0c:e7:3b:af:e9:84:f9:a4:de:64:e0:bf:2d:13:
d2:a0:bf:67:f1:fb:77:43:e3:b8:53:e6:07:94:80:
e2:5d:2a:bd:ef:9f:91:8d:0a:e3:48:c9:f6:77:23:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E6:A1:FD:EA:94:56:48:5F:1B:33:FF:8C:FE:62:05:28:F9:E3:B0
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cc:a9:46:7c:a3:eb:68:c1:7c:3f:9b:5b:26:4c:bc:ba:0f:
01:73:5c:d8:80:57:e6:ba:4e:3c:3d:10:15:12:18:0e:69:06:
54:cd:a7:a4:f8:aa:2e:4c:a8:a4:93:14:32:7a:c6:f7:a6:ec:
5e:ea:b7:83:2a:cf:aa:de:89:2f:c7:ca:8b:2e:35:1f:61:b4:
c7:33:76:a9:a0:fb:44:99:cc:82:0e:3f:ec:bd:e0:f4:43:77:
d8:2f:c7:1b:9d:86:e5:13:c3:d5:4e:12:7b:db:07:0a:b9:94:
14:e6:bf:ee:b4:3b:da:10:16:ae:c8:f8:56:32:64:d8:2b:3a:
fe:9d:f5:46:09:2f:b4:53:64:e2:e9:63:eb:b6:70:60:10:1a:
48:9a:e2:1c:b8:ca:15:93:4b:2a:55:b6:7e:e6:63:14:67:4b:
88:3e:7b:60:37:07:d4:f7:e2:b0:04:a6:53:d1:b1:03:5a:b8:
99:9a:f4:9a:12:bc:5d:ac:fe:ab:7f:c1:94:cf:cf:c0:27:76:
8b:dc:fa:9d:34:26:6e:35:74:ed:10:39:f8:41:1b:f1:ab:be:
58:f7:17:ee:87:00:b4:1f:95:55:e5:f0:34:d9:12:2d:8a:4b:
fa:43:7f:b5:ff:96:22:50:24:83:30:98:ce:da:df:bb:9d:40:
3a:eb:fc:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2CoS688oPMmq0tFtbLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxY2JjNmU3NDRlZWY5YzAxNjc0MDFkNTZjMWY5MzgwZWVm
NjQ5NDgwHhcNMjUxMDE5MTMwMTE4WhcNMjUxMDIwMTMwMTE4WjAzMTEwLwYDVQQD
EyhhYWU2YTFmZGVhOTQ1NjQ4NWYxYjMzZmY4Y2ZlNjIwNTI4ZjllM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ej20iriXAoALbJMhA/F8Vuq/ltc
oAXDV0cnNB6w7mtvATbJZJYK/T2oLRECDIoWieD0VEz1qog/LA8vNy7Bo/+9PjqG
u91dFLGS06soR5oy5GSqX4npCFqjUkIhIbwIHde9ZdcSxEYoGdj76tjrv5Rv90YY
IjT07EReBmkTJ91C0BVjkivM7PI7B1lEv8eywOOghXR8I2QZnsjoiiNZBMmQJVtW
vN6wDcNAfDorZAlN+l5u3jTVdy+pb+HmIWDK9bHY3vRFGWwPYBfqElYDWb3IDOc7
r+mE+aTeZOC/LRPSoL9n8ft3Q+O4U+YHlIDiXSq975+RjQrjSMn2dyM2GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrmof3qlFZIXxsz/4z+YgUo+eOwMB8GA1UdIwQY
MBaAFAHLxudE7vnAFnQB1Wwfk4Du9klIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTIt
OWUyZGEzN2I0MTllLzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTItOWUyZGEzN2I0MTll
LzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMypRnyj
62jBfD+bWyZMvLoPAXNc2IBX5rpOPD0QFRIYDmkGVM2npPiqLkyopJMUMnrG96bs
Xuq3gyrPqt6JL8fKiy41H2G0xzN2qaD7RJnMgg4/7L3g9EN32C/HG52G5RPD1U4S
e9sHCrmUFOa/7rQ72hAWrsj4VjJk2Cs6/p31RgkvtFNk4ulj67ZwYBAaSJriHLjK
FZNLKlW2fuZjFGdLiD57YDcH1PfisASmU9GxA1q4mZr0mhK8Xaz+q3/BlM/PwCd2
i9z6nTQmbjV07RA5+EEb8au+WPcX7ocAtB+VVeXwNNkSLYpL+kN/tf+WIlAkgzCY
ztrfu51AOuv8pw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:11 2025 by rpki-client