Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: m8Aewbf27R2urOd8hvRdfMfQ50KcUIllPgOTVIWK53g=
Subject key identifier: 71:8B:B4:88:DD:5F:85:EE:10:1E:69:B7:7A:CD:A6:14:CC:86:9F:2C
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 0198D515705D29AD477A26CA1F3B62459A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 04D4
Signing time: Sat 23 Aug 2025 04:00:08 +0000
Manifest this update: Sat 23 Aug 2025 04:00:08 +0000
Manifest next update: Sun 24 Aug 2025 04:00:08 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: opnuvZB2hs9tfwaWXGMxQFtT6xRwiG0i65N9TJhQEKo=)
2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:70:5d:29:ad:47:7a:26:ca:1f:3b:62:45:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Aug 23 04:00:08 2025 GMT
Not After : Aug 24 04:00:08 2025 GMT
Subject: CN=718bb488dd5f85ee101e69b77acda614cc869f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:19:28:36:94:12:54:63:b7:e2:24:45:45:94:
4b:f3:12:a1:42:f5:3e:3c:4c:ca:d6:33:78:1a:0e:
1d:f9:61:61:77:1e:43:cd:49:f8:ba:44:18:f5:9b:
e0:ff:a9:9c:69:a8:81:b1:ef:49:43:8e:15:68:fd:
ee:7b:72:5c:11:e2:2c:2a:ca:88:22:e7:0d:8c:48:
76:bf:0e:52:30:0d:3c:8f:5e:44:e4:40:38:08:bf:
77:c9:b5:28:45:9d:38:17:9d:14:88:48:a2:50:bf:
bc:4b:8d:0d:e5:f1:d2:4c:b3:b0:33:46:31:c7:67:
ce:e8:96:e4:81:b0:9b:74:9f:0c:a1:0c:f3:03:2c:
e8:66:a4:43:52:28:5b:0b:55:0f:c1:f3:bd:81:f6:
61:13:ba:5c:e4:ad:1a:37:c3:0e:21:d1:74:63:85:
48:db:fb:a8:fb:04:44:ab:8b:ee:32:c3:6e:03:5c:
c5:d2:2c:d1:bb:f5:89:e6:b7:0d:8b:2c:5d:0d:82:
7a:3e:64:cf:53:af:e4:a7:25:c8:49:55:51:ae:17:
9f:8e:18:2a:bd:0a:38:32:71:ba:41:e8:13:2d:98:
e7:30:2a:63:a7:32:a3:d5:2f:4a:75:9a:00:b3:6c:
4f:90:2e:da:fc:e5:5e:b8:a3:9c:6f:bc:ba:39:bd:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:B4:88:DD:5F:85:EE:10:1E:69:B7:7A:CD:A6:14:CC:86:9F:2C
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:60:30:3c:75:d9:9d:04:ef:c3:02:57:79:87:fd:b7:60:dd:
94:71:00:87:97:09:89:45:d9:de:61:48:95:56:61:39:27:92:
84:6a:db:21:db:88:9b:f1:9f:f1:50:36:e6:c9:48:83:89:42:
11:5b:04:20:a8:38:22:19:63:99:7b:f7:3a:d5:3b:8d:9f:d7:
99:a2:e1:97:53:41:d4:43:fc:6e:4d:82:12:24:84:72:f4:39:
a6:87:de:dc:f3:02:e4:1b:c7:44:c2:c1:8e:87:1c:ee:4d:38:
7b:7f:bc:b0:49:88:f3:88:07:25:a7:30:f9:34:69:d3:48:03:
aa:29:dc:90:c7:23:fc:94:fd:25:84:9d:02:48:51:5c:86:f6:
59:6f:5e:b2:a8:a3:cd:a9:87:3f:3d:2b:49:aa:76:a6:bd:6d:
f5:6e:7a:ff:a7:e4:9a:38:bd:e0:71:57:29:1a:b6:5a:c3:bb:
d5:75:d6:d0:20:47:bf:42:c3:29:8d:39:e4:b3:68:2a:9c:4f:
f2:84:3b:cc:29:6d:64:13:4a:a9:19:30:52:b1:9a:0e:c8:75:
54:02:e8:3e:63:d4:5e:d0:42:89:53:b1:74:b6:4f:e7:1b:5a:
d4:23:55:61:88:6d:ee:22:5c:73:3c:24:b6:f2:0d:27:f6:80:
1b:c1:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:35 2025 by rpki-client