Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File: ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier: jZQow2X6Vmn5x1kZf79Q01niz+gGshtPE1YR/N2LQ0I=
Subject key identifier: 0A:C4:C0:39:72:13:CD:98:C4:C4:F6:FF:B6:1A:D7:C5:28:15:13:0C
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer: /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial: 0199FE47817233EDBCC525D0D1ED523B214F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number: 0654
Signing time: Sun 19 Oct 2025 21:02:03 +0000
Manifest this update: Sun 19 Oct 2025 21:02:03 +0000
Manifest next update: Mon 20 Oct 2025 21:02:03 +0000
Files and hashes: 1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: Jr4wcZl6GHayv/QGPTkWsI72f0llJ6iRoX4A6q4g9Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:81:72:33:ed:bc:c5:25:d0:d1:ed:52:3b:21:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Validity
Not Before: Oct 19 21:02:03 2025 GMT
Not After : Oct 20 21:02:03 2025 GMT
Subject: CN=0ac4c0397213cd98c4c4f6ffb61ad7c52815130c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:08:13:54:c7:7f:71:a3:67:d2:7c:2d:4d:
7a:9f:6f:4d:f2:a1:6d:ae:df:64:05:08:56:fa:6f:
dc:5c:92:62:d6:9b:2c:7c:40:eb:d4:5c:f1:68:e3:
5b:65:97:41:d7:c6:af:2b:3a:c8:bb:5a:29:a1:96:
43:dc:74:6d:cf:0d:26:89:52:5d:75:1d:bc:fb:b0:
1d:33:09:01:50:7b:ac:02:71:6e:fa:29:db:0c:9a:
f1:43:a5:c6:63:f6:95:57:e6:d2:4f:dd:fa:e7:9a:
7e:91:0d:56:6f:b3:dc:67:b6:17:f7:48:8a:ab:df:
f7:e9:61:52:96:cd:b2:d8:88:f7:56:29:3c:60:84:
d4:3c:eb:d2:63:3e:fe:00:b2:cb:26:c3:a2:24:55:
83:65:f7:9b:6e:a5:d9:c0:4b:28:b4:e3:82:9b:35:
9d:94:2d:8b:05:f6:64:ba:5e:ac:f5:08:06:55:1e:
02:33:a7:bb:c0:3c:58:e2:e9:40:f7:ee:a4:4d:1b:
5f:d2:64:8f:2a:db:4a:30:be:3e:30:3c:81:df:f6:
ba:db:28:f4:c4:cb:9e:38:77:b8:4e:4b:de:8a:31:
7f:63:aa:72:75:58:0e:cd:4d:68:3a:e3:e1:92:68:
9f:4b:7b:c2:fe:ca:af:a7:5e:5c:29:9b:db:15:05:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:C0:39:72:13:CD:98:C4:C4:F6:FF:B6:1A:D7:C5:28:15:13:0C
X509v3 Authority Key Identifier:
keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d2:19:51:3c:3c:26:c0:c4:ec:c6:bb:b0:97:c6:6a:7f:bc:
84:2b:67:a5:d0:e6:75:a9:d3:68:a5:54:2a:62:9a:03:3d:1d:
0a:8a:00:dc:e5:8a:a0:45:6b:55:81:2d:33:37:60:0e:c3:99:
39:44:bf:cd:11:7e:3b:6a:75:b2:b5:6a:fa:17:48:37:11:85:
fa:81:dd:6d:ad:e7:6e:d7:25:13:a3:84:74:5f:c6:a6:d5:15:
cd:e9:19:06:b7:96:88:6a:35:5c:a8:3f:9a:71:7d:6c:30:49:
6c:8d:88:2b:ab:1d:f0:e4:15:aa:fb:43:9f:f2:9c:6a:b1:4a:
0d:fd:19:0a:5e:ee:2d:63:c0:8b:9f:6a:87:3a:ae:df:f7:bd:
be:54:24:52:89:e1:f9:dc:43:b5:54:4b:f6:f1:56:4a:a6:d4:
71:6e:7d:6d:7b:ec:f8:cd:02:35:2e:db:f2:06:31:1f:aa:7f:
50:bb:6f:a0:91:33:8a:6e:77:3b:02:89:83:25:ee:82:55:7d:
c9:55:f4:a1:13:be:fa:0d:6e:f5:cf:6a:a7:61:90:d4:96:41:
24:bf:68:a7:f1:74:41:b6:9c:23:c5:4b:2d:de:aa:00:c0:01:
b6:7c:d2:03:5f:59:63:ad:7b:2b:79:13:88:93:5d:12:4d:de:
14:e9:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:44 2025 by rpki-client