Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: WWoctqeIPj1hqyG3YGS4Xhv3b2emirk2WYySFUInoGU=
Subject key identifier: FF:9B:D3:99:EB:BB:82:13:2C:E1:6A:D4:10:40:97:2A:A5:DB:8F:0E
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 0198D54E316E63E343DD96603C3B9E5F64D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 0FDF
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: u+myWju2v94ffZbVEEtcdYMMIBX50azQJfqz80BfNbY=)
2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:31:6e:63:e3:43:dd:96:60:3c:3b:9e:5f:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=ff9bd399ebbb82132ce16ad41040972aa5db8f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:1e:12:16:4e:09:4e:91:53:04:da:ef:54:
35:ae:e4:63:3d:d9:f1:31:17:09:96:95:a5:23:c7:
bb:a0:76:64:c0:ee:b8:32:94:dd:20:ff:10:44:3c:
ce:35:27:16:22:cb:69:f2:ed:f2:05:ec:9d:a4:56:
c5:7d:8c:2b:9e:41:24:73:4a:1a:d2:2f:b5:31:a5:
02:81:85:19:10:6e:81:c7:1a:92:11:d3:5f:17:d4:
39:bf:18:23:3d:21:9a:97:33:bd:66:5e:6f:28:18:
16:f2:86:83:4d:d5:5b:58:d8:5b:37:18:bc:a0:6a:
63:d3:80:33:22:f9:82:b7:dc:b3:57:ae:b5:bc:15:
fe:69:c6:dc:b0:92:fe:23:8d:5d:a7:d7:e8:66:63:
08:a8:47:a0:eb:d8:77:7e:13:ef:21:09:d4:76:d3:
21:b9:e7:82:2e:65:b0:0a:3b:f9:69:24:51:ee:1f:
bc:23:e8:af:d6:39:66:f7:51:18:6f:13:10:a8:b4:
4b:df:67:54:48:89:0e:77:44:28:e1:83:3a:81:4f:
88:e7:c5:33:13:6b:71:62:94:86:27:cd:9c:4e:c9:
6a:51:fe:db:40:ba:b8:48:58:39:72:db:77:ee:ac:
56:b1:ca:c4:ac:0f:78:b8:5f:50:af:49:82:ba:fe:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:D3:99:EB:BB:82:13:2C:E1:6A:D4:10:40:97:2A:A5:DB:8F:0E
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0e:fc:63:e3:dc:b4:28:19:38:4a:fe:a4:26:1e:39:41:e9:
d7:65:bd:47:e3:41:03:5f:17:6e:4c:ee:ab:77:ce:c0:7d:f2:
92:2f:d6:70:04:cf:dc:be:57:2c:5d:dd:c5:33:1c:0d:3a:23:
8d:ab:00:ad:ff:d8:71:13:1b:48:f6:b7:bc:17:2d:e0:c6:56:
36:e0:0c:14:46:54:d3:07:0f:b5:08:ac:cb:c1:9b:4c:5b:29:
cd:af:bb:63:f9:97:3e:12:3c:90:d9:0d:ef:c7:0d:ef:06:2e:
bb:e2:8a:c2:71:93:ad:c1:35:67:f1:1a:44:ca:70:71:5e:12:
e9:39:0d:77:b1:57:c5:c6:8f:d8:a9:5e:bd:50:dc:59:e6:d5:
24:7c:15:40:6d:05:fa:39:cf:8a:5d:53:31:b3:c5:1f:bc:03:
4f:3b:e1:68:cc:5f:47:17:9e:e0:8f:95:ad:1d:82:71:b3:e8:
6a:26:c8:4f:82:ae:e0:cb:bd:d5:76:d8:c9:b8:6b:8c:65:5a:
ec:92:57:e0:5d:50:4f:8d:1c:1d:34:dd:e7:92:e9:ad:fd:0f:
b5:c0:ec:07:6f:62:f7:c0:ff:f1:35:54:e8:c2:42:0c:3b:0f:
29:e1:41:68:6c:59:61:b8:89:c5:55:bd:31:fd:e1:90:5b:f9:
54:19:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:59 2025 by rpki-client