Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: 9dxh1V6xCoQfYxtCC6/Y/yCZL+JGXVizAtjuFMFmMeQ=
Subject key identifier: 67:2E:CB:FA:12:EB:B6:03:57:75:A9:04:B1:24:7D:7B:EF:10:08:32
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 0199FCC60B0AE04140314CEC5B2093766DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 1078
Signing time: Sun 19 Oct 2025 14:01:01 +0000
Manifest this update: Sun 19 Oct 2025 14:01:01 +0000
Manifest next update: Mon 20 Oct 2025 14:01:01 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: uWOXV1amf32NrNJSd7Qq8gEtkQeIFnx5sXPai/qCiH0=)
2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0b:0a:e0:41:40:31:4c:ec:5b:20:93:76:6d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Oct 19 14:01:01 2025 GMT
Not After : Oct 20 14:01:01 2025 GMT
Subject: CN=672ecbfa12ebb6035775a904b1247d7bef100832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:8c:bc:d5:42:c2:43:44:33:ad:64:8a:00:
a9:fd:3d:d1:2b:10:b2:42:95:56:8f:52:7b:7c:2f:
d1:87:48:a0:0a:8e:f7:0e:dd:85:69:3c:56:46:7c:
4d:29:d8:be:b9:98:5b:d0:c6:20:36:34:bc:dc:30:
d4:e3:b0:94:f0:03:b5:a1:20:53:2e:00:1d:27:54:
22:94:78:be:80:3b:0a:77:0b:b1:60:65:52:05:94:
ff:64:43:1e:7e:2f:69:5b:6f:44:24:37:95:7d:80:
03:b1:aa:a0:09:8a:bd:2b:b8:45:2b:6c:b1:18:a1:
3d:a6:58:8a:b8:ff:5e:a8:16:30:77:41:48:d8:09:
aa:08:cb:10:71:30:f5:c3:c2:b9:fb:fa:f6:11:4e:
de:6f:14:8b:2d:40:6f:93:53:e2:27:f5:60:fc:00:
87:2a:60:75:af:5c:e4:57:0b:a9:51:b1:8d:65:a2:
10:51:12:3f:b5:2b:14:61:76:13:1e:04:fd:dc:38:
8e:71:fc:3c:60:68:32:5a:e6:4a:44:c4:da:ea:67:
f5:d9:4c:23:5e:e5:10:3d:51:44:c9:16:7a:2e:ae:
aa:c8:7b:43:2a:40:74:f8:55:d1:53:e4:71:5f:84:
e9:f4:0f:0d:bb:eb:cf:05:6d:73:c7:49:f6:d6:d1:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2E:CB:FA:12:EB:B6:03:57:75:A9:04:B1:24:7D:7B:EF:10:08:32
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cf:d0:e3:b8:b4:35:86:45:d6:fc:88:c0:80:f5:82:ed:65:
de:ad:2a:80:b1:47:3b:f1:21:c2:62:c8:41:79:dd:87:a0:74:
b1:c8:e9:60:c5:9d:85:cc:08:75:58:0d:e6:f0:86:b8:8c:47:
62:f1:57:8c:b7:08:e5:34:7d:60:2e:a1:60:ab:86:94:8d:58:
0f:81:cf:15:1f:95:9b:4e:31:28:33:02:fd:44:d4:df:53:1c:
cc:af:50:35:5b:b9:bc:88:ab:99:aa:36:12:5c:8f:f2:33:8b:
d0:5f:ea:bb:d2:09:ed:da:a6:db:76:e1:76:d3:b9:5f:9d:c9:
66:d3:e5:e5:06:cd:da:3a:c0:0c:98:d4:db:c3:8b:38:b1:16:
05:b3:fc:c8:a6:0a:81:91:ec:88:e9:21:00:e4:d2:63:86:86:
5d:f6:ea:d0:22:4b:8b:b3:7d:d4:d9:4c:67:8f:ce:bf:b6:29:
46:99:08:c0:d7:5d:c4:f9:a6:52:1c:9d:5a:e7:c6:c9:6e:db:
37:8b:16:78:ed:dc:f6:1e:d8:16:2d:48:e2:1f:09:42:3b:fc:
16:96:15:da:0f:6a:ce:fa:db:37:99:6e:ea:e3:ae:61:52:13:
74:63:84:48:c5:f2:4a:63:8f:3c:79:15:b7:14:a6:23:55:6c:
86:60:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:49 2025 by rpki-client