Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: bq4yF9GTqLbd2zZQ4+L7EGM7PNSINhDIJFeyicrc+n0=
Subject key identifier: EB:06:A3:5E:43:3E:AA:46:41:4D:64:21:3E:8E:65:A8:0F:E0:4E:F0
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 0196C04B04F1E9A99C92B7C6106AE55C8955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 0ECB
Signing time: Sun 11 May 2025 17:01:03 +0000
Manifest this update: Sun 11 May 2025 17:01:03 +0000
Manifest next update: Mon 12 May 2025 17:01:03 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: TgljdT7ACiIz6BTA36gi4phdUBx3CeeLZ3Fo5MN/aDg=)
2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:04:f1:e9:a9:9c:92:b7:c6:10:6a:e5:5c:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: May 11 17:01:03 2025 GMT
Not After : May 12 17:01:03 2025 GMT
Subject: CN=eb06a35e433eaa46414d64213e8e65a80fe04ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:07:90:9f:e8:46:9f:f2:62:52:2c:b8:00:
ab:0f:49:1a:00:0b:a9:26:4b:bc:c3:28:42:70:37:
fa:42:ae:3c:1b:54:69:d7:f4:ab:b6:f8:ae:a1:0d:
b5:2f:fb:e4:7f:66:9f:91:4e:82:bb:12:9e:5e:89:
00:dd:34:14:aa:f5:5e:46:4e:53:06:3e:4b:6d:94:
e6:37:7f:b3:0a:7e:0c:16:82:7b:8f:c0:8d:fc:b2:
1e:cf:5c:1f:77:98:59:94:85:95:cc:bf:01:3d:2a:
2e:b3:b1:ca:77:df:c4:8a:95:b2:f9:53:81:2b:42:
6c:e0:58:6b:ac:a4:c5:5e:86:3b:49:99:24:43:31:
6c:a7:8a:8e:78:ae:8c:97:31:13:35:38:64:eb:be:
d8:6e:b1:18:29:c5:c1:54:55:4e:21:e8:f5:a2:58:
a3:47:2e:d0:23:c6:4f:97:99:e0:eb:de:d1:77:8f:
51:8f:62:f0:bb:09:ff:b6:68:a7:84:49:2e:9c:88:
44:01:86:94:fe:47:08:4a:f9:13:28:1b:a6:e2:1b:
74:99:e7:d5:99:dd:79:d8:c5:8b:9d:da:c6:70:c9:
98:1d:cd:2f:d3:cd:4b:4b:01:af:33:79:0d:83:ec:
2a:97:f6:35:69:54:fe:7b:ad:40:90:da:9f:b9:2b:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:A3:5E:43:3E:AA:46:41:4D:64:21:3E:8E:65:A8:0F:E0:4E:F0
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b2:17:ed:0a:4d:80:4e:32:97:4d:56:61:72:5f:d2:a8:d8:
0d:09:02:cd:5c:f2:53:a9:42:8a:20:25:ff:d6:0d:8a:a3:4c:
90:e5:cc:19:a9:f0:cd:19:17:e6:c7:78:1c:7e:c9:5c:cb:05:
cb:90:77:63:d7:f4:99:65:8b:9b:d3:18:0f:19:fc:87:34:ff:
10:9a:09:80:df:b5:d7:af:44:db:c2:03:0f:17:8b:8c:37:8a:
e0:b3:c0:67:fc:90:4f:dc:5c:ea:13:b1:91:7f:8c:25:b8:27:
35:18:9b:b4:17:66:53:0a:5e:d8:24:0e:fb:58:65:91:9c:bc:
2e:b9:18:a5:8f:db:ae:d7:3d:cb:2a:99:e9:f4:8c:19:40:71:
b9:fb:8e:d0:2d:67:2b:a7:8b:45:df:01:98:ab:a5:a1:7e:3d:
64:48:bd:1e:c0:01:5c:29:10:cc:f3:2a:75:3c:44:f1:bd:33:
3b:75:be:1f:57:65:2e:57:c3:38:43:84:99:c1:3d:c2:f6:08:
bb:ec:b7:b1:94:9c:5c:e5:29:d0:e5:cb:3e:14:c7:18:e6:88:
5e:fe:5e:b0:8f:9d:5e:87:8b:42:5a:40:15:1d:69:73:7a:af:
0f:89:7d:ae:c7:e5:f6:54:52:6a:72:1e:fa:5e:93:2d:e5:3a:
a2:cb:1c:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASwTx6amckrfGEGrlXIlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzI4NjNhNjQzOGIzNDAyNzUyYTQ3NDBlOTBjZTQyZWI1
ODkxMjkwHhcNMjUwNTExMTcwMTAzWhcNMjUwNTEyMTcwMTAzWjAzMTEwLwYDVQQD
EyhlYjA2YTM1ZTQzM2VhYTQ2NDE0ZDY0MjEzZThlNjVhODBmZTA0ZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTEHkJ/oRp/yYlIsuACrD0kaAAup
Jku8wyhCcDf6Qq48G1Rp1/SrtviuoQ21L/vkf2afkU6CuxKeXokA3TQUqvVeRk5T
Bj5LbZTmN3+zCn4MFoJ7j8CN/LIez1wfd5hZlIWVzL8BPSous7HKd9/EipWy+VOB
K0Js4FhrrKTFXoY7SZkkQzFsp4qOeK6MlzETNThk677YbrEYKcXBVFVOIej1olij
Ry7QI8ZPl5ng697Rd49Rj2Lwuwn/tminhEkunIhEAYaU/kcISvkTKBum4ht0mefV
md152MWLndrGcMmYHc0v081LSwGvM3kNg+wql/Y1aVT+e61AkNqfuSvGDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsGo15DPqpGQU1kIT6OZagP4E7wMB8GA1UdIwQY
MBaAFAHChjpkOLNAJ1KkdA6QzkLrWJEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQt
YjU0MDU4MzRmMGM1LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQtYjU0MDU4MzRmMGM1
LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLIX7QpN
gE4yl01WYXJf0qjYDQkCzVzyU6lCiiAl/9YNiqNMkOXMGanwzRkX5sd4HH7JXMsF
y5B3Y9f0mWWLm9MYDxn8hzT/EJoJgN+1169E28IDDxeLjDeK4LPAZ/yQT9xc6hOx
kX+MJbgnNRibtBdmUwpe2CQO+1hlkZy8LrkYpY/brtc9yyqZ6fSMGUBxufuO0C1n
K6eLRd8BmKuloX49ZEi9HsABXCkQzPMqdTxE8b0zO3W+H1dlLlfDOEOEmcE9wvYI
u+y3sZScXOUp0OXLPhTHGOaIXv5esI+dXoeLQlpAFR1pc3qvD4l9rsfl9lRSanIe
+l6TLeU6osscQQ==
-----END CERTIFICATE-----
Generated at Mon May 12 00:22:19 2025 by rpki-client