Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
File: AC428C8EED241857F73D0F3D483ABECB240519D0.mft (raw, json)
Hash identifier: 8aTqgSaBZ6DQsnGJ7MElRG0mSdfOgGfidSSdlBYU0hQ=
Subject key identifier: C6:37:01:CF:50:F5:64:9A:A3:AB:7B:84:A3:F9:3A:E5:2B:39:96:3B
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Certificate issuer: /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial: 30F31225A0354AC7C8247AED3E34A552D5BCAB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
Manifest number: 036B
Signing time: Sat 23 Aug 2025 08:42:33 +0000
Manifest this update: Sat 23 Aug 2025 08:37:33 +0000
Manifest next update: Sun 24 Aug 2025 09:55:33 +0000
Files and hashes: 1: 3139352e3139312e34392e302f32342d3234203d3e20383334.roa (hash: tAX3Go3Y1oszntsjkGYjvxyMi+6BW1lc0B/JhqET5Wk=)
2: AC428C8EED241857F73D0F3D483ABECB240519D0.crl (hash: IUViePXzoFgLKvGmCrKfiIuoGk759adzpNTgHjNaGZM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f3:12:25:a0:35:4a:c7:c8:24:7a:ed:3e:34:a5:52:d5:bc:ab:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
Validity
Not Before: Aug 23 08:37:33 2025 GMT
Not After : Aug 24 09:55:33 2025 GMT
Subject: CN=C63701CF50F5649AA3AB7B84A3F93AE52B39963B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:73:1a:a1:71:4e:42:f4:eb:b3:22:7a:77:
58:dc:14:a0:0a:7d:b7:9e:dc:35:8e:3a:2d:4c:1a:
a5:4e:4c:bc:59:8e:3c:47:50:7b:58:97:b8:6a:c1:
5b:0a:cf:e1:62:e6:78:da:85:da:c0:a8:e6:c4:f4:
57:63:6f:9f:48:a8:64:44:ac:15:0b:46:28:25:7f:
99:d8:17:81:29:4a:bb:df:c4:3c:0a:e3:54:ae:ec:
c9:5e:1f:69:42:8a:b5:53:5c:c2:77:65:38:5d:e6:
4a:46:52:51:85:14:32:7e:5a:69:55:a1:92:89:14:
5d:fc:7b:5b:2a:4c:16:e4:92:72:a9:33:5c:b8:94:
b3:71:c1:2b:74:c1:29:93:f3:f7:04:fb:2f:e5:7b:
ec:e5:51:45:88:36:0c:0b:91:71:d3:24:17:33:66:
02:b0:8c:15:c4:03:e3:e8:4e:70:28:aa:39:8a:fe:
9e:f3:00:4f:a6:9f:c8:6b:d0:ba:09:83:fc:ba:f3:
c0:23:69:44:bb:27:83:e9:b2:3f:53:cb:36:fa:28:
4a:f5:42:b2:3d:28:d9:b3:18:aa:f9:de:a2:10:15:
c6:ec:92:77:d2:9b:f4:60:8b:2c:5c:cc:28:ab:73:
fb:5e:cf:b7:a9:08:a0:f3:8e:37:67:7d:c5:c7:09:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:37:01:CF:50:F5:64:9A:A3:AB:7B:84:A3:F9:3A:E5:2B:39:96:3B
X509v3 Authority Key Identifier:
keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ad:0e:e9:7e:a0:4b:1c:25:7f:fc:8a:6b:e3:6b:94:56:95:
cc:64:22:f6:37:b6:ff:69:4c:58:34:12:be:e6:92:69:eb:e3:
bf:4a:96:3f:68:85:dc:43:02:91:bd:3e:0c:86:56:6c:18:42:
06:75:6b:90:ff:b5:d4:19:0e:b3:3d:fe:bb:69:80:0e:c8:a0:
94:15:39:3b:43:10:90:c3:a7:be:5f:44:af:78:e5:d0:05:ed:
29:c2:b4:a1:b2:ec:ae:6f:23:82:14:02:7d:5e:26:a1:e3:db:
a6:44:46:bd:03:e2:63:cb:78:c9:d1:19:88:77:ef:39:ae:0e:
a4:97:cc:ae:5f:7f:db:51:55:7b:b0:2e:b2:df:2c:50:d6:3e:
dd:64:61:20:1f:66:5a:43:15:c1:2f:f9:0f:e9:d9:49:06:cf:
9e:16:81:05:2d:5f:07:e1:7e:76:29:9c:e0:74:e1:81:5c:1d:
0b:23:8c:c9:5d:2f:b9:83:2e:a3:77:6b:ab:bc:98:a1:09:01:
bb:04:76:e6:bc:54:cb:55:b5:c6:d7:9c:e2:9f:29:a6:e8:00:
a9:fb:68:8e:e5:e0:08:68:f2:3d:5a:61:2d:f7:94:1b:ef:58:
dc:8c:9b:a5:72:f8:48:15:6b:ba:fd:e8:d8:12:4e:79:1e:61:
69:04:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:32 2025 by rpki-client