Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
File: AC428C8EED241857F73D0F3D483ABECB240519D0.mft (raw, json)
Hash identifier: gKVi47H5VX9nKvyAHX8FQ+n6QStVB5lYQxvm9go6RXg=
Subject key identifier: AA:14:19:2F:9B:F3:BE:51:36:84:8E:28:5D:EB:88:3A:9A:F3:49:F9
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Certificate issuer: /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial: 06EA22000E1F547AD72A34CABE7A7059BE522011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
Manifest number: 0320
Signing time: Sat 28 Jun 2025 11:09:09 +0000
Manifest this update: Sat 28 Jun 2025 11:04:09 +0000
Manifest next update: Sun 29 Jun 2025 11:11:09 +0000
Files and hashes: 1: AC428C8EED241857F73D0F3D483ABECB240519D0.crl (hash: lXqBQKwxcsbI4gHsBPGBMaRvR55Ukowh+06WnYNM2Ek=)
2: 3139352e3139312e34392e302f32342d3234203d3e20383334.roa (hash: tAX3Go3Y1oszntsjkGYjvxyMi+6BW1lc0B/JhqET5Wk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ea:22:00:0e:1f:54:7a:d7:2a:34:ca:be:7a:70:59:be:52:20:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
Validity
Not Before: Jun 28 11:04:09 2025 GMT
Not After : Jun 29 11:11:09 2025 GMT
Subject: CN=AA14192F9BF3BE5136848E285DEB883A9AF349F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:e5:4b:aa:07:22:9c:00:23:d3:61:3d:dc:
10:be:d0:94:26:87:0b:92:37:21:91:29:5d:97:e4:
18:ae:5d:54:5c:b7:14:48:92:28:ee:f9:3b:91:c0:
89:ec:13:f1:93:de:42:c7:36:2a:c9:c9:a2:f8:b8:
72:19:80:c2:a7:95:a7:68:2e:cb:b3:92:f9:05:b0:
3b:36:ea:3e:e2:57:f9:45:73:9d:ed:e0:91:e8:46:
59:88:b3:23:07:63:43:7d:5b:2d:52:6b:48:7c:b8:
b8:68:54:22:4d:a2:94:0b:c4:99:6e:9d:0a:63:16:
2c:52:1d:7e:6a:e6:e1:1d:0b:6a:d6:56:56:df:a1:
11:b0:6c:de:49:f0:b7:99:53:76:6b:09:a1:2c:54:
59:3a:6e:ed:8b:b6:6d:4e:f4:95:96:33:54:91:63:
7b:39:52:10:8c:97:54:8b:86:d4:1c:39:3a:38:5d:
49:31:fd:b9:b9:b3:98:1a:8f:da:fb:5f:34:77:73:
4f:e0:2f:04:3c:6b:10:63:3f:10:c1:6b:ff:db:88:
fd:51:3e:61:c7:dd:cf:0d:c0:55:d8:fb:28:bf:db:
ae:a3:fb:0c:8a:58:86:5a:ad:df:9e:36:49:30:4c:
94:f4:2c:9a:73:5d:c7:c4:b3:94:cb:47:b5:f4:d2:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:19:2F:9B:F3:BE:51:36:84:8E:28:5D:EB:88:3A:9A:F3:49:F9
X509v3 Authority Key Identifier:
keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c3:77:d0:cb:4d:41:80:5a:3f:9f:e6:a0:9e:91:dc:a6:7a:
b9:95:63:67:6d:11:6f:3c:96:be:c1:58:c9:ae:24:52:71:17:
fa:33:73:e0:25:cb:99:1a:43:59:6d:af:03:3c:4f:37:83:80:
bb:e5:99:0a:d1:0d:fe:ed:15:fe:88:97:09:00:0c:27:9a:13:
1a:bb:68:04:fa:6b:6f:0a:91:f4:7c:82:8d:4a:e1:c3:e9:7c:
9b:ec:62:e9:96:ff:19:18:9c:d4:f2:4e:94:ab:0f:47:e2:43:
67:83:68:cd:9e:43:29:de:9d:9f:9b:7d:57:a0:04:2f:f5:0d:
1a:c1:b5:05:c5:50:36:25:2b:f3:48:06:ef:26:a8:09:3f:22:
33:e2:80:ae:dc:3e:6d:80:d3:32:49:c3:18:43:a4:80:db:05:
48:7e:a4:08:ce:b8:07:03:b3:3c:30:65:55:3b:68:bb:03:a9:
02:ac:a5:30:d5:df:e1:b6:03:4c:9a:24:de:23:f5:64:46:51:
92:0b:b1:f8:c6:42:8c:71:56:2d:8b:3e:e7:de:05:6b:f7:d0:
0c:60:e5:42:0c:ea:f1:42:7e:27:ad:ff:97:e0:0c:ed:69:02:
e1:b6:32:4c:6b:86:43:1f:d2:8a:26:5b:9e:3b:09:bc:f5:71:
bf:74:d0:8d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBuoiAA4fVHrXKjTKvnpwWb5SIBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWM0MjhjOGVlZDI0MTg1N2Y3M2QwZjNkNDgzYWJlY2Iy
NDA1MTlkMDAeFw0yNTA2MjgxMTA0MDlaFw0yNTA2MjkxMTExMDlaMDMxMTAvBgNV
BAMTKEFBMTQxOTJGOUJGM0JFNTEzNjg0OEUyODVERUI4ODNBOUFGMzQ5RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuReVLqgcinAAj02E93BC+0JQm
hwuSNyGRKV2X5BiuXVRctxRIkiju+TuRwInsE/GT3kLHNirJyaL4uHIZgMKnlado
LsuzkvkFsDs26j7iV/lFc53t4JHoRlmIsyMHY0N9Wy1Sa0h8uLhoVCJNopQLxJlu
nQpjFixSHX5q5uEdC2rWVlbfoRGwbN5J8LeZU3ZrCaEsVFk6bu2Ltm1O9JWWM1SR
Y3s5UhCMl1SLhtQcOTo4XUkx/bm5s5gaj9r7XzR3c0/gLwQ8axBjPxDBa//biP1R
PmHH3c8NwFXY+yi/266j+wyKWIZard+eNkkwTJT0LJpzXcfEs5TLR7X00gVtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqhQZL5vzvlE2hI4oXeuIOprzSfkwHwYDVR0j
BBgwFoAUrEKMju0kGFf3PQ89SDq+yyQFGdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTMwOWJkY2UtNzBlMy00NmFlLThmMDUtMGMzYWRhOGY4
YTQyLzAvQUM0MjhDOEVFRDI0MTg1N0Y3M0QwRjNENDgzQUJFQ0IyNDA1MTlEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JFS01qdTBrR0ZmM1BRODlTRHEteXlR
RkdkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xMzA5YmRjZS03
MGUzLTQ2YWUtOGYwNS0wYzNhZGE4ZjhhNDIvMC9BQzQyOEM4RUVEMjQxODU3Rjcz
RDBGM0Q0ODNBQkVDQjI0MDUxOUQwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMN30MtNQYBaP5/moJ6R
3KZ6uZVjZ20RbzyWvsFYya4kUnEX+jNz4CXLmRpDWW2vAzxPN4OAu+WZCtEN/u0V
/oiXCQAMJ5oTGrtoBPprbwqR9HyCjUrhw+l8m+xi6Zb/GRic1PJOlKsPR+JDZ4No
zZ5DKd6dn5t9V6AEL/UNGsG1BcVQNiUr80gG7yaoCT8iM+KArtw+bYDTMknDGEOk
gNsFSH6kCM64BwOzPDBlVTtouwOpAqylMNXf4bYDTJok3iP1ZEZRkgux+MZCjHFW
LYs+594Fa/fQDGDlQgzq8UJ+J63/l+AM7WkC4bYyTGuGQx/SiiZbnjsJvPVxv3TQ
jQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:02 2025 by rpki-client