
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier: 8E+2EmRpMqKJWZz/sU4WcOiYNy6T7mBgK1OdAGKRUp8=
Subject key identifier: 90:0C:26:DC:6F:5D:1A:00:03:DB:A2:AB:58:74:59:65:37:77:A9:9F
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial: 019677FB5453E1F5DEE203A62E920026CF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 16:01:21 +0000
Manifest this update: Sun 27 Apr 2025 16:01:21 +0000
Manifest next update: Mon 28 Apr 2025 16:01:21 +0000
Files and hashes: 1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: BdUyDfdQ2WYcltWodM9qveza2s3Mig49DbkJAb26Bf0=)
2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:54:53:e1:f5:de:e2:03:a6:2e:92:00:26:cf:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Validity
Not Before: Apr 27 16:01:21 2025 GMT
Not After : Apr 28 16:01:21 2025 GMT
Subject: CN=900c26dc6f5d1a0003dba2ab587459653777a99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:72:8b:75:b5:4d:95:cc:f3:79:35:4e:b6:
5d:9a:72:4f:1c:7d:82:23:47:b5:87:42:08:5c:da:
be:84:01:59:8c:f5:28:79:39:53:08:8e:db:c6:78:
81:21:5c:69:56:f4:35:58:3b:5c:82:e0:f8:90:14:
7c:92:e5:cd:27:b0:c3:df:b5:e8:df:f6:0f:a1:b7:
02:37:bb:32:15:15:dc:52:b6:b9:51:cf:0b:27:8b:
c9:be:36:78:62:f5:b8:6a:38:c8:e3:38:09:27:45:
be:8a:e0:87:fc:8b:ec:a1:a5:e7:a4:cf:38:03:f9:
c1:fa:62:35:6d:fb:26:c8:eb:b3:fe:9a:f1:ad:d5:
f8:20:f4:57:2a:59:76:68:a6:b4:e0:52:a3:1b:0e:
f1:7b:83:ba:d1:50:07:ee:ed:ae:10:de:ce:31:62:
f0:2f:dd:96:e2:86:41:ee:b0:69:92:fd:d2:3c:66:
d9:50:3a:f0:4e:aa:fa:6f:fb:71:73:2a:6d:2f:50:
ae:75:31:fc:4b:b8:86:d4:f2:42:9a:ce:11:6d:f8:
c0:18:54:84:ad:a8:2b:af:04:41:07:3c:21:1e:d2:
a3:ec:a8:1e:ff:89:b8:45:3b:4b:3e:be:7e:d6:d7:
16:12:8b:3c:7f:da:d7:50:dd:71:9a:a5:00:98:6e:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0C:26:DC:6F:5D:1A:00:03:DB:A2:AB:58:74:59:65:37:77:A9:9F
X509v3 Authority Key Identifier:
keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:61:cc:69:b7:29:d4:de:5c:b3:f2:02:8f:7a:d7:a8:e6:bf:
ee:08:fb:06:9e:b5:3d:67:39:5e:db:b1:20:9b:af:67:19:9c:
cd:a2:fe:32:c6:e0:35:a5:68:7d:8b:c6:70:05:00:5d:c3:dc:
05:d9:a4:60:5a:94:be:f0:0f:04:42:f0:6f:3f:f2:72:04:0a:
cd:92:73:fd:2f:93:de:b0:51:b0:72:00:30:7b:be:85:66:b3:
87:25:80:18:d3:52:d6:0c:01:f1:3e:e1:cc:fc:0d:73:b9:0f:
5e:af:82:fc:5c:16:88:df:32:f2:19:67:c6:f1:ac:09:0f:41:
f2:e4:63:6b:0b:da:e5:55:a9:58:26:83:e2:1c:62:c9:a8:8a:
4f:78:8e:3e:40:fd:c0:98:aa:c3:a6:1e:8a:34:5b:71:66:14:
7b:11:35:26:10:0c:0f:0f:7f:14:86:7c:3a:8a:9d:39:df:1c:
b2:7b:93:6d:14:25:51:3a:3b:4e:aa:95:e1:58:66:42:96:58:
c2:59:9a:c6:35:b9:43:5d:f6:8e:4b:cd:cb:1b:2c:6c:69:2d:
da:54:47:7d:2d:03:44:71:71:52:e4:a8:da:08:72:89:8c:d8:
81:eb:ef:cc:07:72:82:ff:4d:45:e3:5f:e0:bb:cc:90:03:df:
ca:5a:69:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+1RT4fXe4gOmLpIAJs+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjQzNGM3M2EwZWVhMjJjNmU0NDEwNzJlOTNkYjc3Yzdl
OGEyZjEwHhcNMjUwNDI3MTYwMTIxWhcNMjUwNDI4MTYwMTIxWjAzMTEwLwYDVQQD
Eyg5MDBjMjZkYzZmNWQxYTAwMDNkYmEyYWI1ODc0NTk2NTM3NzdhOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1upyi3W1TZXM83k1TrZdmnJPHH2C
I0e1h0IIXNq+hAFZjPUoeTlTCI7bxniBIVxpVvQ1WDtcguD4kBR8kuXNJ7DD37Xo
3/YPobcCN7syFRXcUra5Uc8LJ4vJvjZ4YvW4ajjI4zgJJ0W+iuCH/IvsoaXnpM84
A/nB+mI1bfsmyOuz/prxrdX4IPRXKll2aKa04FKjGw7xe4O60VAH7u2uEN7OMWLw
L92W4oZB7rBpkv3SPGbZUDrwTqr6b/txcyptL1CudTH8S7iG1PJCms4RbfjAGFSE
ragrrwRBBzwhHtKj7Kge/4m4RTtLPr5+1tcWEos8f9rXUN1xmqUAmG4IVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAMJtxvXRoAA9uiq1h0WWU3d6mfMB8GA1UdIwQY
MBaAFAAkNMc6DuoixuRBBy6T23fH6KLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2Et
MmI3YTc5NGQ1Nzk1LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2EtMmI3YTc5NGQ1Nzk1
LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGHMabcp
1N5cs/ICj3rXqOa/7gj7Bp61PWc5XtuxIJuvZxmczaL+MsbgNaVofYvGcAUAXcPc
BdmkYFqUvvAPBELwbz/ycgQKzZJz/S+T3rBRsHIAMHu+hWazhyWAGNNS1gwB8T7h
zPwNc7kPXq+C/FwWiN8y8hlnxvGsCQ9B8uRjawva5VWpWCaD4hxiyaiKT3iOPkD9
wJiqw6YeijRbcWYUexE1JhAMDw9/FIZ8OoqdOd8csnuTbRQlUTo7TqqV4VhmQpZY
wlmaxjW5Q132jkvNyxssbGkt2lRHfS0DRHFxUuSo2ghyiYzYgevvzAdygv9NReNf
4LvMkAPfylpp2w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:04 2025 by rpki-client