Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier: Ej95zVDr5QunCaeteIVA36lpz5awXzSBrwBQw8CQlRQ=
Subject key identifier: 93:6B:D0:AB:49:61:24:A4:49:C2:B4:14:3A:3A:9C:7F:30:A9:85:8B
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial: 01976E50A18174869AB0C41F5C5BC773721C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number: 0296
Signing time: Sat 14 Jun 2025 12:01:07 +0000
Manifest this update: Sat 14 Jun 2025 12:01:07 +0000
Manifest next update: Sun 15 Jun 2025 12:01:07 +0000
Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: FYuOOQ9xuf+eJ2i9j2hoIuLZfd56vIeqa2Ae9UDpWZ4=)
2: rygZTFCBNWEkh81f14PWqNNI1kI.roa (hash: Nw/ZIl2uHVeZMov8V5+Nv9xGTV5/WVlGxw5x2u+Et/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:a1:81:74:86:9a:b0:c4:1f:5c:5b:c7:73:72:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Validity
Not Before: Jun 14 12:01:07 2025 GMT
Not After : Jun 15 12:01:07 2025 GMT
Subject: CN=936bd0ab496124a449c2b4143a3a9c7f30a9858b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:bf:51:12:da:a9:8f:da:94:d0:87:4a:3d:
a5:f6:da:ae:c0:d4:59:e0:c5:43:60:d3:1f:f8:dc:
79:ee:1e:90:2d:9d:88:ce:a5:ae:73:d0:64:22:c4:
1f:f1:7a:d8:c6:9c:b7:52:e0:cf:4d:c1:f7:1e:33:
79:03:58:d3:6e:0a:ec:05:59:2d:92:cc:b7:80:ca:
3f:dd:1c:a7:69:4a:92:d6:4f:8b:a7:38:d7:12:4c:
7f:b6:96:b3:91:2e:2b:bd:54:fd:7d:aa:b9:1d:41:
cb:73:42:44:b3:42:60:a0:be:9e:91:0b:d7:f9:12:
41:8c:40:10:84:9c:a8:b7:70:95:8c:33:95:ac:ce:
5c:14:60:2f:a5:b1:b5:7a:b7:28:24:17:f4:9d:75:
3c:97:67:a3:84:c1:21:97:45:0f:93:85:45:c1:c1:
30:6d:fb:5b:cb:f8:2a:81:d1:ac:b7:a9:a6:d1:e5:
14:8e:ed:68:1d:96:ce:2c:1f:66:a1:e8:30:54:0d:
03:05:c5:0f:24:d7:af:28:df:a7:c2:ac:f0:42:b6:
36:29:5e:42:ad:93:e8:77:b9:f8:e6:26:70:0d:a2:
a0:4b:4a:77:83:c9:2b:42:e9:87:3a:a7:fe:47:3a:
90:82:0d:d4:20:74:73:7a:2b:a2:60:90:a1:1e:68:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6B:D0:AB:49:61:24:A4:49:C2:B4:14:3A:3A:9C:7F:30:A9:85:8B
X509v3 Authority Key Identifier:
keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a3:ba:6c:55:86:0b:f0:b2:af:85:72:26:ef:12:04:8c:07:
a5:54:11:44:b7:d2:dd:b3:21:ba:bc:a9:b6:8b:cc:d0:14:e9:
45:5f:f2:4f:1e:fb:4e:49:3a:c6:06:c1:00:e4:c4:2e:6b:41:
27:99:7c:4c:4d:fc:11:9d:d4:6e:7e:ac:4a:02:17:fa:e9:10:
a9:9a:19:d1:7d:10:cc:97:b7:75:f7:9e:4e:67:48:ab:3b:33:
c3:af:87:85:95:0e:c0:81:3f:e4:d9:2a:4f:9d:3b:ab:c2:22:
6c:30:db:b4:74:47:e9:ee:32:83:1d:e9:6a:b0:2e:d5:d0:fa:
86:00:d5:ac:b0:89:c4:bc:c7:d4:12:a9:e6:86:04:85:e6:d7:
70:4c:21:be:c1:75:02:65:c0:cf:80:90:36:21:e4:01:14:5a:
af:24:c0:00:82:7e:af:4d:e6:ac:11:0f:65:04:e9:d5:16:0d:
01:b0:51:6d:ed:0d:78:da:59:3e:48:32:20:ab:1f:ac:1e:9d:
5d:5c:2a:cb:e2:53:05:66:7b:92:9f:c4:79:55:a7:aa:79:7f:
ae:8c:47:24:b1:26:e5:f6:ce:ca:25:27:96:22:f7:54:cb:98:
52:68:bc:70:22:6e:fc:04:55:59:3f:51:ba:5e:c2:bf:02:c1:
02:38:cd:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUKGBdIaasMQfXFvHc3IcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxY2YyYTcxYjJjN2JmNTQxYzZjYzA0MTUxY2QwMjA3OGQz
Njk5MjYwHhcNMjUwNjE0MTIwMTA3WhcNMjUwNjE1MTIwMTA3WjAzMTEwLwYDVQQD
Eyg5MzZiZDBhYjQ5NjEyNGE0NDljMmI0MTQzYTNhOWM3ZjMwYTk4NThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKO/URLaqY/alNCHSj2l9tquwNRZ
4MVDYNMf+Nx57h6QLZ2IzqWuc9BkIsQf8XrYxpy3UuDPTcH3HjN5A1jTbgrsBVkt
ksy3gMo/3RynaUqS1k+LpzjXEkx/tpazkS4rvVT9faq5HUHLc0JEs0JgoL6ekQvX
+RJBjEAQhJyot3CVjDOVrM5cFGAvpbG1ercoJBf0nXU8l2ejhMEhl0UPk4VFwcEw
bftby/gqgdGst6mm0eUUju1oHZbOLB9moegwVA0DBcUPJNevKN+nwqzwQrY2KV5C
rZPod7n45iZwDaKgS0p3g8krQumHOqf+RzqQgg3UIHRzeiuiYJChHmhqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNr0KtJYSSkScK0FDo6nH8wqYWLMB8GA1UdIwQY
MBaAFAHPKnGyx79UHGzAQVHNAgeNNpkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMjRlZTEtMmNiMi00OTA3LTgwNDgt
YjBmNGZiZTI2YjYxLzEvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMjRlZTEtMmNiMi00OTA3LTgwNDgtYjBmNGZiZTI2YjYx
LzEvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKO6bFWG
C/Cyr4VyJu8SBIwHpVQRRLfS3bMhuryptovM0BTpRV/yTx77Tkk6xgbBAOTELmtB
J5l8TE38EZ3Ubn6sSgIX+ukQqZoZ0X0QzJe3dfeeTmdIqzszw6+HhZUOwIE/5Nkq
T507q8IibDDbtHRH6e4ygx3parAu1dD6hgDVrLCJxLzH1BKp5oYEhebXcEwhvsF1
AmXAz4CQNiHkARRaryTAAIJ+r03mrBEPZQTp1RYNAbBRbe0NeNpZPkgyIKsfrB6d
XVwqy+JTBWZ7kp/EeVWnqnl/roxHJLEm5fbOyiUnliL3VMuYUmi8cCJu/ARVWT9R
ul7CvwLBAjjNyA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:43:33 2025 by rpki-client