Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: 2qy6X3+VK5ELrafLRHkdGdg6y+iNfBoM7zGLkyB/1w4=
Subject key identifier: 5C:B8:82:19:BF:33:4E:5C:88:D4:40:0C:A4:D7:EB:5C:72:E5:D9:0F
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 0197759C77D497FCD1CCD22877A6B7E48DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 041E
Signing time: Sun 15 Jun 2025 22:01:17 +0000
Manifest this update: Sun 15 Jun 2025 22:01:17 +0000
Manifest next update: Mon 16 Jun 2025 22:01:17 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: En4HSohb3kKZCmWA046qmtIPP0xYOXNR9wkyTzbqHAA=)
2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:9c:77:d4:97:fc:d1:cc:d2:28:77:a6:b7:e4:8d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Jun 15 22:01:17 2025 GMT
Not After : Jun 16 22:01:17 2025 GMT
Subject: CN=5cb88219bf334e5c88d4400ca4d7eb5c72e5d90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:41:57:49:83:ff:56:17:52:86:84:d3:cb:18:
15:bd:94:16:d6:90:f8:21:2a:d8:ef:bc:b0:b5:3f:
a7:3b:87:88:88:47:4a:9b:bb:ac:46:ed:dc:a2:14:
99:76:1c:28:29:1a:cd:11:23:70:24:71:00:f2:6d:
aa:3e:c7:51:b0:e4:3a:35:d2:a5:d4:f1:61:24:69:
e9:ec:26:d0:90:bf:31:e3:15:df:3d:cb:0b:6d:74:
35:02:48:55:e7:1d:9d:2d:ed:c3:c4:a0:97:94:8f:
7c:8d:95:55:70:d7:b4:2d:00:e3:36:ac:d2:36:a7:
09:a9:d1:18:d3:cb:5a:74:e6:3e:3c:80:30:c8:59:
a2:14:9a:45:01:ab:e7:a9:a1:c2:0a:2b:00:c8:74:
32:29:89:9a:20:9a:5b:2b:6b:08:f1:86:3f:6d:b2:
79:de:2b:f1:d7:b7:83:a0:85:30:9d:cb:63:aa:32:
7d:60:58:75:e5:65:9f:d8:f5:73:35:a8:fa:d8:d7:
49:54:4e:03:1d:f7:d7:1f:ac:59:04:9e:e4:0a:bf:
57:4f:20:19:32:53:92:e1:9f:e3:d7:be:11:c3:08:
1c:d8:a0:8d:28:70:34:89:37:3f:7a:3e:a4:5b:44:
8c:d6:78:3f:23:c5:6b:f3:1b:57:74:87:4e:b2:da:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B8:82:19:BF:33:4E:5C:88:D4:40:0C:A4:D7:EB:5C:72:E5:D9:0F
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f9:ca:47:73:1d:59:79:1d:24:57:a0:cf:a0:25:0e:07:66:
c7:8c:3f:c6:8d:59:69:6c:88:31:bd:dc:6d:05:fb:1b:b7:0c:
c8:2b:53:35:2b:a7:4a:86:e7:4a:c3:2c:a7:41:65:77:80:42:
ad:c9:67:98:39:e5:0c:c5:6c:28:10:35:ea:1d:1b:9a:e7:9e:
cd:e9:ef:d4:f2:b8:71:73:06:11:a6:30:1a:28:8d:15:ab:3b:
87:0c:2e:e5:4f:80:c1:01:8d:3f:ef:50:4d:5a:de:f0:8d:71:
5c:b3:12:bc:e7:e6:17:c8:79:34:8e:39:b4:8e:19:6b:fd:58:
51:57:2a:e4:ad:b5:1e:a0:07:37:11:5b:9f:34:25:e2:51:fa:
f4:4d:fd:28:57:1a:4b:8f:96:84:53:04:ff:8c:25:61:9b:e7:
31:b5:52:e5:0c:b3:98:4f:c6:2a:8a:7c:bc:c5:9b:58:a3:82:
1e:0f:24:9a:02:87:f5:00:b3:fb:a1:cf:f4:ea:eb:bd:c8:78:
df:b7:e7:b1:95:f0:28:c8:87:65:27:b7:3c:0b:4a:00:f6:df:
09:54:60:e2:da:7b:f2:5c:23:f4:39:79:de:5e:b6:d6:94:a4:
76:f0:44:7e:35:3d:0b:36:77:9d:d3:4c:61:05:a3:0f:42:fe:
52:1f:46:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1nHfUl/zRzNIod6a35I3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxY2JjNmU3NDRlZWY5YzAxNjc0MDFkNTZjMWY5MzgwZWVm
NjQ5NDgwHhcNMjUwNjE1MjIwMTE3WhcNMjUwNjE2MjIwMTE3WjAzMTEwLwYDVQQD
Eyg1Y2I4ODIxOWJmMzM0ZTVjODhkNDQwMGNhNGQ3ZWI1YzcyZTVkOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UFXSYP/VhdShoTTyxgVvZQW1pD4
ISrY77ywtT+nO4eIiEdKm7usRu3cohSZdhwoKRrNESNwJHEA8m2qPsdRsOQ6NdKl
1PFhJGnp7CbQkL8x4xXfPcsLbXQ1AkhV5x2dLe3DxKCXlI98jZVVcNe0LQDjNqzS
NqcJqdEY08tadOY+PIAwyFmiFJpFAavnqaHCCisAyHQyKYmaIJpbK2sI8YY/bbJ5
3ivx17eDoIUwnctjqjJ9YFh15WWf2PVzNaj62NdJVE4DHffXH6xZBJ7kCr9XTyAZ
MlOS4Z/j174Rwwgc2KCNKHA0iTc/ej6kW0SM1ng/I8Vr8xtXdIdOstqvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy4ghm/M05ciNRADKTX61xy5dkPMB8GA1UdIwQY
MBaAFAHLxudE7vnAFnQB1Wwfk4Du9klIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTIt
OWUyZGEzN2I0MTllLzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTItOWUyZGEzN2I0MTll
LzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPnKR3Md
WXkdJFegz6AlDgdmx4w/xo1ZaWyIMb3cbQX7G7cMyCtTNSunSobnSsMsp0Fld4BC
rclnmDnlDMVsKBA16h0bmueezenv1PK4cXMGEaYwGiiNFas7hwwu5U+AwQGNP+9Q
TVre8I1xXLMSvOfmF8h5NI45tI4Za/1YUVcq5K21HqAHNxFbnzQl4lH69E39KFca
S4+WhFME/4wlYZvnMbVS5QyzmE/GKop8vMWbWKOCHg8kmgKH9QCz+6HP9Orrvch4
37fnsZXwKMiHZSe3PAtKAPbfCVRg4tp78lwj9Dl53l621pSkdvBEfjU9CzZ3ndNM
YQWjD0L+Uh9Gjw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:16:18 2025 by rpki-client