Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: VLPRQr5giaSn/QKdu9L2f5VQmS6X0ztFLEsUoJ5ltus=
Subject key identifier: B2:6F:C8:28:E8:53:EB:B9:50:AD:02:4C:48:A3:3D:8B:15:87:8B:6C
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 01968A37FB4C45E8D39AB5D8629C7069903A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 0EAF
Signing time: Thu 01 May 2025 05:00:46 +0000
Manifest this update: Thu 01 May 2025 05:00:46 +0000
Manifest next update: Fri 02 May 2025 05:00:46 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: +vr6IxTKZpyUqQTJ1nvpT7Wf01LLZo7xCwEDhRp7CVc=)
2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:fb:4c:45:e8:d3:9a:b5:d8:62:9c:70:69:90:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: May 1 05:00:46 2025 GMT
Not After : May 2 05:00:46 2025 GMT
Subject: CN=b26fc828e853ebb950ad024c48a33d8b15878b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:69:85:df:03:c7:52:00:50:c3:47:70:6e:
82:7f:10:d3:95:44:72:16:a5:96:4a:e4:4f:b9:c1:
53:1d:05:25:2d:96:8d:2c:ca:45:fb:dd:a4:f5:f4:
53:ca:3e:4d:cc:42:33:8e:39:4a:b3:76:55:06:38:
66:ec:69:ac:dc:3a:fe:41:e8:60:ab:f8:1c:a5:53:
05:0d:04:d5:a4:0c:ec:c3:2e:6d:74:51:49:91:c7:
38:1e:14:42:fa:94:f8:42:cb:51:e5:45:07:5b:d3:
5f:36:03:84:e9:f3:42:84:ca:81:90:f0:ab:1e:6e:
59:74:3e:9b:2f:35:1b:f8:5f:94:bd:72:d2:88:41:
6d:74:dc:53:20:b2:f4:db:f6:80:ab:b1:9c:0e:54:
75:5b:92:aa:f9:1f:a9:36:96:d5:22:ed:8a:4d:4f:
89:12:58:69:32:52:44:cd:62:cc:82:98:9b:23:0b:
df:52:9a:c2:f3:4b:52:08:72:1c:6f:f1:19:15:08:
a8:35:aa:34:58:a5:b3:cb:c0:5a:db:a0:ad:f5:47:
b6:ae:4d:14:95:ae:8d:41:cd:ce:c9:42:6c:e8:30:
66:ea:22:4f:21:85:68:e7:c3:01:53:ef:68:90:2a:
26:bb:ad:bb:5e:d5:5c:ca:8f:19:e9:72:1c:8d:25:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6F:C8:28:E8:53:EB:B9:50:AD:02:4C:48:A3:3D:8B:15:87:8B:6C
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:94:ac:55:ae:f5:0d:02:31:35:36:ad:42:13:6f:2e:83:9f:
36:95:15:40:01:3d:f2:82:d9:e1:d0:18:da:54:81:8e:55:68:
eb:99:58:55:28:03:3c:80:a7:52:61:92:cf:28:c8:68:56:cb:
c5:cd:6b:60:26:2a:75:74:b9:0b:5f:d1:d1:47:66:52:ea:33:
5f:ea:be:0c:24:7c:57:36:d0:1b:23:9c:e5:57:56:c5:d8:98:
4d:7b:5b:c7:63:72:42:dd:b1:9e:22:82:94:a4:21:1c:90:bd:
8d:f7:bd:d6:d2:f4:5a:04:f0:fa:41:9f:d7:52:9e:99:1d:40:
52:92:6d:0b:59:1b:2d:8b:cd:07:a4:1a:e9:3d:8a:f8:ef:95:
35:19:f8:de:ed:7e:e3:f1:bd:90:e3:f7:f2:42:e4:1e:98:f4:
b0:7d:de:70:fa:9d:fb:86:ce:1c:11:66:3a:23:24:88:ad:d3:
12:68:67:da:f1:ca:44:69:f8:f8:18:f9:b5:3a:5b:0c:ad:f6:
73:03:df:c8:14:ff:97:07:41:54:b0:96:e3:c4:a3:ff:27:b8:
36:64:9b:ec:ea:1a:de:bd:f3:49:ae:b6:e5:cc:8a:e7:1a:7d:
d5:3b:78:95:c1:0f:30:df:fa:36:d7:e7:09:dc:fc:cc:30:8d:
c1:50:10:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKN/tMRejTmrXYYpxwaZA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzI4NjNhNjQzOGIzNDAyNzUyYTQ3NDBlOTBjZTQyZWI1
ODkxMjkwHhcNMjUwNTAxMDUwMDQ2WhcNMjUwNTAyMDUwMDQ2WjAzMTEwLwYDVQQD
EyhiMjZmYzgyOGU4NTNlYmI5NTBhZDAyNGM0OGEzM2Q4YjE1ODc4YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y5phd8Dx1IAUMNHcG6CfxDTlURy
FqWWSuRPucFTHQUlLZaNLMpF+92k9fRTyj5NzEIzjjlKs3ZVBjhm7Gms3Dr+Qehg
q/gcpVMFDQTVpAzswy5tdFFJkcc4HhRC+pT4QstR5UUHW9NfNgOE6fNChMqBkPCr
Hm5ZdD6bLzUb+F+UvXLSiEFtdNxTILL02/aAq7GcDlR1W5Kq+R+pNpbVIu2KTU+J
ElhpMlJEzWLMgpibIwvfUprC80tSCHIcb/EZFQioNao0WKWzy8Ba26Ct9Ue2rk0U
la6NQc3OyUJs6DBm6iJPIYVo58MBU+9okComu627XtVcyo8Z6XIcjSUpjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJvyCjoU+u5UK0CTEijPYsVh4tsMB8GA1UdIwQY
MBaAFAHChjpkOLNAJ1KkdA6QzkLrWJEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQt
YjU0MDU4MzRmMGM1LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQtYjU0MDU4MzRmMGM1
LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZSsVa71
DQIxNTatQhNvLoOfNpUVQAE98oLZ4dAY2lSBjlVo65lYVSgDPICnUmGSzyjIaFbL
xc1rYCYqdXS5C1/R0UdmUuozX+q+DCR8VzbQGyOc5VdWxdiYTXtbx2NyQt2xniKC
lKQhHJC9jfe91tL0WgTw+kGf11KemR1AUpJtC1kbLYvNB6Qa6T2K+O+VNRn43u1+
4/G9kOP38kLkHpj0sH3ecPqd+4bOHBFmOiMkiK3TEmhn2vHKRGn4+Bj5tTpbDK32
cwPfyBT/lwdBVLCW48Sj/ye4NmSb7Ooa3r3zSa625cyK5xp91Tt4lcEPMN/6Ntfn
Cdz8zDCNwVAQ6Q==
-----END CERTIFICATE-----
Generated at Thu May 1 06:48:04 2025 by rpki-client