Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: Sk9SyApvUn0jVNvMlKRkdwvdEZlx1Q/3Ux7vfUnfCBc=
Subject key identifier: F7:D9:7F:B4:F5:E6:2F:BE:86:FE:C5:FB:57:02:18:D9:29:04:9A:5A
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019779B0050150D625481B9BF6387C3DD656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 0F2B
Signing time: Mon 16 Jun 2025 17:01:08 +0000
Manifest this update: Mon 16 Jun 2025 17:01:08 +0000
Manifest next update: Tue 17 Jun 2025 17:01:08 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: g2WEB444SQ5vuyJ4a+z1bU0kYrhk8jiFLPLVvw2VI5k=)
2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:b0:05:01:50:d6:25:48:1b:9b:f6:38:7c:3d:d6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Jun 16 17:01:08 2025 GMT
Not After : Jun 17 17:01:08 2025 GMT
Subject: CN=f7d97fb4f5e62fbe86fec5fb570218d929049a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:61:fe:d0:2b:fe:e2:2f:47:8e:86:1b:c5:
0a:8d:b7:db:25:c2:4d:80:25:e8:0e:38:c0:69:f7:
21:e6:9d:e9:05:c9:cc:f6:11:85:43:d9:ba:31:d2:
10:c1:cc:89:19:35:7e:06:1f:79:5a:f9:fd:55:f7:
4a:48:5e:b2:ac:49:12:29:84:f0:79:da:b7:e7:2d:
c1:bc:2a:d8:db:71:3d:45:27:06:8d:19:4e:21:dc:
32:49:82:78:f6:57:95:0d:81:92:52:9b:d4:67:c3:
11:5c:6a:67:40:f2:77:76:34:9d:8f:76:90:81:f4:
a1:4f:98:cc:ef:f6:46:19:d6:28:87:79:e2:92:14:
70:cb:54:96:0a:a9:a2:83:d5:9e:9b:49:90:08:5a:
7b:0b:0a:8b:90:0a:87:5d:33:42:fa:fb:11:36:a6:
f3:13:f8:5f:ab:f5:b5:06:45:01:41:fb:eb:1f:5a:
97:74:bd:e2:94:cc:e3:76:73:c1:2d:d7:1b:b4:e0:
c2:88:e0:49:be:c9:3f:81:36:b6:db:6c:d9:09:88:
0c:aa:46:d7:60:76:04:c6:81:7e:c4:b0:0a:4a:6e:
5f:0b:d5:75:be:68:70:4a:d5:c2:66:27:ea:cc:81:
0c:fe:c6:f6:5a:a2:1e:67:6d:0e:10:1d:94:0e:08:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D9:7F:B4:F5:E6:2F:BE:86:FE:C5:FB:57:02:18:D9:29:04:9A:5A
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b5:cd:e1:00:c6:4f:26:fd:e8:0d:4e:44:c3:04:43:7e:a8:
38:6b:29:4f:c4:1a:a1:89:81:50:1b:15:83:11:55:08:a5:09:
3d:52:63:0b:5f:41:33:ec:1b:63:fe:42:f7:12:3d:0a:16:da:
e4:bf:4b:7c:91:fe:6f:bb:74:2a:b5:19:1c:1b:51:7d:af:b1:
58:20:f0:b3:79:78:b4:1f:d8:24:16:e4:74:89:9a:ff:38:00:
60:82:39:2e:7f:a2:b4:f6:4d:4c:4c:6f:79:6b:bc:6a:cd:ab:
62:87:ee:4d:aa:8f:92:1b:67:2f:aa:c6:cc:dc:d2:48:32:60:
27:57:04:5b:1e:66:04:18:57:3d:ce:6f:51:fa:3a:13:6c:73:
2c:33:87:70:8a:25:6b:8a:b7:94:f9:4d:c2:34:a2:49:e2:ca:
b2:65:61:8d:ab:a5:bb:40:3f:de:f0:1d:36:dd:cd:e5:ee:b4:
c4:e5:48:32:19:41:c3:ef:08:bf:2b:49:d1:4e:d6:08:5c:d7:
90:d4:e5:31:83:1a:ff:e0:04:f2:f6:50:8e:58:9c:cd:61:de:
6d:70:f3:f5:17:b6:c0:9d:df:ba:63:dc:52:43:b6:c6:80:2b:
f8:88:0d:25:8d:6b:1f:90:53:3c:39:7f:fb:52:68:4c:bd:fc:
0e:11:61:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5sAUBUNYlSBub9jh8PdZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzI4NjNhNjQzOGIzNDAyNzUyYTQ3NDBlOTBjZTQyZWI1
ODkxMjkwHhcNMjUwNjE2MTcwMTA4WhcNMjUwNjE3MTcwMTA4WjAzMTEwLwYDVQQD
EyhmN2Q5N2ZiNGY1ZTYyZmJlODZmZWM1ZmI1NzAyMThkOTI5MDQ5YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rhh/tAr/uIvR46GG8UKjbfbJcJN
gCXoDjjAafch5p3pBcnM9hGFQ9m6MdIQwcyJGTV+Bh95Wvn9VfdKSF6yrEkSKYTw
edq35y3BvCrY23E9RScGjRlOIdwySYJ49leVDYGSUpvUZ8MRXGpnQPJ3djSdj3aQ
gfShT5jM7/ZGGdYoh3nikhRwy1SWCqmig9Wem0mQCFp7CwqLkAqHXTNC+vsRNqbz
E/hfq/W1BkUBQfvrH1qXdL3ilMzjdnPBLdcbtODCiOBJvsk/gTa222zZCYgMqkbX
YHYExoF+xLAKSm5fC9V1vmhwStXCZifqzIEM/sb2WqIeZ20OEB2UDghtIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfZf7T15i++hv7F+1cCGNkpBJpaMB8GA1UdIwQY
MBaAFAHChjpkOLNAJ1KkdA6QzkLrWJEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQt
YjU0MDU4MzRmMGM1LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQtYjU0MDU4MzRmMGM1
LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrXN4QDG
Tyb96A1ORMMEQ36oOGspT8QaoYmBUBsVgxFVCKUJPVJjC19BM+wbY/5C9xI9Chba
5L9LfJH+b7t0KrUZHBtRfa+xWCDws3l4tB/YJBbkdIma/zgAYII5Ln+itPZNTExv
eWu8as2rYofuTaqPkhtnL6rGzNzSSDJgJ1cEWx5mBBhXPc5vUfo6E2xzLDOHcIol
a4q3lPlNwjSiSeLKsmVhjaulu0A/3vAdNt3N5e60xOVIMhlBw+8IvytJ0U7WCFzX
kNTlMYMa/+AE8vZQjliczWHebXDz9Re2wJ3fumPcUkO2xoAr+IgNJY1rH5BTPDl/
+1JoTL38DhFhTw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:42:01 2025 by rpki-client