Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier: L6hVWeG72I6+ljr9ZNoVthjt+IuMfo2M5hbY0pz097o=
Subject key identifier: C4:4B:6B:BF:7E:94:F8:3E:52:E5:D7:64:97:46:E2:37:59:6B:DA:5F
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial: 01974A7B325546EB2BC74F8F1D3B5F2030D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:17 +0000
Manifest this update: Sat 07 Jun 2025 13:01:17 +0000
Manifest next update: Sun 08 Jun 2025 13:01:17 +0000
Files and hashes: 1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: UHYAfK4wftZV25Bta2zkMrn0qR9pU+2sBtWm8zVAkQM=)
2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:32:55:46:eb:2b:c7:4f:8f:1d:3b:5f:20:30:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Validity
Not Before: Jun 7 13:01:17 2025 GMT
Not After : Jun 8 13:01:17 2025 GMT
Subject: CN=c44b6bbf7e94f83e52e5d7649746e237596bda5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:de:82:75:e7:b0:83:13:54:bc:e5:70:ac:
aa:0c:41:48:4c:dd:3d:a8:01:c7:db:b2:91:8d:bc:
8d:36:92:ee:d6:c5:3d:92:58:22:c6:44:3a:0f:44:
a0:24:eb:23:2f:4c:a6:9a:78:82:b3:bc:97:95:85:
3c:b4:36:2b:36:03:44:31:89:9f:06:1e:0f:ea:9f:
7f:4b:cb:31:9e:0e:73:f9:3c:52:1e:de:eb:f2:7d:
c7:9a:b5:79:e5:81:62:42:1e:f3:c3:f3:0f:f0:67:
c8:40:74:9f:90:31:aa:71:da:d4:c7:17:75:7d:0e:
50:f5:4b:27:1d:b0:c1:41:b6:2e:40:92:f1:45:c2:
4e:5e:16:8f:ca:d8:1f:44:e1:51:30:be:e4:32:4a:
dd:d9:b9:d1:3a:63:88:f6:b2:45:a7:52:18:ec:63:
5b:62:30:07:99:36:1d:16:fd:25:f5:1f:c7:a2:bc:
ee:4c:17:55:21:ad:4e:3b:2b:ec:fe:e5:85:8a:64:
b2:33:8c:a5:27:a0:a7:25:c6:9d:39:84:4b:d1:0c:
81:5c:01:6a:03:06:9c:4e:6c:94:a8:dc:9b:24:14:
c7:25:a5:d7:c8:53:97:db:14:1d:1f:20:3c:64:0f:
53:73:ec:19:67:5a:b6:74:91:a1:09:f7:b7:2b:c3:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4B:6B:BF:7E:94:F8:3E:52:E5:D7:64:97:46:E2:37:59:6B:DA:5F
X509v3 Authority Key Identifier:
keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f7:d1:51:20:f5:1c:c1:45:07:6f:b2:be:62:6b:c6:1d:59:
3b:a9:d8:5d:18:6e:a5:75:58:f2:e4:64:f7:0d:54:e8:b1:28:
5a:4f:1b:11:5c:9e:77:60:07:0f:06:b9:be:05:d9:8e:c2:35:
ad:6e:fc:db:5c:fd:7f:cf:65:ac:27:3a:ef:67:49:b3:a7:c0:
88:51:ef:f3:e8:d2:15:2b:ad:78:a2:8a:34:02:fd:8a:ce:55:
ac:32:5d:a9:86:09:c3:06:0e:f0:c3:07:ae:fb:fc:4c:49:01:
85:a2:48:35:96:ea:55:8f:69:2d:be:8a:c4:ac:94:44:4f:65:
c8:0a:f8:e3:bb:8e:18:bd:0a:4d:15:b1:02:b9:9a:91:5b:0a:
71:23:37:8a:47:0f:b4:db:e9:df:ea:b1:ce:bc:13:aa:09:fc:
a2:bc:b4:e0:7a:9e:21:04:6f:d0:e4:f2:a7:22:91:7c:06:17:
c7:93:9b:7a:ba:44:b5:fd:60:0a:1d:2b:ae:6e:01:44:d1:cc:
10:f3:b7:27:f8:4c:cc:f4:3e:06:2a:be:33:9b:bc:b7:5c:68:
8d:29:84:65:39:bb:3b:ab:ba:58:c8:fe:bb:14:ba:95:87:31:
e8:92:c3:1e:6c:9c:8c:93:ed:00:e8:6c:bc:e0:1f:8e:77:67:
35:dd:a5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:48 2025 by rpki-client