Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier: 1fup/513KidVqPahNKBizqsyTy204OQfU2LQc0JSESU=
Subject key identifier: 54:44:23:85:C3:AF:37:34:82:B1:83:DE:AB:35:2F:AA:AD:0C:67:A1
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial: 01964B8F95249F74872193B0C1CDA2806190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 01:00:23 +0000
Manifest this update: Sat 19 Apr 2025 01:00:23 +0000
Manifest next update: Sun 20 Apr 2025 01:00:23 +0000
Files and hashes: 1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: cgqhn7q5E0Pv1MENjWequDJO7UuXRTIyXFLaO8znfdI=)
2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:95:24:9f:74:87:21:93:b0:c1:cd:a2:80:61:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Validity
Not Before: Apr 19 01:00:23 2025 GMT
Not After : Apr 20 01:00:23 2025 GMT
Subject: CN=54442385c3af373482b183deab352faaad0c67a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:48:dc:2d:dd:d9:27:18:a1:6f:bb:f4:d5:
00:f8:d1:d6:24:14:d3:2f:b6:e3:76:84:eb:5f:a0:
9f:75:0c:23:83:d7:5b:ec:a0:62:9d:28:f7:b9:78:
51:20:2f:50:81:77:d7:9b:17:dd:97:33:92:48:e3:
93:49:69:36:2a:04:68:e9:04:95:7c:ee:b2:0f:2a:
a2:5d:ce:c9:87:40:02:5d:01:bb:ba:c0:3a:35:33:
77:f2:81:ec:c2:02:8b:29:0a:f1:49:7c:c8:13:cf:
93:bf:c6:69:ff:62:a7:ce:74:68:69:c4:e7:11:4d:
03:5a:5f:f1:2d:b2:88:c7:ba:b3:bd:6f:61:29:2b:
e3:3c:23:ad:0d:fe:34:2e:2b:23:07:ec:23:16:31:
24:6b:b3:bd:4d:af:f4:e6:7a:ea:01:0f:88:82:ec:
ff:6a:66:16:ad:57:63:cd:f9:9b:3f:6c:bd:96:ab:
d8:ae:2c:55:2b:e9:01:27:22:31:ad:25:66:1b:fe:
16:47:19:f7:4d:f3:d7:26:e2:36:09:bf:2a:95:16:
13:81:c8:09:d3:2a:6f:1c:0a:a8:7a:b0:f6:9b:a7:
44:a5:f1:fa:3b:98:a5:2f:8e:81:3a:27:fb:9a:40:
d6:da:6f:f1:73:99:f4:da:e6:f4:76:3b:da:d2:64:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:23:85:C3:AF:37:34:82:B1:83:DE:AB:35:2F:AA:AD:0C:67:A1
X509v3 Authority Key Identifier:
keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ae:d9:e2:15:02:2e:e5:65:8b:47:86:97:8f:d6:4d:38:63:
a1:90:14:48:e7:bc:57:d5:ed:41:44:88:6b:df:ed:a4:e0:e0:
c8:d3:e9:4e:62:c5:49:3e:b1:02:a6:f4:3d:fa:d6:2b:03:1e:
3f:8b:d1:73:c0:a6:fd:c8:95:76:a4:61:b5:a0:55:04:5e:90:
74:94:78:39:ca:55:a4:e2:92:b9:96:5c:fa:84:54:72:80:4d:
ed:b6:49:c8:52:df:0e:e9:bf:a8:a5:9a:80:48:09:45:ca:79:
62:0d:5a:f0:96:82:36:c0:9c:83:0e:23:35:03:41:8c:b1:b6:
99:9b:df:2a:55:17:4b:4d:f3:f1:2e:1e:98:d6:ec:9c:19:9b:
e2:08:8b:bf:60:86:7d:96:d6:ab:c3:81:bd:16:78:4e:6f:38:
a9:f2:b4:20:7d:e0:01:f8:bf:63:eb:2e:96:0a:b2:84:5e:6c:
5f:e9:43:4c:02:fa:51:aa:b0:bc:3b:3d:b5:55:0d:65:23:f1:
97:0d:bb:bf:88:76:bd:3a:55:b6:29:bd:e4:f4:90:99:ac:54:
66:a0:27:ea:22:79:b9:36:c6:5a:d6:f9:1f:9f:d2:ec:c3:15:
01:26:dc:9a:b9:73:b0:ea:93:1e:c2:00:2e:29:1c:27:17:77:
eb:d9:54:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLj5Ukn3SHIZOwwc2igGGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjQzNGM3M2EwZWVhMjJjNmU0NDEwNzJlOTNkYjc3Yzdl
OGEyZjEwHhcNMjUwNDE5MDEwMDIzWhcNMjUwNDIwMDEwMDIzWjAzMTEwLwYDVQQD
Eyg1NDQ0MjM4NWMzYWYzNzM0ODJiMTgzZGVhYjM1MmZhYWFkMGM2N2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvklI3C3d2ScYoW+79NUA+NHWJBTT
L7bjdoTrX6CfdQwjg9db7KBinSj3uXhRIC9QgXfXmxfdlzOSSOOTSWk2KgRo6QSV
fO6yDyqiXc7Jh0ACXQG7usA6NTN38oHswgKLKQrxSXzIE8+Tv8Zp/2KnznRoacTn
EU0DWl/xLbKIx7qzvW9hKSvjPCOtDf40LisjB+wjFjEka7O9Ta/05nrqAQ+Iguz/
amYWrVdjzfmbP2y9lqvYrixVK+kBJyIxrSVmG/4WRxn3TfPXJuI2Cb8qlRYTgcgJ
0ypvHAqoerD2m6dEpfH6O5ilL46BOif7mkDW2m/xc5n02ub0djva0mS0wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFREI4XDrzc0grGD3qs1L6qtDGehMB8GA1UdIwQY
MBaAFAAkNMc6DuoixuRBBy6T23fH6KLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2Et
MmI3YTc5NGQ1Nzk1LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2EtMmI3YTc5NGQ1Nzk1
LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVq7Z4hUC
LuVli0eGl4/WTThjoZAUSOe8V9XtQUSIa9/tpODgyNPpTmLFST6xAqb0PfrWKwMe
P4vRc8Cm/ciVdqRhtaBVBF6QdJR4OcpVpOKSuZZc+oRUcoBN7bZJyFLfDum/qKWa
gEgJRcp5Yg1a8JaCNsCcgw4jNQNBjLG2mZvfKlUXS03z8S4emNbsnBmb4giLv2CG
fZbWq8OBvRZ4Tm84qfK0IH3gAfi/Y+sulgqyhF5sX+lDTAL6UaqwvDs9tVUNZSPx
lw27v4h2vTpVtim95PSQmaxUZqAn6iJ5uTbGWtb5H5/S7MMVASbcmrlzsOqTHsIA
LikcJxd369lUfQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:13:47 2025 by rpki-client