Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
File: AC428C8EED241857F73D0F3D483ABECB240519D0.mft (raw, json)
Hash identifier: VeM9OoHbHnARdn++4/P+e+Hv8NsJHcSn8GLRSrHQ/Ks=
Subject key identifier: BF:8B:89:A8:81:19:CD:3E:56:84:67:F6:15:FF:34:24:46:28:B8:A7
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Certificate issuer: /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial: 5A89B78B4E1D89247FC5F6DD4ACF77D215D4F0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
Manifest number: 0303
Signing time: Fri 06 Jun 2025 17:17:31 +0000
Manifest this update: Fri 06 Jun 2025 17:12:31 +0000
Manifest next update: Sat 07 Jun 2025 18:11:31 +0000
Files and hashes: 1: 3139352e3139312e34392e302f32342d3234203d3e20383334.roa (hash: tAX3Go3Y1oszntsjkGYjvxyMi+6BW1lc0B/JhqET5Wk=)
2: AC428C8EED241857F73D0F3D483ABECB240519D0.crl (hash: DViCZsmdYeP1mWnNM326CCVSXiXvf0ZU+NjhnOFmkXk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:89:b7:8b:4e:1d:89:24:7f:c5:f6:dd:4a:cf:77:d2:15:d4:f0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
Validity
Not Before: Jun 6 17:12:31 2025 GMT
Not After : Jun 7 18:11:31 2025 GMT
Subject: CN=BF8B89A88119CD3E568467F615FF34244628B8A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:16:16:84:c9:dd:4c:48:06:d9:0e:f3:b8:
e5:43:f8:15:9f:5e:8a:c0:a7:13:37:99:23:cc:20:
4f:6c:09:7e:e9:7c:05:a3:b3:fd:43:b7:1b:eb:09:
cb:87:51:f2:41:a8:51:3b:36:35:ac:f9:6f:c3:34:
b9:97:5d:56:d9:66:de:7a:34:79:53:60:44:de:53:
72:a7:4d:cc:1f:70:cd:ce:9e:4d:25:37:d1:26:af:
fd:85:be:52:90:a7:62:fd:ce:d2:40:a2:79:65:4e:
bd:72:c5:83:8a:fa:df:9b:ef:b3:ca:1b:d5:97:63:
8e:c9:b8:90:be:01:ef:cf:b5:eb:d8:79:70:cb:1b:
eb:4c:a7:6a:00:5d:33:47:a3:13:8b:05:81:23:0a:
46:85:b6:cc:19:37:16:c4:a6:11:58:9f:e0:de:a7:
91:de:0d:f1:4e:2b:69:10:39:74:c5:2b:a3:46:6c:
d3:ef:02:c3:ca:39:79:32:e0:a7:1a:18:d0:bf:cb:
71:af:09:d4:f2:f3:13:84:59:73:9f:2b:1f:00:b0:
c2:82:f9:86:7e:5d:b7:3c:10:83:99:66:8c:ad:c3:
83:a5:f4:a9:13:54:eb:39:e7:7c:40:0e:6d:24:3d:
6e:a9:fb:27:89:98:5c:ed:8b:8b:50:ec:c4:6a:fe:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:89:A8:81:19:CD:3E:56:84:67:F6:15:FF:34:24:46:28:B8:A7
X509v3 Authority Key Identifier:
keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c6:ec:7e:d7:45:c3:59:3d:b0:ee:bc:4c:f3:3b:0e:98:e9:
85:9b:d0:d3:be:08:34:a4:fe:ab:87:a2:d6:5f:2f:f1:3b:5a:
cd:55:a5:a8:a1:35:7f:44:1c:0f:90:61:b8:44:56:a6:0f:74:
37:9b:33:5e:bb:90:b1:e6:79:85:1c:e1:bb:e1:83:7d:e3:9c:
35:80:c9:40:98:d3:2b:29:3c:1e:1a:f4:92:81:92:07:1f:f2:
e7:02:a3:99:65:f1:25:33:df:a4:a7:0b:14:86:1f:f9:f7:09:
51:92:ee:44:36:32:47:de:60:58:ad:17:86:41:a9:31:37:32:
2e:d8:74:62:4a:51:6c:c1:18:75:54:6a:6d:27:61:61:aa:27:
57:50:6f:fe:d0:d2:19:74:24:ea:62:a5:7d:1b:b4:bc:ea:1c:
5f:32:db:6d:36:7e:6b:39:ea:49:92:08:68:32:b8:c0:89:30:
22:ee:c9:29:9b:11:9d:d9:de:06:c8:49:81:5b:ab:a9:35:b0:
66:c5:0e:20:72:9e:fb:87:6f:8c:04:c8:ae:ac:f2:0e:9b:6c:
8b:ff:d4:4c:9d:61:44:34:c7:15:5c:c8:70:78:0f:65:b8:89:
7e:e3:50:c8:f8:b3:95:a9:fd:11:bb:60:75:c6:00:74:c4:38:
72:25:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:22:03 2025 by rpki-client