Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
File: AC428C8EED241857F73D0F3D483ABECB240519D0.mft (raw, json)
Hash identifier: mF0tGoxz0d+dJfHKlZ850U+cr6pkFWCnoVDCsNrkNe8=
Subject key identifier: 9D:D9:28:C3:DA:8C:3E:11:00:40:F9:4C:5F:41:0B:56:DA:9B:3E:AC
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Certificate issuer: /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial: 421DCC99426540FE6B561784BD21A5204A25536D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
Manifest number: 038E
Signing time: Thu 18 Sep 2025 17:30:29 +0000
Manifest this update: Thu 18 Sep 2025 17:25:29 +0000
Manifest next update: Fri 19 Sep 2025 19:02:29 +0000
Files and hashes: 1: 3139352e3139312e34392e302f32342d3234203d3e20383334.roa (hash: tAX3Go3Y1oszntsjkGYjvxyMi+6BW1lc0B/JhqET5Wk=)
2: AC428C8EED241857F73D0F3D483ABECB240519D0.crl (hash: 5tYjrMueHDI7qjGtQ4URdgC3zn2yz4Z56kjiOHfdy7c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1d:cc:99:42:65:40:fe:6b:56:17:84:bd:21:a5:20:4a:25:53:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
Validity
Not Before: Sep 18 17:25:29 2025 GMT
Not After : Sep 19 19:02:29 2025 GMT
Subject: CN=9DD928C3DA8C3E110040F94C5F410B56DA9B3EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:42:67:ee:74:dc:fd:34:b6:e4:65:bc:ba:
e0:f1:d2:07:d1:67:02:61:fa:e8:d4:33:79:e1:1c:
99:dc:a1:4d:2d:8b:a9:fd:da:bb:35:7b:7a:58:96:
12:6a:51:f5:9b:4c:c8:59:84:95:2e:95:74:f7:45:
cc:b9:13:20:fb:54:c0:df:77:d9:37:89:86:83:b4:
ee:6f:1a:dc:6b:0f:b4:e1:a5:c8:02:d7:5a:44:1e:
34:0b:4b:ae:ae:2e:e7:11:1d:11:80:49:9d:6e:06:
d9:26:96:d3:da:80:a4:be:3a:3d:a4:55:bc:b7:45:
c7:08:63:b5:14:f1:6e:db:34:be:73:d0:e3:61:52:
57:0c:ea:0f:f7:27:d8:19:09:ea:c9:aa:1c:cc:b6:
f8:09:51:40:5c:26:51:81:d5:e0:7f:5c:f2:9b:0c:
8b:c7:e9:4b:ab:33:60:de:32:be:11:fa:74:b6:5d:
91:56:ae:c4:19:d3:91:64:4d:55:5b:d0:a3:de:98:
46:ef:b5:13:76:19:9a:24:db:4f:50:4f:7a:c6:44:
be:a4:70:fe:9f:dd:4d:f3:d4:ed:f2:45:50:32:b4:
fd:03:b8:83:b8:ff:74:bc:e5:55:4e:47:ff:d3:a5:
c7:3e:c7:b9:4f:7c:4d:92:7d:29:2f:3c:3d:df:59:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:28:C3:DA:8C:3E:11:00:40:F9:4C:5F:41:0B:56:DA:9B:3E:AC
X509v3 Authority Key Identifier:
keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1a:2d:26:13:38:34:82:d3:09:53:ee:c0:9d:0b:db:e2:b8:
56:27:14:7f:a8:98:61:47:d3:c3:ae:28:8a:25:60:5e:88:5b:
c6:45:99:05:27:f7:c6:06:db:a0:ff:6b:37:e4:75:cf:62:c7:
4e:86:cd:60:6f:b1:fb:db:a9:00:7e:45:6f:ce:b0:5d:82:a3:
25:4a:57:e6:45:eb:58:86:37:ee:f0:e1:e9:f5:19:3e:bf:4e:
0d:ad:59:1b:16:4d:3b:da:a1:4b:01:15:80:eb:52:b0:0c:1f:
07:8e:b6:21:9e:97:55:d1:d6:e9:5d:67:8f:51:60:d7:db:72:
21:99:72:3b:ff:33:ce:aa:7a:18:e1:fc:b8:57:cc:64:30:e1:
6d:3a:16:c2:14:ca:2a:28:9a:c3:f7:17:6d:6d:d7:59:90:cf:
9a:d0:ef:d2:2a:61:1f:d9:72:2a:46:d3:f5:a4:fa:b6:07:f2:
ec:8d:df:c5:f2:72:12:0c:6f:b3:2a:ac:63:1d:b4:3b:e9:62:
cd:66:f3:78:85:c6:72:32:28:cb:94:21:23:32:d3:5e:e9:ce:
35:ce:44:1f:48:58:62:4c:64:3a:c3:ad:27:8e:10:e1:0d:42:
f2:10:4b:01:52:36:e5:cc:7b:f5:5e:d9:d4:ea:bd:47:ee:c4:
9d:0e:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:54:08 2025 by rpki-client