Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
File: AC428C8EED241857F73D0F3D483ABECB240519D0.mft (raw, json)
Hash identifier: z8VXz6AsDOtqaruwwD/hqfT9CHPnUbENsh2g6SjGwQo=
Subject key identifier: B9:38:FB:C6:69:72:3E:72:8A:04:4E:FF:43:E6:67:DB:A7:DF:A7:4E
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Certificate issuer: /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial: 23106E7E9D040DC8F29F58C15024FD51FA17CE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
Manifest number: 02AF
Signing time: Fri 04 Apr 2025 17:15:42 +0000
Manifest this update: Fri 04 Apr 2025 17:10:42 +0000
Manifest next update: Sat 05 Apr 2025 19:11:42 +0000
Files and hashes: 1: AC428C8EED241857F73D0F3D483ABECB240519D0.crl (hash: dYj/bETnDDBpKGDUpXASPog3V2nWQMAO9/fMedCO+ok=)
2: 3139352e3139312e34392e302f32342d3234203d3e20383334.roa (hash: tAX3Go3Y1oszntsjkGYjvxyMi+6BW1lc0B/JhqET5Wk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:10:6e:7e:9d:04:0d:c8:f2:9f:58:c1:50:24:fd:51:fa:17:ce:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
Validity
Not Before: Apr 4 17:10:42 2025 GMT
Not After : Apr 5 19:11:42 2025 GMT
Subject: CN=B938FBC669723E728A044EFF43E667DBA7DFA74E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b3:db:3c:05:31:20:b0:bb:56:e0:4d:a8:a9:
fc:0e:42:14:c7:42:86:21:43:3b:06:9c:d5:cf:b8:
cb:de:7c:8d:b0:60:8c:bf:3d:98:55:75:d1:92:14:
52:4d:d6:b0:cd:88:da:56:4d:45:a7:3c:10:4e:35:
ec:b1:42:00:52:15:15:99:3e:7e:47:cb:64:27:25:
9c:ab:1c:16:b3:00:2f:39:e9:f9:e6:30:28:9e:ca:
01:8f:44:33:03:fc:91:41:41:b2:2b:df:0b:0f:28:
4f:46:2e:a3:e1:db:d2:c9:d0:1e:fa:fb:c9:8e:e6:
be:8f:fe:3b:f3:c7:65:4e:30:42:43:71:3a:12:c2:
3d:d6:70:73:7a:90:d4:45:f1:89:88:82:99:c0:62:
69:24:23:c7:88:44:66:87:27:04:6d:06:b7:4f:b0:
9c:4e:6a:ea:79:d3:bc:83:19:a2:48:d9:00:67:b6:
f4:77:42:e4:bf:ff:f9:40:91:eb:12:03:ff:56:5f:
4c:b3:2c:24:bc:0b:5c:3e:a8:bf:63:1c:b4:23:c1:
95:65:f3:62:8b:d6:86:26:54:59:83:fb:4e:36:24:
e7:8f:c0:9b:c4:7c:8b:65:55:a7:37:8f:e3:b9:fd:
71:cd:4a:e9:8f:97:b2:cd:75:7f:8f:08:f5:b0:8d:
8a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:FB:C6:69:72:3E:72:8A:04:4E:FF:43:E6:67:DB:A7:DF:A7:4E
X509v3 Authority Key Identifier:
keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:27:6c:1f:fa:c1:37:ec:cd:74:f1:ec:02:8a:9f:dc:4f:c0:
e0:9a:a1:2e:7d:08:4f:4a:92:7f:b2:db:c0:b3:90:3c:58:96:
00:f1:a1:ff:e1:ce:53:25:06:10:47:ff:69:c9:57:cb:03:bb:
04:83:86:23:73:96:d5:d0:45:d0:a1:2f:c9:0b:cf:01:9f:eb:
34:88:99:03:85:be:73:b7:63:77:dd:41:12:24:75:a6:75:a7:
c1:c3:98:61:2e:99:0f:a4:65:45:15:cb:da:48:66:03:1f:fe:
2f:b5:4c:96:bb:a3:c0:27:e5:74:e1:6b:fc:fb:0e:60:2e:c7:
f5:2a:d0:65:55:82:a3:11:65:e6:f8:9e:7a:da:29:68:47:df:
f7:89:f5:ff:e8:52:97:b3:c9:bf:67:f2:81:67:fd:3c:ba:b6:
2c:65:8b:25:6b:15:5e:25:cf:b1:6f:7d:90:39:60:72:5a:a2:
5a:5b:08:9d:7b:4f:65:ec:fb:4b:44:a0:32:00:64:cf:63:b0:
50:0d:63:d6:b8:46:a2:96:9e:2a:97:2b:68:4c:23:e9:a7:e5:
bd:ea:52:f6:a3:b9:3b:63:76:ce:b3:1b:b3:ef:c3:d8:9a:bf:
f6:12:a1:ed:25:60:bf:24:14:ac:a6:4a:a9:36:e4:93:a5:c4:
6a:7e:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:38 2025 by rpki-client