Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
File: AC428C8EED241857F73D0F3D483ABECB240519D0.mft (raw, json)
Hash identifier: hQ+7D8dFYUfxPopajclcdoc01mmvlLe/7RNIQw+zIH4=
Subject key identifier: CC:FE:6D:33:B5:D2:74:C2:7D:03:D6:D8:5D:96:17:35:EB:9E:EE:B6
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Certificate issuer: /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial: 402124662100ED051BC7BC23AD5A6D9BA744BF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
Manifest number: 034E
Signing time: Fri 01 Aug 2025 15:07:13 +0000
Manifest this update: Fri 01 Aug 2025 15:02:13 +0000
Manifest next update: Sat 02 Aug 2025 18:50:13 +0000
Files and hashes: 1: 3139352e3139312e34392e302f32342d3234203d3e20383334.roa (hash: tAX3Go3Y1oszntsjkGYjvxyMi+6BW1lc0B/JhqET5Wk=)
2: AC428C8EED241857F73D0F3D483ABECB240519D0.crl (hash: +YaGXmZJCXM3wuiL+QbnpwqBtRkVXZFfd9RLNHKQjU0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:21:24:66:21:00:ed:05:1b:c7:bc:23:ad:5a:6d:9b:a7:44:bf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
Validity
Not Before: Aug 1 15:02:13 2025 GMT
Not After : Aug 2 18:50:13 2025 GMT
Subject: CN=CCFE6D33B5D274C27D03D6D85D961735EB9EEEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:5c:f2:bb:4f:53:00:9f:d6:44:6c:78:eb:
1e:d5:eb:3b:1b:3a:29:96:d1:85:ba:ac:e2:e8:65:
1b:40:0d:3b:f5:c0:51:75:69:fb:9e:de:a0:b5:4a:
b0:21:09:83:ce:ad:f7:92:a3:07:6d:2a:da:6d:67:
f2:77:fe:4f:27:8a:7d:f7:4a:ba:22:db:2a:d9:6d:
51:bd:ca:d8:dd:b7:95:cc:13:f3:3b:88:d6:20:fd:
a4:6a:c1:50:7c:39:bc:5e:23:2c:7e:5e:58:72:32:
f9:e3:db:69:79:2b:eb:49:df:7d:35:d5:b8:2b:03:
38:3d:aa:ae:5b:c0:70:57:97:c4:fb:13:73:6a:4c:
8c:f7:d7:61:64:f1:14:b2:b6:d6:95:5c:65:dd:61:
ac:09:28:88:10:6f:af:d1:78:3a:1e:80:97:f9:80:
84:d1:e5:e8:4c:95:73:ce:92:5d:32:d6:45:c2:1f:
48:19:3d:ff:31:f2:d6:be:26:64:30:93:7a:54:05:
54:d3:7f:f7:39:a3:12:fa:36:72:0f:b3:12:8f:dc:
4c:31:71:42:5c:be:3d:e2:76:65:b5:6f:1a:ac:da:
08:0b:19:b7:aa:89:77:ea:49:ac:a3:3f:23:ea:ae:
fc:18:5f:41:62:97:16:fd:6e:02:fb:dc:41:85:bc:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FE:6D:33:B5:D2:74:C2:7D:03:D6:D8:5D:96:17:35:EB:9E:EE:B6
X509v3 Authority Key Identifier:
keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:67:04:9d:e0:0e:80:e3:55:61:83:b2:fc:99:12:aa:18:51:
bf:0e:d2:e1:3c:90:27:2d:f8:b9:17:b7:e8:48:74:c7:4b:14:
e2:ca:4c:ad:1f:cd:bc:8c:67:92:d0:06:f6:a8:6f:78:3b:50:
94:99:4a:8d:95:8a:00:9c:15:85:74:a6:72:4f:9c:29:12:16:
7a:f6:61:0d:8a:37:10:24:b1:d3:2f:e1:39:a1:c8:a8:98:01:
c7:15:53:15:c4:05:a4:96:7e:41:9f:b3:61:2f:7e:9a:68:38:
88:d5:c2:11:9a:af:44:52:d1:c7:8a:01:bf:03:12:65:cd:8e:
97:c7:b9:da:89:4b:fc:f1:85:da:b3:08:93:1f:58:de:33:0b:
b7:aa:64:11:54:79:4c:69:ce:fb:35:1c:aa:e4:fa:d1:88:0a:
30:17:46:27:de:54:4b:ad:95:96:b1:1d:32:76:ca:f4:13:ec:
d2:7c:f7:8d:4d:61:9c:37:d1:78:b2:fc:1d:b1:d1:cb:23:9e:
e5:4c:96:0e:5d:a6:04:59:31:05:9a:32:d2:65:82:b6:4b:13:
fc:af:c7:10:d8:7f:7e:02:4b:84:f5:07:ec:51:b4:81:7c:03:
09:34:2e:92:28:38:dd:5e:e5:3d:c6:af:60:34:30:7c:27:f3:
71:65:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:28:18 2025 by rpki-client