Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: +uSJeWchU8yblNMIWB5seZcpwDsb4/8xiDFqeUAybVM=
Subject key identifier: 64:4C:68:98:69:EE:A0:3E:6E:82:78:89:D5:10:08:2D:56:AE:BA:1C
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 01977188CF8C1906C344FDE3008D171D1D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 0505
Signing time: Sun 15 Jun 2025 03:01:20 +0000
Manifest this update: Sun 15 Jun 2025 03:01:20 +0000
Manifest next update: Mon 16 Jun 2025 03:01:20 +0000
Files and hashes: 1: 6iwAnsKrvIzW_8kWxukMBv6_7-8.roa (hash: B5lqJOu3kAHiS4R57Sfyd1HoOQ3st29J+9s18/WFb88=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: vsZNS3davM0n25cSbf5cA5yJzFQAV3KK/ABu3nDceGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:cf:8c:19:06:c3:44:fd:e3:00:8d:17:1d:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Jun 15 03:01:20 2025 GMT
Not After : Jun 16 03:01:20 2025 GMT
Subject: CN=644c689869eea03e6e827889d510082d56aeba1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:08:b9:24:62:8c:f2:c0:06:be:7c:cc:54:
54:79:9e:ef:b3:f5:ea:11:ee:dd:00:54:28:db:f5:
67:a8:39:9a:2f:80:56:c5:97:fb:ed:72:83:92:f6:
54:8e:ed:8f:9f:f0:db:bd:b7:78:6e:f5:b4:1f:8a:
1d:98:df:fe:5f:a8:9c:8b:4a:26:45:15:1c:e6:51:
d6:cd:40:07:08:02:9e:f6:82:29:81:3f:7d:99:97:
ae:af:ba:7f:05:b3:ad:25:6c:93:2c:a6:95:60:3d:
94:17:ce:87:5f:50:1b:ed:b1:8b:01:6a:3a:66:20:
46:c6:6a:b4:03:3a:e5:e5:d2:48:cf:4d:3d:d8:8e:
72:7b:85:3e:22:83:7d:8b:6f:02:b3:9d:ae:05:2c:
16:02:22:d4:44:17:8d:d1:29:5c:4f:76:3b:32:31:
dd:95:22:78:86:00:82:19:a0:61:63:d6:4d:72:03:
9f:4f:5b:9f:25:3c:f9:21:08:e8:a2:77:83:0a:dd:
9f:a6:d5:38:e9:7b:74:0e:2b:d4:5b:40:46:14:aa:
b0:65:8d:42:d2:28:a0:50:79:a2:82:10:7e:2a:32:
f1:81:a7:c5:8f:30:0b:be:b9:a7:ee:6f:de:2c:b9:
53:e6:9d:41:1d:0b:06:f3:06:f2:25:f8:4d:57:e7:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:68:98:69:EE:A0:3E:6E:82:78:89:D5:10:08:2D:56:AE:BA:1C
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:83:0e:45:14:48:68:e8:7f:f7:2c:9a:df:b0:1d:ee:69:11:
44:08:2e:61:f5:c6:b5:bb:a7:e1:0a:fb:a6:23:08:6f:38:f3:
f3:27:e6:7b:98:f1:5b:fd:c3:7c:b3:0a:4b:23:86:51:c1:9a:
1a:e2:d8:6f:ad:15:35:81:58:cd:a2:f9:3d:fa:fb:f0:b4:10:
02:9f:2e:6b:06:c1:5d:56:6b:ad:f6:e4:89:a1:15:5d:bf:dc:
b9:16:dc:8c:ea:3c:fe:b5:79:a8:d6:be:b6:d3:f6:00:3b:61:
ae:6b:16:77:c8:f2:5c:3b:6e:19:79:2d:ee:2d:6f:79:91:ff:
a9:f7:df:ab:fc:1d:da:bf:ff:74:96:19:c5:d7:80:69:3f:e5:
1b:54:e8:72:cd:dd:95:00:ad:c1:e7:f0:1b:0c:e9:55:b9:dc:
e1:0d:a9:ac:ec:ee:54:57:c4:8d:97:8e:59:20:07:14:bd:83:
79:bc:ac:34:2f:fd:3a:4f:90:c4:6e:95:ee:f1:d9:8f:5d:ec:
00:d5:02:26:11:44:4f:d7:92:30:82:fa:63:63:f7:6f:d0:a6:
7c:07:b6:be:42:33:95:96:fe:c1:08:38:f1:b4:9c:04:c6:55:
1a:91:54:48:e5:72:df:4e:92:34:3c:d9:0c:ab:67:b4:7a:00:
1d:16:4f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:50 2025 by rpki-client