Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: RuY2pCB0t02cr3F7d5fiRM/eJvNSCPQFQvDkGO6airE=
Subject key identifier: ED:E9:48:00:7A:EF:35:0F:F0:DE:96:66:32:42:F3:28:AC:C5:14:B5
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 0196748BAC2C9E17B80639B7EC85F0E13695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 0482
Signing time: Sun 27 Apr 2025 00:00:32 +0000
Manifest this update: Sun 27 Apr 2025 00:00:32 +0000
Manifest next update: Mon 28 Apr 2025 00:00:32 +0000
Files and hashes: 1: 6iwAnsKrvIzW_8kWxukMBv6_7-8.roa (hash: B5lqJOu3kAHiS4R57Sfyd1HoOQ3st29J+9s18/WFb88=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: UQeBU+pZN7a5vKUWvSDR+4mn2FO/w9hQP+H98TpqKi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:ac:2c:9e:17:b8:06:39:b7:ec:85:f0:e1:36:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Apr 27 00:00:32 2025 GMT
Not After : Apr 28 00:00:32 2025 GMT
Subject: CN=ede948007aef350ff0de96663242f328acc514b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:3a:cc:32:23:71:23:08:35:ca:18:45:d4:
2c:55:d8:11:5c:75:ce:12:d8:f5:1b:ea:8b:c6:f0:
1b:de:c8:bd:ae:98:ae:f4:26:8e:52:5c:6b:22:55:
eb:4c:8f:2e:c0:96:8f:9a:53:8e:0b:28:14:f5:2a:
86:b3:05:e2:6f:45:29:0e:71:70:5a:c8:db:42:88:
72:db:dc:48:5f:64:45:de:6d:c7:f2:6b:c0:a9:13:
d0:26:06:c0:79:98:ad:b2:10:e4:f2:43:78:98:d4:
8c:e7:ad:f4:54:4d:7e:f3:b8:de:d5:bb:d3:d2:3c:
dc:9f:9a:b7:31:18:85:ed:f0:a7:91:a5:4e:e8:10:
f4:6d:11:7d:65:85:2b:12:b8:49:ba:22:db:97:dc:
7e:49:a1:0e:5d:b2:9d:82:a2:53:95:ca:d6:3f:bd:
15:ba:1a:fa:a1:44:9f:4d:64:c6:1c:f6:64:e1:db:
ce:90:0e:a2:1a:d4:5e:3a:29:4c:d1:05:ad:04:7e:
79:29:67:a0:a9:1d:a2:b0:7c:8f:d9:af:43:67:ef:
57:31:81:54:7a:09:61:82:e0:ea:72:2c:66:fb:1a:
9d:b4:2f:3e:9e:8d:92:7c:bf:47:54:de:49:26:80:
f8:67:b4:6a:b7:2c:95:12:1a:3f:3f:25:75:9c:84:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E9:48:00:7A:EF:35:0F:F0:DE:96:66:32:42:F3:28:AC:C5:14:B5
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:85:9c:7b:a9:70:ea:47:0d:88:03:d5:94:4f:1d:41:7e:d8:
6c:57:f2:b3:08:31:f6:f3:48:b1:b9:70:e1:db:df:35:f2:5b:
f7:52:dd:01:a9:e4:24:4b:5a:03:4a:17:73:39:b0:0f:52:73:
68:66:33:cf:00:ba:7b:26:82:69:d4:9f:4b:14:59:39:4d:ad:
2f:65:dd:40:78:e5:1b:97:3e:80:e5:cd:1a:dd:a1:de:4c:67:
45:08:b9:3c:74:81:bc:fe:49:96:6c:89:33:82:53:b9:7b:00:
c7:0b:9c:c4:c7:31:49:34:12:a6:c5:db:20:37:62:26:e3:73:
b4:0b:c3:36:1b:98:ce:59:a0:f6:c8:04:36:52:9e:da:b6:cc:
8a:b7:7a:01:09:b4:d6:6f:53:89:f5:d5:7e:4a:cb:24:7e:26:
7f:b7:11:f8:88:b6:0e:0f:09:07:88:7a:06:d9:eb:c9:e1:eb:
24:ec:47:fc:f0:ec:ec:4d:49:92:59:c8:9d:d0:0b:a2:a0:cb:
ab:c8:48:e7:0a:72:45:4d:4c:b1:ea:43:3c:05:25:4d:fd:83:
5d:50:c5:21:58:84:5c:e1:53:af:d2:3c:5b:61:b5:04:56:f8:
ae:7a:a5:1a:b3:49:80:fa:5b:09:e1:48:e7:59:02:96:0d:6c:
88:a8:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:25:02 2025 by rpki-client