Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: dOI6ELkLxaNQnmmkybNT4Uw51hAIFTXZBgqxKQYUhqM=
Subject key identifier: F6:E1:D1:CF:5E:C0:2F:2B:38:3E:36:40:AA:B3:34:AB:EA:35:47:C2
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 0198936D67A64B3475421850E0DDA0AD4975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 059F
Signing time: Sun 10 Aug 2025 10:01:17 +0000
Manifest this update: Sun 10 Aug 2025 10:01:17 +0000
Manifest next update: Mon 11 Aug 2025 10:01:17 +0000
Files and hashes: 1: 1-sC3cWe2F3PAwnVpZHmzL2-YyzM.roa (hash: jSHFfqsR9pRFIPbrJJKcr/kC6tLUL1fQJt8OCh8d1xg=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: prqozTsTLhzoO+IRSosnqmZT9shubPR2sOz6xU41EmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:67:a6:4b:34:75:42:18:50:e0:dd:a0:ad:49:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Aug 10 10:01:17 2025 GMT
Not After : Aug 11 10:01:17 2025 GMT
Subject: CN=f6e1d1cf5ec02f2b383e3640aab334abea3547c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:42:20:bd:f9:58:20:a8:b5:12:9a:48:50:
9c:28:18:4a:24:b7:05:ca:12:db:0f:39:35:65:e4:
4e:68:34:95:b4:c6:ec:c3:83:52:de:bc:b4:f5:e3:
dd:6e:68:ba:8a:07:62:15:a8:2f:eb:55:31:43:3a:
89:87:ab:ec:a7:e9:33:e2:e4:6c:50:f1:83:52:13:
38:91:6e:d5:c6:3f:01:e2:98:98:df:1d:2e:4c:fd:
57:a5:02:0f:64:f3:92:88:87:36:97:83:cc:1c:7e:
15:20:01:77:0c:5d:ff:4e:73:59:83:1c:c3:f9:55:
c6:2a:e6:16:7b:f5:7b:af:e1:70:75:82:cf:b4:dc:
61:8d:61:3d:b5:6d:e1:b9:38:51:a9:f6:45:a5:fe:
d8:eb:d3:67:fa:31:b1:dd:7f:53:e2:d9:a9:0c:7f:
af:a2:67:af:7d:bd:16:7d:20:d6:d1:d1:b0:3f:d0:
3b:1c:f9:17:de:eb:63:1f:d2:61:66:e0:72:97:38:
5d:9c:f4:a7:e8:f1:81:f2:4b:de:6c:c9:14:9b:29:
ea:2a:25:a4:e7:47:43:fb:10:38:39:a1:c0:08:23:
bd:2f:e9:ce:69:57:89:7b:d0:d4:ab:d4:81:61:fa:
1c:91:50:a0:45:45:ca:0a:64:76:2a:07:fc:e8:39:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:D1:CF:5E:C0:2F:2B:38:3E:36:40:AA:B3:34:AB:EA:35:47:C2
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3b:bd:18:4a:c2:32:a4:bd:0d:57:17:b1:29:0c:21:2a:58:
d8:85:87:96:4f:66:5d:c3:d1:72:5a:f4:9f:c7:97:a9:c1:c9:
f3:2f:e4:c8:51:9d:ed:c8:ab:77:6b:a5:cc:6d:8e:9f:3b:55:
34:11:d0:04:32:61:dc:02:e4:f1:d5:ed:3d:85:dc:96:e5:d4:
e3:d2:70:20:af:49:29:75:3c:e6:dd:5f:8f:e5:d8:78:0a:18:
64:21:b1:f0:a9:b6:d0:47:32:00:f9:76:f2:e3:97:4a:be:99:
05:7f:e7:c8:aa:bf:2d:01:b0:19:7f:23:9f:a0:6f:36:0a:e0:
18:e9:3b:79:40:4a:ea:f5:c3:ae:a4:23:f8:e2:2b:d2:2c:cd:
df:d3:97:12:17:36:80:02:6e:3a:e9:f2:dc:ad:74:6e:62:f8:
43:ef:c5:a8:2a:85:f4:71:50:cf:07:26:e0:c0:2c:22:99:ce:
9c:19:a0:c4:57:4d:f2:90:65:7d:84:bc:9c:09:73:91:fd:28:
68:56:92:f2:92:28:2f:35:de:bd:99:d7:11:ed:3e:75:9e:da:
b4:ef:3c:9b:d9:2c:1a:74:ae:93:fd:12:e4:7a:9d:65:ee:32:
31:db:71:3d:4b:7e:ca:da:e3:10:6a:74:e2:11:d5:6d:a5:d8:
af:78:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:17:15 2025 by rpki-client