Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: fBVRPYY8J5asl9Ud4uw/CJkz8P/8QwDn3dgwQ/0+l0Q=
Subject key identifier: 2C:61:5C:B1:EA:72:DE:C3:E0:6E:F7:11:16:2A:4D:C5:D0:66:62:30
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 0198C97F9CB5166CBAF53C0D99B125AEF808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 05BB
Signing time: Wed 20 Aug 2025 22:00:40 +0000
Manifest this update: Wed 20 Aug 2025 22:00:40 +0000
Manifest next update: Thu 21 Aug 2025 22:00:40 +0000
Files and hashes: 1: 1-sC3cWe2F3PAwnVpZHmzL2-YyzM.roa (hash: jSHFfqsR9pRFIPbrJJKcr/kC6tLUL1fQJt8OCh8d1xg=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: W4OVUbqcN1IYhaeM6j57q1ufFQJh8XnV13cwSwNvGcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:7f:9c:b5:16:6c:ba:f5:3c:0d:99:b1:25:ae:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Aug 20 22:00:40 2025 GMT
Not After : Aug 21 22:00:40 2025 GMT
Subject: CN=2c615cb1ea72dec3e06ef711162a4dc5d0666230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:a7:bc:e7:d6:02:aa:35:a2:ae:34:19:3e:
81:7e:d4:50:a5:2a:6e:3e:fe:e9:79:de:26:65:f6:
ff:d3:0e:de:eb:86:1e:a5:d1:02:ed:c1:d3:f5:1a:
f9:a6:b5:22:c2:de:e0:a8:19:b6:18:27:62:a5:08:
24:35:e9:42:e2:9b:b2:31:7c:b0:de:2f:01:44:9c:
9f:e8:39:0e:c0:75:91:30:74:f3:0d:32:f9:0f:5b:
76:f6:8f:ef:a9:ee:2d:f1:f3:0d:f6:aa:21:d7:5e:
74:05:6f:40:51:8d:3a:54:59:e6:46:76:c9:4b:cb:
e5:64:54:9d:96:80:72:35:91:8d:cf:d5:9e:3a:57:
bf:db:6a:36:e0:33:3e:f0:1d:49:bc:0a:5f:e6:61:
94:c3:39:81:bb:e2:6c:5a:f0:87:70:9b:7b:fa:45:
ef:10:12:44:65:90:a1:86:e9:99:e6:01:6e:17:3a:
cc:b8:0d:80:1b:21:9a:c6:bc:83:12:70:27:86:fd:
0c:86:72:bb:6a:60:24:1d:1b:6f:ba:ad:cb:5f:91:
04:06:e4:6a:07:56:5c:d3:32:e0:f3:d2:3a:88:45:
ae:52:8a:22:27:0a:f2:0d:97:3c:15:05:98:a1:d3:
ce:2e:b9:e0:d8:45:8f:82:33:82:21:d6:0c:74:9f:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:61:5C:B1:EA:72:DE:C3:E0:6E:F7:11:16:2A:4D:C5:D0:66:62:30
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:92:df:ea:c5:18:17:70:3d:7e:b6:3f:36:31:66:c9:41:87:
31:73:3b:0f:a5:2c:6d:44:38:0c:01:59:97:6b:4e:87:18:8c:
20:b0:a0:2c:c9:56:ba:8d:b5:f9:92:87:09:09:2d:6a:45:59:
f6:d2:d1:37:c2:b8:cc:2a:c9:36:71:c2:dc:90:1d:db:32:f6:
cc:10:ad:77:01:fa:2e:77:e5:94:5b:32:74:84:f1:9e:a8:62:
68:37:c1:49:53:10:de:95:8b:c6:a0:30:74:be:be:04:50:8d:
c2:6e:c8:ab:92:ff:55:71:3b:77:45:98:48:7c:8f:11:60:dc:
03:e4:5d:17:bf:39:79:13:78:a7:58:9f:9e:92:ea:75:a8:20:
66:c2:b8:91:45:e4:40:68:d2:d2:4d:f8:18:9c:ba:af:52:63:
37:8d:34:69:d5:17:b3:bb:63:5a:22:3a:ef:0f:b0:fd:5a:50:
1e:9c:f9:30:b8:7c:43:2d:1a:a9:eb:36:0b:5d:ca:f5:6d:a9:
7e:fe:ef:13:b2:50:47:f6:ec:92:5c:34:79:e8:e2:43:49:b5:
9f:55:a0:d9:5d:97:24:2f:fb:62:5d:bc:ea:4e:30:19:5d:3a:
36:94:bc:f7:b2:c6:ae:f9:d3:dd:b7:b9:07:6b:55:e1:bd:ea:
07:68:94:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjJf5y1Fmy69TwNmbElrvgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDg1MmFmNWE4ZTQzNmIyZDRkYTcyZTkyYjY0MTE0ZTFm
NGQxNWYwHhcNMjUwODIwMjIwMDQwWhcNMjUwODIxMjIwMDQwWjAzMTEwLwYDVQQD
EygyYzYxNWNiMWVhNzJkZWMzZTA2ZWY3MTExNjJhNGRjNWQwNjY2MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+invOfWAqo1oq40GT6BftRQpSpu
Pv7ped4mZfb/0w7e64YepdEC7cHT9Rr5prUiwt7gqBm2GCdipQgkNelC4puyMXyw
3i8BRJyf6DkOwHWRMHTzDTL5D1t29o/vqe4t8fMN9qoh1150BW9AUY06VFnmRnbJ
S8vlZFSdloByNZGNz9WeOle/22o24DM+8B1JvApf5mGUwzmBu+JsWvCHcJt7+kXv
EBJEZZChhumZ5gFuFzrMuA2AGyGaxryDEnAnhv0MhnK7amAkHRtvuq3LX5EEBuRq
B1Zc0zLg89I6iEWuUooiJwryDZc8FQWYodPOLrng2EWPgjOCIdYMdJ90nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxhXLHqct7D4G73ERYqTcXQZmIwMB8GA1UdIwQY
MBaAFKwIUq9ajkNrLU2nLpK2QRTh9NFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEt
NTAwN2RkZTM1MDQ1LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEtNTAwN2RkZTM1MDQ1
LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5Lf6sUY
F3A9frY/NjFmyUGHMXM7D6UsbUQ4DAFZl2tOhxiMILCgLMlWuo21+ZKHCQktakVZ
9tLRN8K4zCrJNnHC3JAd2zL2zBCtdwH6LnfllFsydITxnqhiaDfBSVMQ3pWLxqAw
dL6+BFCNwm7Iq5L/VXE7d0WYSHyPEWDcA+RdF785eRN4p1ifnpLqdaggZsK4kUXk
QGjS0k34GJy6r1JjN400adUXs7tjWiI67w+w/VpQHpz5MLh8Qy0aqes2C13K9W2p
fv7vE7JQR/bsklw0eejiQ0m1n1Wg2V2XJC/7Yl286k4wGV06NpS897LGrvnT3be5
B2tV4b3qB2iUtA==
-----END CERTIFICATE-----
Generated at Thu Aug 21 01:59:37 2025 by rpki-client