Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: RkPtSFHAMDq/Pa14wkvzgwop2eIjEJiMZYG9xLiq8j8=
Subject key identifier: 90:50:79:06:53:A2:16:F2:D0:12:84:20:BC:E6:49:A1:1A:74:82:58
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 01965982C694596BB65DA7058709F04BC55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 0474
Signing time: Mon 21 Apr 2025 18:01:04 +0000
Manifest this update: Mon 21 Apr 2025 18:01:04 +0000
Manifest next update: Tue 22 Apr 2025 18:01:04 +0000
Files and hashes: 1: 6iwAnsKrvIzW_8kWxukMBv6_7-8.roa (hash: B5lqJOu3kAHiS4R57Sfyd1HoOQ3st29J+9s18/WFb88=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: 9/5Y+0SEYbzhnkxaaiEz2Q3kf/k9/j+qi2Gj1KS1NO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:c6:94:59:6b:b6:5d:a7:05:87:09:f0:4b:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Apr 21 18:01:04 2025 GMT
Not After : Apr 22 18:01:04 2025 GMT
Subject: CN=9050790653a216f2d0128420bce649a11a748258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:b2:73:55:a6:04:ca:a9:92:92:76:87:ff:
d8:8d:ee:94:a5:3e:30:92:62:78:c9:a8:f9:09:4e:
1f:be:b3:f0:b7:69:10:50:a6:69:10:b1:00:b6:8d:
fe:73:a7:3f:de:30:1c:2e:63:a6:a3:0b:71:67:e4:
b9:75:2a:ff:05:ce:fb:62:4f:b3:24:a2:f4:8b:01:
be:46:78:ae:b0:50:b1:b9:f8:d0:13:22:f5:c5:1c:
12:79:69:67:9b:9d:02:df:cf:fc:48:80:db:c1:9e:
23:a1:1d:8b:bf:35:bf:d8:57:e3:2e:54:aa:f0:a9:
a5:9c:20:7f:79:23:13:0d:5c:e1:40:df:8f:c8:8a:
80:00:2f:df:ec:a0:62:00:bd:ba:f2:e7:c9:d1:ec:
42:56:d1:7b:0b:91:af:ac:0d:85:ac:55:53:de:8c:
c0:83:18:f8:75:cd:93:ca:91:58:d1:4f:c7:ff:18:
47:a3:10:cc:b4:48:86:df:9f:c5:d5:90:a1:80:ef:
0c:51:09:8e:ed:a9:a5:92:23:ce:fb:8b:c3:44:15:
bc:02:fd:74:5e:d8:32:e9:d2:54:ba:ad:b0:93:e0:
9c:d4:d9:a1:a9:7d:39:b6:c2:86:97:07:57:d7:6d:
cb:58:f8:f5:b8:bd:18:84:e9:68:60:9f:85:ad:51:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:50:79:06:53:A2:16:F2:D0:12:84:20:BC:E6:49:A1:1A:74:82:58
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:23:d2:14:6b:fa:3e:14:e6:b1:51:88:9c:27:d2:a2:79:e4:
12:8c:5c:44:5c:fc:b0:3a:c1:2b:3b:23:09:eb:74:a7:b8:f9:
05:7f:89:dc:51:fb:46:fc:20:ac:38:85:fa:6d:8d:17:2b:97:
b0:f2:94:ab:39:f4:32:81:e2:55:2e:96:d1:d7:cd:8a:d5:93:
ef:13:e4:15:d9:4e:8b:63:84:4c:e0:de:80:00:2a:14:fb:a7:
a6:44:a1:8f:a7:b6:65:88:cc:66:6d:ee:d5:8c:c9:06:f0:c1:
c4:12:83:3e:7e:5c:d7:b9:51:0f:c0:c6:19:ce:5c:80:d2:0d:
0a:a1:82:3e:a0:c9:f9:45:44:47:b7:27:d3:ac:74:5d:3b:57:
99:e5:f7:35:ee:2e:6a:44:bf:4d:8e:50:52:b3:cf:52:0d:27:
50:c2:98:f6:31:65:29:78:fc:a8:27:39:1d:02:b7:3b:a9:79:
d3:64:13:82:37:02:4f:c0:e7:04:91:ec:e2:4c:e4:6e:c8:58:
62:ad:30:e3:27:fd:6e:ce:28:41:1c:cb:72:e8:cf:d7:70:27:
2e:f8:b1:48:ed:b5:7c:b1:ed:c0:06:ba:62:f7:ff:1b:58:4d:
66:3f:f2:7f:fd:a7:1c:9e:73:29:f0:94:27:2a:29:91:36:9a:
cf:d7:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:28 2025 by rpki-client