Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: JYwU/ZgTkGTdDc4tL4sK7albFDRN/ATqCq9/wYbwaZI=
Subject key identifier: E2:F6:D5:A5:7B:B0:11:0B:8E:C7:E4:33:BB:CA:B5:FB:27:9E:8A:E1
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 01976DAC26EB148D620D02F773279DEEB59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 0503
Signing time: Sat 14 Jun 2025 09:01:28 +0000
Manifest this update: Sat 14 Jun 2025 09:01:28 +0000
Manifest next update: Sun 15 Jun 2025 09:01:28 +0000
Files and hashes: 1: 6iwAnsKrvIzW_8kWxukMBv6_7-8.roa (hash: B5lqJOu3kAHiS4R57Sfyd1HoOQ3st29J+9s18/WFb88=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: 5epUzXsW9TDKnjw3O4llIlqQESn+0BfLy68aCp+KSyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:26:eb:14:8d:62:0d:02:f7:73:27:9d:ee:b5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Jun 14 09:01:28 2025 GMT
Not After : Jun 15 09:01:28 2025 GMT
Subject: CN=e2f6d5a57bb0110b8ec7e433bbcab5fb279e8ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:df:6f:4a:58:e8:03:5a:14:e4:e4:ea:aa:11:
88:e7:16:ef:6a:b6:f3:d1:6a:c1:d8:fc:9d:5a:35:
8a:d7:19:0b:d3:e2:c9:5b:71:ed:ff:d9:75:a8:da:
4f:e0:76:75:9a:35:ca:da:8f:1c:7a:88:5c:26:d7:
ac:e6:33:5e:c9:31:01:b0:1a:6b:05:eb:66:b3:9f:
ad:47:4a:2c:4e:38:56:43:d1:cd:f9:ef:f0:7d:e9:
0e:1c:d4:7f:f2:4c:20:ff:79:bd:cd:7e:ed:f3:3c:
c1:c5:18:93:88:59:c5:45:d0:8a:02:cc:24:23:e9:
6e:7f:6e:7d:5e:ee:18:72:23:e1:cd:21:33:d9:13:
c5:02:53:09:e3:f8:eb:26:07:bb:8f:d3:e6:98:f8:
16:f4:66:b4:18:f9:0f:82:2a:3c:ff:89:24:c4:00:
74:9d:ef:0a:85:62:0f:9e:21:c4:ea:b8:e4:29:14:
d0:c2:7c:ea:f5:42:52:18:a4:26:3e:51:a2:e7:09:
e6:5f:7b:fd:27:fd:b3:76:14:68:32:9f:10:b8:d4:
71:cd:68:32:99:0c:c5:d1:54:33:2f:f4:e0:ae:14:
cf:53:5e:40:a5:1d:68:06:e3:d2:83:35:96:5d:cb:
47:0e:15:5f:af:95:b3:34:36:ad:43:54:23:5b:4b:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F6:D5:A5:7B:B0:11:0B:8E:C7:E4:33:BB:CA:B5:FB:27:9E:8A:E1
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:d9:9f:a7:4d:b1:20:28:dd:eb:28:79:77:f6:e8:95:e0:
eb:1b:c5:44:e6:e1:60:45:f6:4e:17:81:d5:da:1d:1b:46:8d:
c9:ea:f3:de:a3:6b:62:41:e2:b1:f4:ff:e2:21:91:17:56:d8:
27:d7:98:72:e1:03:bf:3d:c8:c0:69:a6:a8:d7:a5:6c:4a:0e:
72:81:4a:86:c1:e9:2a:68:d7:ce:81:fd:af:46:33:9a:a1:f2:
09:8a:f7:26:ae:1b:cc:72:5d:42:9a:54:c5:79:02:dd:02:a6:
df:ac:0a:bd:40:62:d9:83:43:ae:55:38:49:9e:b4:99:49:96:
21:21:e3:37:8b:97:bb:49:97:d3:29:66:81:c4:d2:6b:26:46:
a3:4b:6a:49:5a:f9:f6:7b:a1:29:1a:3c:46:08:4c:c4:24:60:
e6:77:ca:a7:90:3c:88:b5:58:69:a7:b7:cf:b2:00:6b:39:57:
21:3d:c7:69:9e:9f:c9:e6:1a:84:7d:3b:4c:4f:bd:8b:88:09:
f0:3f:30:0f:06:3a:c5:29:70:e1:91:c4:4d:38:86:26:8b:f7:
6a:07:a3:09:4d:ef:8f:77:52:43:15:6a:87:9c:a5:cf:f3:04:
6f:c7:63:aa:5e:ad:94:c6:2b:01:2b:84:c2:5a:70:c4:31:eb:
83:ce:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:52:22 2025 by rpki-client