Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: Oyq11kQyKsWHKtXIlEgbCViqhCYERAV/M+t2QLOUrsE=
Subject key identifier: 39:0D:B1:BB:66:EB:38:26:0B:74:71:5C:95:98:A3:C3:39:EC:74:21
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 0196CF50270B5E72C8AD540A662476E34945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 04B1
Signing time: Wed 14 May 2025 15:00:58 +0000
Manifest this update: Wed 14 May 2025 15:00:58 +0000
Manifest next update: Thu 15 May 2025 15:00:58 +0000
Files and hashes: 1: 6iwAnsKrvIzW_8kWxukMBv6_7-8.roa (hash: B5lqJOu3kAHiS4R57Sfyd1HoOQ3st29J+9s18/WFb88=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: EtDbfzHhdEK4O9jZYOYXc60w39kG0zYdFZYvMDYiLOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:50:27:0b:5e:72:c8:ad:54:0a:66:24:76:e3:49:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: May 14 15:00:58 2025 GMT
Not After : May 15 15:00:58 2025 GMT
Subject: CN=390db1bb66eb38260b74715c9598a3c339ec7421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:a4:78:89:4b:fa:1a:57:0d:39:5a:0d:54:
38:73:dd:71:6e:2a:cc:0f:41:a7:5c:e2:a4:93:2c:
82:9e:f0:5b:e9:1e:a4:01:22:b0:c0:53:b8:3c:dc:
54:1f:e7:64:61:fa:d9:d9:e7:98:cb:ba:4f:df:ae:
bf:b2:93:69:fe:70:c8:b2:43:88:96:11:94:97:5b:
1c:ed:4e:17:b1:c8:f5:cb:5f:9d:0f:1c:14:f2:72:
b2:69:ad:e2:2d:34:6f:57:3d:99:36:31:23:5d:95:
14:e5:b2:13:04:5e:5a:44:c4:39:71:ad:b2:11:b6:
d1:e4:91:7b:9b:6e:7b:7f:dc:ac:69:aa:00:0a:d2:
3b:f7:f8:e7:70:b7:1c:1b:dd:4a:5b:f2:b6:42:ec:
00:27:38:5f:4a:8f:03:bc:ae:fc:75:a0:45:7d:fa:
ff:5c:ee:79:f2:97:ce:3a:d4:22:8b:da:01:a2:9a:
74:63:fd:6b:87:1a:ca:2b:ff:0b:ca:38:94:84:9d:
2b:92:de:53:17:e7:25:b0:8a:da:6f:30:cc:40:30:
39:2a:e8:f4:9e:74:fe:0c:c6:4d:30:b6:15:2e:85:
a0:2c:dc:5f:e2:6a:1d:f1:98:29:01:e6:2f:cf:a9:
e8:c8:81:22:80:2c:10:7f:1c:4d:a5:34:c3:25:74:
d0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0D:B1:BB:66:EB:38:26:0B:74:71:5C:95:98:A3:C3:39:EC:74:21
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:13:c5:69:0e:22:20:82:8d:26:1e:6e:00:a1:3a:62:02:53:
0b:37:e4:7c:0a:54:3d:53:e7:4b:da:1b:5a:b5:a5:f2:70:e5:
0f:38:59:39:c9:e3:62:dc:e5:e2:53:04:ba:62:d8:70:58:20:
de:d4:54:4d:f7:0f:62:e4:7a:90:47:cd:fe:6e:cf:1a:1f:f4:
90:61:bd:27:62:89:35:f3:86:2b:16:c1:7c:c1:59:72:8a:0b:
86:1b:03:4c:b2:43:0d:c6:f9:62:7a:d7:54:4b:04:3a:07:1f:
08:36:5e:40:2c:35:6c:e2:82:30:10:0c:65:32:3f:1b:5b:9e:
e5:78:b0:42:7e:40:8e:26:61:83:1f:36:74:a1:43:58:c5:03:
9f:5f:42:12:c4:ea:21:6a:33:8f:b5:a0:cb:d6:58:68:05:80:
b4:ae:be:b2:c8:58:ac:58:ac:cf:46:73:3d:24:bd:44:f7:70:
2d:bb:13:9f:d4:36:73:ec:37:0a:33:d9:77:6a:a9:35:e7:01:
c1:76:73:37:a5:01:23:d3:4e:93:21:49:b3:f6:0a:10:bf:3c:
a1:f7:97:d0:48:63:39:04:34:d5:c1:2a:38:c9:0e:2e:b3:07:
8f:53:98:12:6b:c3:bc:b8:fb:20:1f:df:69:28:ad:86:04:8b:
dc:16:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:32:32 2025 by rpki-client