Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: RX1Hw31ocjeorX/pkxrW4WL7y5+LOesPLCGv6HMdAZQ=
Subject key identifier: ED:9D:4D:E8:F0:4D:40:0E:34:DC:B1:19:E4:73:16:B3:E3:8F:30:F5
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 0197B6328CAD94119C079F984D0E56BA1108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0A03
Signing time: Sat 28 Jun 2025 11:00:55 +0000
Manifest this update: Sat 28 Jun 2025 11:00:55 +0000
Manifest next update: Sun 29 Jun 2025 11:00:55 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: IyJHMRukFn95ZYm34XcCJNDCjGxVItpBDkJbpU0d9RY=)
2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:8c:ad:94:11:9c:07:9f:98:4d:0e:56:ba:11:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Jun 28 11:00:55 2025 GMT
Not After : Jun 29 11:00:55 2025 GMT
Subject: CN=ed9d4de8f04d400e34dcb119e47316b3e38f30f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:4c:54:79:04:b9:73:05:b7:71:52:bb:35:
81:bb:39:2d:49:6b:eb:e2:22:e8:73:4d:1e:c4:af:
91:a3:3c:3b:c2:8a:0b:52:f2:65:f7:32:87:30:25:
d4:1c:38:42:1a:b7:14:3a:4d:a0:80:ad:33:06:8f:
15:6f:72:63:74:19:ed:4e:e2:9f:87:8d:36:ba:cb:
e2:b9:ad:1f:66:f3:15:df:d5:45:e2:07:a5:f8:a1:
03:26:de:80:80:00:e9:d3:0d:6f:e5:93:08:05:2a:
fe:c7:97:21:bb:4a:43:32:f2:3e:cf:05:6d:66:b8:
c7:a9:1d:e1:73:f3:1a:62:11:7a:69:b4:3b:8c:49:
98:52:bd:6c:ea:2a:1a:97:43:7f:84:9e:4d:96:75:
9d:6a:1a:9f:c5:51:a6:f8:98:34:44:6f:fd:e7:27:
93:00:3d:bc:c1:4b:0e:62:94:b5:2d:b3:f8:0d:4f:
93:47:89:49:7e:1a:a8:b6:3e:35:4e:9b:0c:fb:4d:
76:7b:a9:7e:d9:d5:98:12:eb:dc:db:ad:16:c2:f7:
eb:cb:6b:0e:42:36:88:d2:df:a5:a7:44:69:03:e8:
0c:1e:36:3b:65:5e:7f:d7:e4:62:21:4c:e0:a2:7d:
87:23:39:b3:f5:78:94:ac:28:e5:28:f7:08:99:a8:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:4D:E8:F0:4D:40:0E:34:DC:B1:19:E4:73:16:B3:E3:8F:30:F5
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e4:38:76:19:f1:c1:ee:e1:4d:95:ec:b0:1b:f5:47:22:1a:
d3:08:83:bf:1e:90:86:e1:08:8b:97:a8:0a:ee:e9:86:6d:6d:
28:38:ac:0d:f1:07:d3:f5:94:a4:d1:dc:c4:9b:f5:19:b8:f6:
0a:7f:69:3e:cd:38:9c:fa:52:eb:34:1f:36:81:c3:00:59:0e:
0c:fc:20:01:f4:70:06:38:18:be:a6:fc:e9:0b:ae:6a:3a:82:
93:2b:db:47:bb:96:4d:e1:a0:53:4b:d6:15:fb:06:c4:0c:a1:
a6:a1:ff:84:11:3c:ab:1c:89:be:4a:10:d1:40:62:5c:80:b0:
56:8e:6c:68:33:12:15:e9:8e:e6:e3:94:d6:93:81:03:3e:d6:
1e:14:10:61:8f:22:9d:4c:47:1d:f6:09:30:b3:00:60:9b:24:
a4:75:6f:ac:ab:e1:50:a8:49:49:5f:ce:d6:64:da:66:5f:d3:
7a:d5:61:c7:0a:9d:65:a4:78:15:ec:6a:b9:c2:48:ed:45:d5:
73:28:08:92:00:19:df:89:6a:1f:d5:05:d9:54:c6:18:22:02:
50:ef:f0:71:d6:1e:d3:f6:51:23:b9:16:0f:53:a6:a8:3c:7d:
fc:29:f7:49:44:cb:01:36:b0:6f:dc:3f:48:9a:7f:09:71:d5:
00:36:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:36 2025 by rpki-client