Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: wFiOnjUI3Wvk80OCmQIs9rKi0pXDSS4aLS2/SNtujNg=
Subject key identifier: 7C:1C:13:E6:B7:80:39:AE:52:1D:6D:62:7E:C5:6E:18:A5:D7:66:8D
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 0198D5F16BB34EA3B5045DF41F9C6B956493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0A98
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: 1aPOeQrPKMC7DoJs3xs0OtIo5dsT4ly34D5thg+c9oE=)
2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6b:b3:4e:a3:b5:04:5d:f4:1f:9c:6b:95:64:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=7c1c13e6b78039ae521d6d627ec56e18a5d7668d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:ac:e2:87:c7:b0:62:36:0c:c6:8f:37:60:
2a:25:8d:45:cd:e9:a6:9b:c7:70:43:bd:45:81:95:
82:12:0f:73:3f:e6:2b:5c:f5:7d:ad:36:23:71:74:
d2:37:32:47:7b:d4:ef:01:bc:51:a9:e6:53:71:5e:
72:d2:bf:59:94:2c:8f:be:3e:8e:ea:77:22:9e:f3:
0f:5f:66:66:9b:6f:ca:cf:c2:97:34:64:80:98:85:
29:bc:72:8a:16:22:32:e1:55:28:2d:e1:cb:2b:72:
de:68:26:3f:f7:e4:ff:09:bf:0a:01:b0:6e:40:8c:
61:f6:d1:83:09:bd:92:5c:ba:43:ea:d4:c5:1b:31:
95:40:7c:8b:6c:c8:bc:de:ef:99:c5:9a:b6:02:bf:
6b:21:2c:d8:13:f1:90:0e:e5:72:da:99:9d:5c:33:
b9:07:3d:e6:a1:28:eb:ef:11:95:c7:29:23:b5:23:
80:ca:b6:2f:88:ff:f2:f0:56:2d:12:51:db:a3:20:
d6:0d:aa:f6:64:5c:3b:61:6f:cb:3b:96:68:93:7f:
1a:11:d7:f5:06:60:27:6b:cd:05:ff:94:01:60:de:
ad:36:65:e5:48:42:90:04:be:cf:58:c8:c5:e9:79:
4b:f0:b9:0e:91:c9:46:57:51:b3:d2:51:9f:a5:d8:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:13:E6:B7:80:39:AE:52:1D:6D:62:7E:C5:6E:18:A5:D7:66:8D
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:59:02:69:c1:1b:42:6e:3e:57:7c:e0:ed:4c:c2:52:bf:5e:
be:a2:71:f9:e9:03:47:45:30:da:d0:df:5d:af:0f:b8:1a:18:
c0:10:7f:fa:95:e4:40:f9:84:26:fe:ea:3d:9a:c2:96:7d:5b:
32:85:13:5d:a4:cb:7b:c0:2e:35:d7:21:05:3f:df:f8:29:4f:
a5:2a:a5:c1:86:83:8e:7c:eb:06:0f:3b:f0:81:4a:55:69:44:
43:d3:ee:68:29:39:68:5f:e9:0e:e4:42:ca:92:cd:ce:d7:4e:
3b:82:08:a5:cb:df:09:19:fc:e4:5d:a4:65:ab:9b:20:f7:15:
7c:58:69:5e:3f:38:72:fc:95:88:80:08:52:4a:c0:33:fe:9c:
7a:22:29:cb:cb:1e:b6:50:a3:5d:5b:2f:78:21:20:d6:40:20:
30:68:22:ba:68:5e:79:79:75:17:b0:04:50:51:2d:95:b4:a2:
ab:5f:78:25:db:d7:87:2d:a3:4b:c6:a7:bd:64:48:52:53:bb:
d9:6f:e0:ea:8b:24:c3:db:8e:a5:52:7d:ce:19:1c:e1:bc:5f:
dd:a6:e9:6c:13:d4:1e:cb:5b:fb:a7:a8:53:46:77:4b:a5:07:
2d:75:1b:74:75:4a:2b:52:75:02:52:06:08:f7:ac:3f:a3:6b:
82:8d:d4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:01 2025 by rpki-client