Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: Ix+OiLo0EdLrBRjj3hBOWHqZ3kVAlXzZXcYt3Y2/9M0=
Subject key identifier: 74:14:B0:D5:AA:5B:97:DF:60:57:0C:F5:9A:95:33:75:FE:38:2C:D4
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 01969E2C84DCB0F5C2D56AA9F82FC2E23C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0972
Signing time: Mon 05 May 2025 02:00:39 +0000
Manifest this update: Mon 05 May 2025 02:00:39 +0000
Manifest next update: Tue 06 May 2025 02:00:39 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: pRb5alZMOP91OAbijypNthEM1P1XIUl4SjwHzNxlZPk=)
2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:84:dc:b0:f5:c2:d5:6a:a9:f8:2f:c2:e2:3c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: May 5 02:00:39 2025 GMT
Not After : May 6 02:00:39 2025 GMT
Subject: CN=7414b0d5aa5b97df60570cf59a953375fe382cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:db:6f:0d:fd:1c:f3:6c:e3:e6:ad:1c:ae:
24:07:99:5c:b5:d9:f5:ae:44:29:76:35:84:27:b3:
a6:55:06:5e:78:ca:72:e4:12:bc:ed:42:47:e3:76:
d7:26:38:00:b4:ec:28:bd:93:0e:6d:76:b1:9f:12:
7f:0f:28:15:84:aa:15:10:ca:96:3d:fd:6f:24:d5:
e4:32:1c:eb:6e:cd:15:46:fd:29:c3:bd:a5:b0:3e:
b8:7b:75:b9:01:5b:f2:ee:5a:1b:c6:87:7a:c2:69:
56:e4:11:fb:98:84:08:19:69:8d:f0:62:a6:b6:3e:
05:6d:8c:28:70:12:78:37:cf:07:16:82:6a:06:8b:
e6:64:26:d8:9c:27:9e:98:26:8c:2f:9b:dd:12:32:
2c:d1:7f:08:b5:6b:85:e6:1c:87:36:3a:76:16:bd:
83:80:33:56:91:09:2d:16:65:4f:93:71:e3:56:e4:
7e:e8:47:d8:f6:ec:ec:80:b5:10:12:6c:8a:8f:be:
ab:37:7f:46:51:91:9e:60:e6:86:4c:e3:20:d6:bd:
20:bf:8b:c7:92:e9:12:3f:da:e4:e7:18:f8:78:9d:
77:05:25:d9:10:f2:5e:53:b2:e4:8f:2b:39:c1:80:
5b:eb:1e:f5:d8:02:da:ba:84:36:d3:63:95:fe:93:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:B0:D5:AA:5B:97:DF:60:57:0C:F5:9A:95:33:75:FE:38:2C:D4
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:38:c5:25:69:44:f6:24:42:06:59:f5:83:f6:7f:28:e5:02:
f0:84:4f:8d:48:65:77:49:75:37:35:b9:78:84:42:a4:a4:98:
7c:a9:0c:94:59:2b:bc:0d:13:e6:26:2d:7f:78:17:95:37:66:
c0:c1:fa:c6:f0:89:66:4a:a9:45:8f:0b:27:80:f4:de:f7:2a:
e9:b5:5e:f7:2e:ef:66:fe:75:bb:ab:de:91:f9:95:1c:71:30:
45:5a:c4:ed:35:59:ac:0c:8a:3a:ca:d4:5b:c7:19:81:41:12:
e5:f3:0a:a6:2c:52:55:47:6e:ea:8e:1c:a9:a4:ca:db:8d:b8:
2b:63:d7:8b:a8:d0:0c:01:91:d3:b9:63:e6:0c:44:9d:78:47:
44:40:65:ce:f4:89:53:2a:1c:67:5b:6b:28:90:04:02:ff:89:
53:13:0d:c0:10:dd:a0:e2:2a:8a:3b:2a:bd:13:f4:04:c9:d5:
35:26:b9:4a:00:01:86:17:12:00:bb:99:32:66:22:d7:6a:47:
08:3f:f2:de:ab:d8:5a:a8:5c:eb:90:74:50:b5:0b:a8:8a:a3:
c2:d2:6b:ca:83:7b:a3:02:fd:a9:a9:fa:4c:4b:49:46:34:c7:
34:1a:9f:bd:2f:18:bc:2f:88:3b:0c:c8:69:bd:f8:6d:89:6c:
3f:b8:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:20 2025 by rpki-client