Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: 304vivMwYopulUKQOWuncG14myX45jrPXiNgvyrTD20=
Subject key identifier: 8F:3C:27:74:82:C7:2D:E4:56:C9:D6:B4:9C:7B:8F:2B:3D:19:0B:EE
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 019A2409E9DEC2D4A9F193E1722864B9EE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0B45
Signing time: Mon 27 Oct 2025 05:00:20 +0000
Manifest this update: Mon 27 Oct 2025 05:00:20 +0000
Manifest next update: Tue 28 Oct 2025 05:00:20 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: MoisxoeElAfKh4CjuDuNBsAYSaUbJWtXWZgsGlj9uZE=)
2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:e9:de:c2:d4:a9:f1:93:e1:72:28:64:b9:ee:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Oct 27 05:00:20 2025 GMT
Not After : Oct 28 05:00:20 2025 GMT
Subject: CN=8f3c277482c72de456c9d6b49c7b8f2b3d190bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:42:7d:71:16:6c:38:4c:40:f8:dc:e3:f2:
39:58:a1:4b:69:20:54:c8:b9:99:c8:f7:dd:61:38:
ad:5e:07:82:48:71:82:4a:99:82:70:63:49:cf:95:
26:26:c2:c2:bf:36:78:17:e7:b4:ce:1e:c4:ea:9c:
d5:14:a3:ba:2f:b7:53:1c:99:91:8c:65:11:c8:46:
36:15:98:cb:4f:bc:6c:4e:b3:25:0d:e3:d4:50:53:
16:5e:a6:d1:6e:67:bf:d2:3f:b7:25:26:2b:d0:79:
ad:b7:6b:84:16:84:fc:d4:79:fc:f0:9e:e8:c7:bc:
1a:ed:c5:74:49:e4:41:9c:c7:9d:56:eb:0f:54:a3:
0a:b1:f1:ef:15:4d:72:b8:de:85:21:6a:ff:5b:39:
fe:43:1e:8f:68:6a:c8:53:d9:55:2f:7c:cf:2b:1b:
2b:d9:fb:ae:a7:68:99:e2:a8:65:ec:2d:1e:fb:77:
69:89:67:43:44:ca:8a:c5:44:39:53:9c:68:bf:8e:
fa:dd:df:34:c5:5e:e3:3e:24:19:ba:35:89:eb:64:
75:11:0e:d7:96:71:34:7b:38:d4:cf:61:a7:84:d5:
55:b8:7b:1a:7d:15:ea:58:fe:0c:95:b6:e1:e8:d1:
2e:d2:25:2c:e9:83:f5:06:53:99:51:1d:31:91:ea:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3C:27:74:82:C7:2D:E4:56:C9:D6:B4:9C:7B:8F:2B:3D:19:0B:EE
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:21:54:7d:7f:d8:92:6a:dd:fb:ac:7e:ed:d7:4a:6c:57:45:
05:ce:03:cb:51:b5:f2:bb:76:6b:15:75:8c:ee:ab:0b:e3:7f:
a8:07:a8:e0:52:a8:5c:ef:23:9e:de:79:05:40:26:21:62:f3:
63:85:70:ff:c3:4b:f0:54:59:f3:2d:e7:c9:48:69:6c:c3:97:
3b:6d:ca:95:a5:96:3c:0e:e3:07:64:6d:6f:b3:0c:3d:8a:7d:
49:ed:2b:23:35:09:09:16:9f:0f:7d:27:b3:1b:7a:41:61:e4:
84:7d:c8:0e:56:04:eb:51:6c:e8:12:2f:b6:87:d4:7e:e7:f9:
85:e9:cd:f4:a2:81:a0:99:bf:c7:b4:8c:8d:8f:52:2d:c3:7b:
0b:cd:9e:71:3b:b5:af:9a:bd:da:0b:1e:e1:89:b9:4d:25:50:
fe:60:68:65:7b:ef:83:e9:39:3e:13:77:d1:99:10:77:57:57:
cf:3f:9a:cb:75:70:98:fc:e2:10:93:75:15:00:54:54:30:30:
07:00:1a:8b:c5:e2:c3:9a:6f:1e:43:dd:a0:40:58:9e:e4:ae:
22:88:58:f5:08:06:04:d5:ce:5c:07:19:eb:2d:63:b2:b9:71:
29:b7:96:1a:b9:b3:60:bd:f9:07:04:38:cf:eb:92:bb:0a:21:
b1:5a:b7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:01:59 2025 by rpki-client