Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: /rPpxIgCVGAfJo77HtaKH410iLyKwhUIE36A0fH2K30=
Subject key identifier: CC:AB:D9:FC:55:5C:E2:F3:E9:31:D0:3E:00:52:89:22:01:E2:DA:00
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 0199233176754705A00217ACD3BFA866DFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0AC0
Signing time: Sun 07 Sep 2025 08:01:08 +0000
Manifest this update: Sun 07 Sep 2025 08:01:08 +0000
Manifest next update: Mon 08 Sep 2025 08:01:08 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: gTTs3okZgkGSdAbenDYP7oJEnRkGwGMs1DgLeHqd33k=)
2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:76:75:47:05:a0:02:17:ac:d3:bf:a8:66:df:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Sep 7 08:01:08 2025 GMT
Not After : Sep 8 08:01:08 2025 GMT
Subject: CN=ccabd9fc555ce2f3e931d03e0052892201e2da00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:ca:74:98:ad:b6:e4:6f:26:ab:ad:f8:89:
d6:55:b5:da:a7:4c:48:6c:94:e7:70:d5:0d:00:3c:
98:63:6a:ed:85:99:fc:dd:d3:0e:09:12:ff:37:c1:
5d:b0:1c:0d:3c:07:d6:93:80:91:d1:d3:f5:52:26:
e1:cf:7b:64:79:b3:38:e5:c4:1b:38:ac:5d:82:94:
81:78:77:de:59:b9:cf:04:a0:dd:ab:b2:5d:86:41:
10:6a:1c:78:45:32:14:8c:f2:a1:b3:0a:2e:7b:fc:
06:71:7c:a2:b5:da:7e:a3:94:f7:6a:1a:0b:f7:63:
94:2b:97:82:16:0f:5a:64:ed:ed:bd:16:87:b9:6b:
af:53:69:c8:7f:98:ec:45:2b:52:67:cb:70:2c:75:
41:6d:fd:c9:7a:c6:0e:8d:f0:46:f4:fe:37:a8:2a:
58:de:d7:f9:54:a4:4a:c5:ad:7d:84:5c:72:aa:b1:
0d:90:f5:61:a7:c7:f4:e9:6f:17:28:55:1c:18:db:
0f:c7:5c:6f:b6:f8:f3:62:ef:39:a4:c3:27:61:0a:
bb:59:04:b3:d4:42:e6:a7:7f:18:60:b3:41:45:b7:
01:bf:8f:13:18:55:bb:9b:92:7d:f4:95:02:c8:b1:
bc:d5:4f:ec:23:a0:d0:57:01:b7:27:c4:a4:64:67:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AB:D9:FC:55:5C:E2:F3:E9:31:D0:3E:00:52:89:22:01:E2:DA:00
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:34:77:97:dd:2d:c0:3b:55:d2:3c:6f:38:f6:3b:10:51:63:
b7:d7:8d:7a:cd:ca:a4:64:54:0a:28:c8:81:42:95:2b:c4:65:
72:b8:a9:b4:c8:f7:e4:73:45:d0:0b:e2:1d:76:72:9c:ff:59:
1c:1f:ff:bd:55:81:09:13:79:db:ac:11:ad:04:cc:30:c4:2e:
b8:c9:c4:01:05:34:38:e6:26:aa:9b:20:69:37:12:8a:d4:7d:
54:69:c5:33:80:03:69:9f:7d:1c:17:7a:82:62:68:46:3a:8f:
5c:ed:20:2b:c9:4f:29:4a:1e:2c:33:42:a9:99:e6:6c:2c:e6:
ae:f4:23:31:95:fa:cb:1b:81:a0:b2:c7:82:27:4b:e4:15:ee:
32:73:d6:44:97:8d:a8:bb:56:d6:73:30:b7:4f:ec:7f:9d:c1:
79:68:78:b4:fc:0b:df:fc:76:3a:38:0e:a2:9a:44:b1:93:28:
d8:77:22:7a:93:0d:1e:b0:4a:2c:40:d8:ac:dd:5a:8e:56:2c:
c0:78:18:c8:c6:4d:07:44:ac:11:18:99:83:63:2b:10:0d:93:
f3:0e:0e:3d:46:a6:99:1a:87:c8:00:1b:1f:a0:6c:77:6b:58:
36:b7:4d:9d:c1:e3:74:80:36:9d:8a:e1:46:56:c6:3e:98:42:
c1:44:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:04:57 2025 by rpki-client