Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: GBEJK/d5V/MUpPOAniseyFanxudwcO9pPgpjksokyfI=
Subject key identifier: 5B:75:31:6E:39:B1:4C:27:65:6B:00:FA:DF:03:09:A2:3F:4D:A4:86
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 01976C624757EC02039DF370F48E69C0E22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 051F
Signing time: Sat 14 Jun 2025 03:01:09 +0000
Manifest this update: Sat 14 Jun 2025 03:01:09 +0000
Manifest next update: Sun 15 Jun 2025 03:01:09 +0000
Files and hashes: 1: 1ofY17NAwbyhAHFj_yBzaevRgc4.roa (hash: FPWNmGXZmy3JcSLxjIHQ6BJRP2baM9xmkXSCswGMYik=)
2: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: k7Rz5+71O+LlsNfqa6Y2bY44/LhxX3DBERA9e0iLDVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:47:57:ec:02:03:9d:f3:70:f4:8e:69:c0:e2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Jun 14 03:01:09 2025 GMT
Not After : Jun 15 03:01:09 2025 GMT
Subject: CN=5b75316e39b14c27656b00fadf0309a23f4da486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:27:01:75:e3:5e:15:fe:e8:73:ed:9e:aa:
85:2d:73:3d:91:82:23:c3:42:92:08:fc:fd:a6:d6:
74:d2:3c:e9:83:0d:2a:c1:ba:cf:c5:42:4f:69:a0:
36:9d:8e:af:78:67:c4:ba:46:1e:25:6e:59:2e:a6:
7d:1d:ef:2c:eb:39:89:a9:a0:f5:37:5c:b4:5d:13:
c9:71:21:dc:3a:b0:3b:87:08:71:9a:b0:b3:21:98:
60:93:db:90:c0:58:2a:89:b5:49:a7:8e:57:96:9f:
04:db:94:1a:e9:4b:bf:76:cf:b0:75:2e:4e:08:1d:
3a:c6:fd:ff:4b:73:1c:3f:24:1d:b1:3b:be:f4:46:
24:1c:3c:0c:0f:50:c7:f0:ea:17:7e:89:86:82:00:
e8:44:c2:00:97:06:02:d6:d7:9f:ec:19:b7:e9:dd:
d4:e3:79:63:a6:df:30:86:0f:b2:31:7b:e3:74:89:
ae:e4:a8:b1:59:6a:90:51:14:a2:aa:85:df:f1:45:
84:c3:b7:f4:9c:5e:bb:81:09:cd:af:33:5b:d8:db:
ba:9b:26:ad:49:6b:ed:67:64:1d:f7:fb:fa:da:a8:
07:cd:8a:3a:73:c9:f1:fa:2e:a1:4b:41:94:69:77:
a4:df:0d:e5:95:dc:97:9c:c8:56:24:44:f8:0d:a6:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:31:6E:39:B1:4C:27:65:6B:00:FA:DF:03:09:A2:3F:4D:A4:86
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:62:f2:08:92:bf:38:8a:5f:52:eb:99:b3:50:b2:2f:be:3f:
40:05:21:21:ca:62:36:ca:aa:21:94:d2:22:26:a9:ca:ad:ff:
58:32:28:72:f1:e9:80:88:61:8a:d8:2f:dd:af:40:18:e6:37:
f4:07:a8:fd:5d:b2:1e:f8:ed:a6:d3:03:d7:13:1e:43:17:a4:
c1:ba:6f:fb:3b:a2:a2:07:84:50:0d:6d:cf:50:cc:21:83:b7:
ee:35:26:9f:61:8c:f7:24:86:f2:25:86:9f:64:11:16:69:65:
c2:e8:7b:62:0e:f3:8b:7d:b4:c9:62:fd:7b:9c:5f:15:36:2e:
43:44:44:a4:55:df:3e:c4:a2:3c:74:fc:90:9b:44:df:00:12:
f5:6b:f4:8d:42:75:79:90:3f:ee:2c:3a:9c:98:54:af:55:5d:
1e:30:56:e4:6e:d5:44:f2:2c:62:0c:0e:cc:6e:c6:b2:98:61:
e4:8a:71:bd:08:17:b8:a1:87:78:b5:30:de:49:41:42:3b:17:
36:5c:16:ce:46:1f:26:16:60:37:d9:7b:d5:12:31:59:e7:cc:
83:7b:ae:62:38:9c:ae:2f:86:d0:76:3c:7b:05:b3:86:4d:47:
3f:1d:17:9c:4c:95:85:3e:5f:12:df:a8:0d:eb:b3:5a:fa:35:
4f:d5:36:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYkdX7AIDnfNw9I5pwOItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTg0NWY4NmNiYzNjZmE5ZTBlNzk4N2EwMzgyZDVkMGRk
N2NlM2UwHhcNMjUwNjE0MDMwMTA5WhcNMjUwNjE1MDMwMTA5WjAzMTEwLwYDVQQD
Eyg1Yjc1MzE2ZTM5YjE0YzI3NjU2YjAwZmFkZjAzMDlhMjNmNGRhNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7InAXXjXhX+6HPtnqqFLXM9kYIj
w0KSCPz9ptZ00jzpgw0qwbrPxUJPaaA2nY6veGfEukYeJW5ZLqZ9He8s6zmJqaD1
N1y0XRPJcSHcOrA7hwhxmrCzIZhgk9uQwFgqibVJp45Xlp8E25Qa6Uu/ds+wdS5O
CB06xv3/S3McPyQdsTu+9EYkHDwMD1DH8OoXfomGggDoRMIAlwYC1tef7Bm36d3U
43ljpt8whg+yMXvjdImu5KixWWqQURSiqoXf8UWEw7f0nF67gQnNrzNb2Nu6myat
SWvtZ2Qd9/v62qgHzYo6c8nx+i6hS0GUaXek3w3lldyXnMhWJET4DaZWhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt1MW45sUwnZWsA+t8DCaI/TaSGMB8GA1UdIwQY
MBaAFANYRfhsvDz6ng55h6A4LV0N184+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMjc5ZDMtOTQ3ZS00NWM3LWE4OTAt
M2I4NGQ3OWFiZGFmLzEvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMjc5ZDMtOTQ3ZS00NWM3LWE4OTAtM2I4NGQ3OWFiZGFm
LzEvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmLyCJK/
OIpfUuuZs1CyL74/QAUhIcpiNsqqIZTSIiapyq3/WDIocvHpgIhhitgv3a9AGOY3
9Aeo/V2yHvjtptMD1xMeQxekwbpv+zuiogeEUA1tz1DMIYO37jUmn2GM9ySG8iWG
n2QRFmllwuh7Yg7zi320yWL9e5xfFTYuQ0REpFXfPsSiPHT8kJtE3wAS9Wv0jUJ1
eZA/7iw6nJhUr1VdHjBW5G7VRPIsYgwOzG7Gsphh5IpxvQgXuKGHeLUw3klBQjsX
NlwWzkYfJhZgN9l71RIxWefMg3uuYjicri+G0HY8ewWzhk1HPx0XnEyVhT5fEt+o
DeuzWvo1T9U2lA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:48 2025 by rpki-client