Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: Qo8fyZfalSJkG7cFq0S7+9/d6PG8Hu1AORsDbEsmYII=
Subject key identifier: 20:6C:C1:DF:06:27:29:A0:5D:21:47:D9:09:D2:56:55:31:DA:11:21
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 0196BB24670CD493295E3FDDCAE1DFAF4D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0981
Signing time: Sat 10 May 2025 17:00:47 +0000
Manifest this update: Sat 10 May 2025 17:00:47 +0000
Manifest next update: Sun 11 May 2025 17:00:47 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: Xi8Sd1LRULJ3rvocuiSuYiQxBd61H5a52pTGO7jkBXQ=)
2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:67:0c:d4:93:29:5e:3f:dd:ca:e1:df:af:4d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: May 10 17:00:47 2025 GMT
Not After : May 11 17:00:47 2025 GMT
Subject: CN=206cc1df062729a05d2147d909d2565531da1121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:2f:30:9d:67:d1:24:db:be:57:b4:ee:09:
48:3f:ed:dc:4f:fe:de:d0:54:99:e8:2b:1d:03:3d:
e9:35:90:fc:c3:36:80:97:77:14:60:c7:11:06:72:
ba:9d:e1:ca:a3:7e:f4:3c:65:b8:91:d9:90:a1:52:
8d:62:b2:63:5f:7b:03:3e:6b:cc:98:3f:09:d8:ee:
59:eb:7a:08:84:b4:78:92:a1:98:d9:04:85:00:44:
92:b4:1b:ce:9a:e3:c7:f1:df:5a:c7:98:c7:27:46:
03:a1:6f:27:5d:82:d7:4b:0e:92:f0:1c:91:5b:18:
d4:12:b8:55:20:8d:1f:4f:45:94:7d:15:61:d6:ee:
9a:28:2a:0b:8b:db:3a:f9:4b:f0:11:74:63:7a:65:
f8:cd:0f:8f:af:24:04:38:97:38:49:b0:f7:c2:15:
d4:9b:8e:6e:b4:ed:bd:46:8b:c0:09:3a:b4:8a:9d:
04:41:1b:61:ed:7c:ad:2e:b6:94:39:a8:d4:a2:43:
d9:ba:a5:fa:63:ed:f2:b7:d9:0e:b7:0d:dc:f7:a1:
61:e4:3c:42:95:28:5b:ee:d2:35:1a:d2:a6:b4:10:
7f:59:73:97:58:b9:39:3f:8d:fb:f3:15:0e:c1:b2:
4d:d7:df:bb:dd:13:1d:57:6e:10:ba:18:77:74:6c:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6C:C1:DF:06:27:29:A0:5D:21:47:D9:09:D2:56:55:31:DA:11:21
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4f:96:c9:d7:89:50:30:2d:e6:4e:74:fa:1e:97:22:61:75:
52:43:a0:25:d2:27:c3:2e:9f:0d:80:32:7d:2a:8f:01:4c:a9:
cb:a7:89:06:2a:b6:67:c9:16:e8:c9:05:3f:54:09:7e:15:6b:
3f:a5:05:ff:d1:05:76:ba:b4:e8:e8:d3:a7:cc:22:e5:fd:59:
e3:e7:07:61:bb:0d:a7:fd:40:6f:86:b2:90:36:f3:90:75:1d:
72:1b:a1:52:dc:4a:71:7b:f2:ef:b9:bb:06:35:f4:c3:9e:9a:
d3:37:27:98:ca:ee:d9:64:1f:b2:60:02:23:8d:b2:51:45:9c:
08:b7:e8:97:0d:9c:43:d6:8d:0c:83:de:e6:db:70:f1:0a:86:
b4:b2:96:80:60:4a:cf:a3:14:f0:8b:4e:22:53:e4:df:41:51:
e7:cf:a3:fa:ac:2d:ca:ba:58:c2:db:13:15:51:64:c8:6b:7c:
44:eb:1b:8a:40:69:ca:da:d4:bb:41:52:c9:96:bc:ea:11:34:
81:48:a0:6f:70:79:5b:52:b4:98:ac:74:4c:bb:0c:52:c3:b5:
a9:86:05:ba:c4:bb:d8:ac:e0:63:81:3c:a2:35:3a:10:e6:91:
9b:d0:fd:e1:3f:ff:d8:79:8d:05:ff:cd:01:d4:0c:eb:2e:39:
94:05:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:52:56 2025 by rpki-client