Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: 6hiUkjrVr1jcW3Q7vffhwijCWAAdIKxadauUZYWGgKY=
Subject key identifier: 86:65:D7:AB:27:7D:BE:25:F4:2B:B9:47:2A:88:19:32:8F:1B:84:B4
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 019A5074C7C67C9EA78C4B1C5746BAFD6602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0B5C
Signing time: Tue 04 Nov 2025 20:00:21 +0000
Manifest this update: Tue 04 Nov 2025 20:00:21 +0000
Manifest next update: Wed 05 Nov 2025 20:00:21 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: HG11VXFtY7bXQC9gg80Ju3hWu0c5hvKm86QvZEyPbmI=)
2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:c7:c6:7c:9e:a7:8c:4b:1c:57:46:ba:fd:66:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Nov 4 20:00:21 2025 GMT
Not After : Nov 5 20:00:21 2025 GMT
Subject: CN=8665d7ab277dbe25f42bb9472a8819328f1b84b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:19:38:41:af:9e:f3:21:5e:79:49:a6:15:
84:bc:d3:19:0c:d3:67:e9:4b:51:97:5c:53:4b:bf:
21:9d:f1:7b:43:d8:65:38:b2:19:ad:4f:16:00:3c:
bb:f0:c6:3c:8c:94:40:62:55:65:1d:c9:bc:2d:1d:
92:0e:aa:3e:60:69:bf:95:8e:cd:a7:ef:6b:6c:90:
6b:e7:5f:c7:a8:42:3b:84:01:cc:f2:96:c5:71:f1:
07:c5:86:51:e2:08:70:b2:3d:47:a1:e9:b2:3f:9a:
64:f7:05:0d:2c:37:27:f3:c3:ad:1c:54:23:e8:79:
9d:01:ca:af:1a:5a:df:fe:69:43:4e:7e:5b:37:9e:
fc:06:22:2b:1d:fe:0a:d1:84:cf:13:e0:7f:fb:10:
67:c8:93:b3:2a:40:e1:b1:3a:76:4c:25:6d:6d:37:
5f:71:39:43:52:8a:e0:2f:4d:b0:b7:3e:fb:27:f4:
9a:49:5f:99:86:a1:ba:6e:a9:12:b2:5c:4b:e9:32:
c9:0b:d4:7c:fb:00:89:b5:b4:e2:f5:1d:2c:e4:99:
ca:4b:da:97:5b:ff:26:4c:49:60:a9:d2:4b:be:34:
23:b3:64:2b:c8:16:d3:91:45:26:bd:40:1a:d1:c3:
5f:9c:62:26:c8:cd:cb:5d:8e:cb:2c:9c:2e:b0:a4:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:65:D7:AB:27:7D:BE:25:F4:2B:B9:47:2A:88:19:32:8F:1B:84:B4
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:57:45:a4:0c:6c:7e:a8:e3:a0:68:b2:d6:74:c2:24:eb:6f:
5c:b3:5b:52:38:6d:c8:e7:c6:4b:74:5a:3b:da:f3:aa:75:b3:
48:62:d7:f6:5e:af:d7:18:b0:61:41:a2:08:8b:bd:b0:d0:09:
57:33:08:34:cd:de:9a:9f:0d:32:87:16:64:ad:b5:5c:0a:0c:
57:d9:0f:a6:85:11:f8:ef:7d:62:6d:a8:d5:24:37:4d:48:96:
b3:53:d6:84:50:3d:25:c8:d1:b3:37:d8:f2:85:9d:70:9c:94:
52:62:d4:50:d3:d4:bc:9c:2b:6f:ac:86:f9:c5:32:d5:30:26:
82:7a:be:63:91:61:2d:be:36:ab:ec:41:72:66:18:93:29:2c:
a0:f3:b7:57:38:0a:5a:63:f6:e8:b5:25:da:30:ba:af:63:68:
2f:0e:34:82:84:33:79:aa:51:16:8b:fa:72:2c:c7:8d:52:f3:
7c:5c:06:62:45:a9:83:5c:1c:b0:27:55:ab:b3:d7:66:71:e9:
fc:3b:c0:d5:c6:9b:09:cd:20:f3:cd:b7:35:9f:42:1d:4c:f5:
dc:63:8c:9d:78:24:ee:ad:0c:27:86:25:ca:39:30:eb:dd:63:
dc:06:3b:51:da:f1:6c:d1:28:f0:39:94:9b:01:6d:3c:f2:ef:
ea:43:af:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdMfGfJ6njEscV0a6/WYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5
YWY1OWYwHhcNMjUxMTA0MjAwMDIxWhcNMjUxMTA1MjAwMDIxWjAzMTEwLwYDVQQD
Eyg4NjY1ZDdhYjI3N2RiZTI1ZjQyYmI5NDcyYTg4MTkzMjhmMWI4NGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1AZOEGvnvMhXnlJphWEvNMZDNNn
6UtRl1xTS78hnfF7Q9hlOLIZrU8WADy78MY8jJRAYlVlHcm8LR2SDqo+YGm/lY7N
p+9rbJBr51/HqEI7hAHM8pbFcfEHxYZR4ghwsj1HoemyP5pk9wUNLDcn88OtHFQj
6HmdAcqvGlrf/mlDTn5bN578BiIrHf4K0YTPE+B/+xBnyJOzKkDhsTp2TCVtbTdf
cTlDUorgL02wtz77J/SaSV+ZhqG6bqkSslxL6TLJC9R8+wCJtbTi9R0s5JnKS9qX
W/8mTElgqdJLvjQjs2QryBbTkUUmvUAa0cNfnGImyM3LXY7LLJwusKSmAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZl16snfb4l9Cu5RyqIGTKPG4S0MB8GA1UdIwQY
MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt
ZDM4NDk1ZmIwOWEwLzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw
LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWldFpAxs
fqjjoGiy1nTCJOtvXLNbUjhtyOfGS3RaO9rzqnWzSGLX9l6v1xiwYUGiCIu9sNAJ
VzMINM3emp8NMocWZK21XAoMV9kPpoUR+O99Ym2o1SQ3TUiWs1PWhFA9JcjRszfY
8oWdcJyUUmLUUNPUvJwrb6yG+cUy1TAmgnq+Y5FhLb42q+xBcmYYkyksoPO3VzgK
WmP26LUl2jC6r2NoLw40goQzeapRFov6cizHjVLzfFwGYkWpg1wcsCdVq7PXZnHp
/DvA1cabCc0g8823NZ9CHUz13GOMnXgk7q0MJ4Ylyjkw691j3AY7UdrxbNEo8DmU
mwFtPPLv6kOvYw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:54:05 2025 by rpki-client