Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: WHDLYrYX08lAFk1xPC3AX7OQOPblCgICTwofrgLZLRQ=
Subject key identifier: A9:40:2A:79:C2:75:A4:D6:FF:E1:89:BB:9D:AF:0E:3F:F8:39:DB:30
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 019A4F62B4D381FC496009E542EE199A26D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:01:00 +0000
Manifest this update: Tue 04 Nov 2025 15:01:00 +0000
Manifest next update: Wed 05 Nov 2025 15:01:00 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: PzNQuPMZ641YfltoLx8mTdx356RTKBUaJynLqYu0sWo=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b4:d3:81:fc:49:60:09:e5:42:ee:19:9a:26:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Nov 4 15:01:00 2025 GMT
Not After : Nov 5 15:01:00 2025 GMT
Subject: CN=a9402a79c275a4d6ffe189bb9daf0e3ff839db30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:e4:d2:1d:24:8f:4f:df:f6:3f:2a:9a:81:
8b:38:74:64:7d:d7:af:68:48:ce:5c:ab:7c:f8:5e:
92:ce:7d:9f:a4:e1:e5:b2:7c:29:44:f1:3c:24:8b:
69:4c:8b:e1:63:59:63:88:13:c7:e7:c6:e3:82:0d:
aa:f8:2e:c9:fe:28:ae:09:94:5b:1f:dd:32:89:97:
af:4f:ae:d1:c6:7c:18:8f:d7:82:eb:f0:f3:d7:95:
cd:2f:b4:bd:a7:b7:b6:a1:ec:93:20:75:b0:10:c3:
3d:40:b6:05:8a:31:c1:f3:b0:d6:85:89:20:45:6d:
45:1d:10:84:9c:5a:da:60:40:f4:83:c9:73:03:d3:
89:e4:5d:6b:7b:59:b6:d2:fc:7c:a7:37:af:57:fe:
2b:94:6e:83:16:0b:2f:d6:a9:a6:9a:91:0a:6a:4e:
9e:08:79:ce:90:6c:ad:28:8f:1f:79:44:c5:b1:ef:
18:99:b5:b5:fb:a4:2a:5f:d4:c1:4e:8f:29:d6:b3:
df:ee:6b:9b:2b:f1:ba:5e:d7:07:82:2e:01:4f:99:
6c:76:b1:d2:29:60:0f:c4:0a:74:96:99:56:ec:02:
22:cf:a1:a0:70:da:e9:b7:42:a9:34:b0:ca:53:87:
8c:70:40:f0:d5:f6:7a:9d:6c:72:20:3a:6e:48:c4:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:40:2A:79:C2:75:A4:D6:FF:E1:89:BB:9D:AF:0E:3F:F8:39:DB:30
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c9:85:d9:ed:0b:75:54:bf:c5:04:22:75:fe:96:8f:b9:70:
59:8c:61:2e:d5:b6:9c:14:b8:1b:ee:a2:d7:21:ad:ad:e8:76:
4a:39:cb:68:b6:c6:35:c3:a4:1e:6e:5e:03:d9:1b:b8:9c:af:
18:54:f5:f8:82:7d:ff:9f:60:11:e0:be:e9:8b:0e:0d:2e:66:
e7:c7:07:2d:90:35:04:92:de:cd:e5:db:92:01:43:26:66:1c:
38:01:46:c7:ff:25:36:26:c3:17:86:45:72:9f:2b:1a:db:3a:
fc:09:67:85:5d:36:27:09:30:6d:0a:ca:42:34:f3:cc:4f:94:
64:d2:e9:53:53:79:7b:42:39:9f:12:99:40:7b:db:d2:87:6d:
41:37:96:47:f6:45:0f:7b:39:fe:ff:78:42:78:99:8d:14:c2:
c3:ee:d6:65:36:db:49:61:2c:a7:b9:95:77:ca:5b:ed:07:3d:
d1:ba:e4:10:aa:c7:b4:4b:51:20:e6:d4:e4:22:31:5c:28:5a:
9a:b2:06:50:07:81:4b:eb:78:1e:5b:fd:0c:2c:7d:c2:a6:3f:
e6:97:fd:32:77:26:db:86:dd:9d:c2:c1:57:c3:8e:f3:39:5d:
95:20:c1:be:a2:ca:9c:48:ff:60:c2:33:6d:a7:34:36:59:c9:
37:89:38:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:59 2025 by rpki-client