Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: cicuxQOr/RA2ssr4YGGbIJwolVGGgiM0uZcIZJB9Wt4=
Subject key identifier: 19:FE:4E:F2:DD:BB:00:AD:05:2B:56:4B:BC:99:1D:42:72:03:2C:6C
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 01976DAB77DA819802E3697DCC8A01A85CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 09:00:43 +0000
Manifest this update: Sat 14 Jun 2025 09:00:43 +0000
Manifest next update: Sun 15 Jun 2025 09:00:43 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: FI2EAYpSBAgyIFC+AfL7rYG2hYXIf/HsUY6zKWPUC/8=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:77:da:81:98:02:e3:69:7d:cc:8a:01:a8:5c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Jun 14 09:00:43 2025 GMT
Not After : Jun 15 09:00:43 2025 GMT
Subject: CN=19fe4ef2ddbb00ad052b564bbc991d4272032c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:0f:85:33:96:66:30:de:05:67:a6:28:02:
0f:42:f8:a9:80:25:c7:41:08:5c:18:0f:d4:da:91:
5d:39:ee:ad:32:ab:00:c0:29:02:f6:45:91:c9:cb:
3a:cd:db:3b:5b:55:85:6f:ef:44:ba:72:79:81:02:
8b:97:78:54:1e:07:7f:e8:e5:80:0a:81:e1:87:7b:
6b:41:b7:48:02:5d:fd:3b:71:ce:9c:c2:4d:94:3a:
34:03:7b:67:48:44:e3:3d:5c:fe:99:cf:22:6f:9c:
b3:72:8a:7e:e8:dc:65:c5:7d:91:17:88:ba:69:80:
4a:38:60:ce:91:35:11:82:1a:91:dd:20:f0:d6:76:
3c:17:c9:72:85:c1:6b:aa:73:a7:02:21:4e:6f:c9:
2a:7d:8e:2d:ca:b2:1b:5b:b5:f9:1f:62:be:fb:cf:
df:62:d5:06:b4:21:6e:a7:c1:08:22:79:26:23:3f:
e6:a2:fe:44:28:ec:64:cc:b8:b5:58:d6:41:c4:4b:
4b:c0:43:71:4f:77:ae:45:7c:93:6a:8c:2d:c9:d6:
3b:09:78:1f:1b:a2:b2:ed:e2:5d:82:f0:2a:d6:62:
0a:93:62:8e:e2:23:4d:ad:67:7a:e9:ce:ab:0e:c2:
87:e3:f6:a2:6c:73:22:0c:3a:3b:30:15:c8:bd:77:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:4E:F2:DD:BB:00:AD:05:2B:56:4B:BC:99:1D:42:72:03:2C:6C
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8f:74:79:10:39:b3:66:f8:b5:bf:d2:d4:cc:be:21:ef:fe:
c2:17:1b:63:ff:0d:16:db:50:ae:1c:d5:cf:24:ac:38:44:b4:
0a:9c:a0:90:ab:c8:c4:cc:64:7f:f6:f5:d0:82:13:ff:9a:62:
35:30:31:83:97:08:aa:e0:14:ce:b5:1f:92:eb:4c:e1:62:00:
8b:b4:de:81:5c:fb:43:75:92:80:08:07:0e:63:49:1a:f2:06:
ad:e4:4b:4e:3c:f3:15:f2:61:13:a3:23:91:fa:4e:3d:fc:12:
7d:c5:b3:33:64:d1:b3:a5:86:9e:16:76:1a:7d:f1:36:cf:65:
04:e3:64:fe:e8:1f:5f:ac:18:a1:27:ad:66:f1:86:ea:e2:c4:
7f:d6:a9:65:1a:e3:1d:04:19:7d:a3:47:96:34:42:87:e6:bc:
19:78:d2:ac:d2:a5:21:8b:d5:56:d3:1e:d4:f9:35:d4:a8:60:
6a:52:9e:44:a3:3c:e9:54:2c:8c:9b:9e:82:4e:f5:22:39:e1:
37:f2:50:2e:75:8b:a1:34:7b:d9:5a:e1:ce:0c:7b:b2:25:44:
5e:5f:b2:de:c7:59:8b:43:bc:7d:b3:bf:2f:ee:f8:9e:c8:98:
cc:df:b8:a1:75:c9:a0:a6:cb:39:3c:21:bc:6e:73:2d:ef:7f:
3b:6c:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:30 2025 by rpki-client