Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: oRFSxVMCUnd/Bqonb49TQHA8uu1faDZoxyUDZq8D6SA=
Subject key identifier: 5E:78:A7:B2:08:E5:9C:76:BC:D9:DE:C7:9A:45:BB:FA:A0:F0:2B:1B
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 019874503169EA31FF9582E05A4D528469CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:01:09 +0000
Manifest this update: Mon 04 Aug 2025 09:01:09 +0000
Manifest next update: Tue 05 Aug 2025 09:01:09 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: MNsozgHjsDsXhO9+vEWtrgrPBjZVeskOXzJ5D4FKsg0=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:31:69:ea:31:ff:95:82:e0:5a:4d:52:84:69:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Aug 4 09:01:09 2025 GMT
Not After : Aug 5 09:01:09 2025 GMT
Subject: CN=5e78a7b208e59c76bcd9dec79a45bbfaa0f02b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:a5:8b:d8:8f:7c:c2:54:8d:ae:99:f5:48:
c2:42:54:a2:60:89:a4:70:a2:58:73:9b:87:ab:ea:
74:8f:dd:64:e2:12:e8:db:31:0c:0c:96:d2:95:97:
f0:04:cf:50:68:91:a6:c2:2c:71:f8:d7:13:63:c2:
88:1e:40:1d:c5:09:28:44:c7:7f:82:20:5c:0a:fc:
47:be:4d:53:e7:85:13:4a:5b:2a:e7:b5:bf:74:d9:
60:14:53:03:f9:b4:ac:8d:9c:44:27:d5:1e:16:43:
9f:f1:c3:94:8c:ac:a6:93:96:9d:31:0e:76:3c:c3:
37:6a:fa:1a:49:41:77:df:e4:02:7d:44:56:39:4e:
e9:b5:54:3f:dc:80:4a:75:02:de:b3:99:6b:bf:79:
13:a1:ca:58:a6:05:85:bf:9c:88:be:fa:12:18:80:
63:a9:96:76:c8:30:8b:8c:32:c1:1e:38:3d:c3:5e:
b4:d6:94:bf:7c:22:19:b9:ca:bb:83:6a:90:e7:5d:
3d:60:60:80:9f:89:5d:da:27:78:28:cc:07:86:90:
ef:bf:e5:37:fc:b8:3b:63:3e:c4:12:70:63:33:07:
2e:49:a4:d9:cd:ff:84:8b:8f:67:fe:78:e6:f8:90:
05:d3:03:a9:c1:b4:50:ed:3e:db:8b:e5:dc:e7:86:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:78:A7:B2:08:E5:9C:76:BC:D9:DE:C7:9A:45:BB:FA:A0:F0:2B:1B
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:eb:06:16:44:38:36:1a:8a:dd:95:9d:84:04:6a:36:2c:2f:
fa:95:61:a6:aa:e7:78:e2:c3:ef:95:4a:d7:d0:66:cb:c1:e3:
0d:99:f7:ea:d5:53:3d:23:6a:86:2b:ea:da:af:41:c1:89:54:
9f:6a:98:db:cd:06:82:b2:f8:ef:d0:cc:31:87:ff:a2:f5:67:
4a:6f:db:5e:38:2c:b4:84:30:52:29:8d:ae:59:eb:0d:bb:24:
3d:e2:51:b9:03:b5:a4:24:74:d1:b9:37:f1:32:c6:80:b6:88:
dc:89:66:9e:90:17:a5:f9:6a:3d:77:b3:46:be:5f:6c:83:a4:
f0:92:96:72:f1:83:79:69:51:ba:e6:b0:05:ac:ab:2c:59:55:
18:0a:de:2a:7c:30:98:bc:26:51:49:47:0d:e0:39:be:a7:e0:
6f:b0:c5:58:85:41:1f:2e:a2:cd:f4:ee:cd:0a:cb:67:47:01:
33:f1:de:4c:cf:4a:e8:af:da:44:1b:04:4c:0e:a7:ea:95:b1:
81:e2:9e:59:60:e2:28:46:f1:0b:b2:c4:0e:d9:4b:fe:38:32:
7c:64:9c:2c:06:21:77:12:7f:9b:53:d5:11:f9:3c:f4:ca:9d:
25:74:8d:b6:12:56:a2:9c:8e:fb:f2:3f:51:38:dc:a6:96:47:
f4:fe:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:11 2025 by rpki-client