Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: 9NoqvFkYDp8GTnQDc1i9CtfBQ1RF05AwBU1h4o2G9Ek=
Subject key identifier: 82:54:79:DE:34:6C:5F:38:22:F4:82:6C:A7:D0:6D:93:1C:26:20:AB
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 0199FC5902FEAFE99F869DDC86CDB60B741F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: n73WyRjO1qR9DjeKZPatcgPNlV6JG4F2/ZD+z0L3PRc=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:02:fe:af:e9:9f:86:9d:dc:86:cd:b6:0b:74:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=825479de346c5f3822f4826ca7d06d931c2620ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:13:30:2f:c9:28:6c:eb:29:9c:74:1b:30:
55:32:a4:5e:84:98:a9:cc:8e:2a:b2:82:9a:9a:27:
d3:64:74:02:bb:35:76:21:3c:0f:14:c1:7a:df:ec:
b7:53:a6:84:64:01:ab:58:91:d9:67:44:cb:a5:1b:
5d:d5:fa:21:61:05:e9:0f:74:ab:f4:1e:0d:7c:8e:
20:ff:67:77:14:d0:68:d3:ad:2b:03:e7:93:a5:d4:
4b:02:9d:4e:41:0a:5c:39:ca:00:29:29:f7:90:6f:
33:23:de:a8:12:5f:ca:0f:82:c1:38:17:fb:4a:0c:
b7:fc:e8:9b:ce:eb:0b:0c:b9:98:a7:74:05:f5:76:
fc:9a:14:70:eb:79:1e:db:e6:6f:98:10:da:0b:f3:
ab:ee:6d:79:fb:4a:46:dc:73:9f:37:53:33:24:f0:
98:f7:39:fd:d5:15:51:4d:79:06:39:ca:f0:42:6a:
92:b1:fe:4b:84:91:43:d7:44:86:43:ab:81:4c:86:
0f:ce:b7:ac:a0:c7:13:e8:12:cd:f8:8a:64:d7:ec:
c0:2a:05:c0:a6:2d:d2:4f:39:53:13:43:8d:1e:21:
27:c3:11:9e:ac:ab:60:25:3f:6d:6b:c5:d0:a8:e9:
db:51:be:cb:b3:5a:36:e8:b4:74:e1:6b:12:5b:12:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:79:DE:34:6C:5F:38:22:F4:82:6C:A7:D0:6D:93:1C:26:20:AB
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:59:a4:1a:59:85:0d:a8:61:9b:de:2b:42:d4:39:c1:85:
56:84:05:38:88:94:99:92:ba:e9:f3:1e:69:fc:02:64:e2:70:
4d:1a:c1:79:c8:c9:86:a4:9b:9e:5e:cd:ee:64:bc:2a:d8:0e:
ad:5b:71:f7:63:64:9e:d6:d7:e4:21:81:06:4e:01:72:f3:33:
3f:d2:b3:35:d2:ee:26:31:ec:05:27:0b:95:be:d3:97:03:19:
54:40:c9:bc:3c:f0:82:f6:1c:9b:3c:5b:90:71:5a:b8:2f:ee:
24:9b:f0:82:35:07:3b:49:12:3e:b6:7e:61:da:cc:a8:7d:7d:
92:6c:fc:2b:c8:fd:dc:db:0f:39:a9:81:34:22:58:0c:c4:5a:
ce:03:1d:bf:07:d2:29:39:0e:b0:86:90:ea:57:62:30:75:a4:
22:79:ef:69:13:e0:de:96:89:5f:3c:ec:9f:76:34:fc:08:dc:
ca:f0:28:be:d9:71:8a:90:b6:3c:45:65:a9:99:21:07:cb:ae:
05:12:74:0a:10:35:50:8d:7b:25:b5:66:d4:cf:59:62:7b:b9:
48:c4:55:f8:4f:cc:88:29:33:e9:cb:5e:ae:b8:0a:0f:15:04:
91:2c:62:0d:7e:9d:1f:6d:fd:73:02:64:ba:d6:ac:a9:b5:af:
4e:6d:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:03 2025 by rpki-client