Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: yqsaF/criZwglFrP4/iAqWP9X7bapzMChCisMy4T4Q8=
Subject key identifier: 1B:6B:BB:44:E8:30:63:FA:D0:57:6C:F1:8D:1F:6D:DB:57:C7:3A:59
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 0198D4E06E8D781EF52074EFE6392494747C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: BKohsOpFFzso3XGdN8QCDA3OaOt9oitl04cbG/GOgHQ=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6e:8d:78:1e:f5:20:74:ef:e6:39:24:94:74:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=1b6bbb44e83063fad0576cf18d1f6ddb57c73a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:c2:55:84:7e:e4:02:93:3d:f9:55:b5:f5:
a6:d4:ef:f7:4d:59:6a:cc:cf:ed:c2:89:2d:98:19:
ef:76:b3:66:1a:0f:9d:26:0b:21:0c:4e:7b:c2:42:
c6:48:89:86:d1:d7:40:32:b2:86:81:29:56:5a:b0:
2e:b6:e0:09:25:54:8a:e7:88:47:07:6a:de:12:ac:
da:2d:96:c6:b3:cf:e4:df:65:8f:80:a0:c8:86:2a:
f2:1d:4b:4c:5d:80:a2:fd:90:c2:4c:a3:78:64:13:
19:a2:5a:ba:9d:83:23:5b:cb:e9:97:55:e9:7b:46:
1f:ae:f6:28:84:0b:0d:13:e3:39:3e:e8:57:85:e8:
e3:9b:88:76:6b:62:18:58:14:19:67:a6:55:4d:31:
c4:5f:97:67:5e:50:46:47:b6:bd:c5:3c:9f:14:3c:
50:73:8f:88:32:5c:58:c5:9b:9a:9e:86:43:86:b4:
12:43:5e:1f:14:a0:fe:34:7c:c8:c2:95:e6:74:ea:
7e:9d:ba:7d:da:1d:de:3b:2c:0b:c0:cf:99:0d:53:
c1:43:4d:0a:72:98:76:1c:46:a2:61:aa:89:bf:c9:
84:70:93:2a:e0:96:e8:e4:1d:71:3b:5b:b6:65:66:
f9:c0:54:48:1b:dc:e9:8c:d8:6f:61:35:34:e1:59:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6B:BB:44:E8:30:63:FA:D0:57:6C:F1:8D:1F:6D:DB:57:C7:3A:59
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:62:9a:e7:1f:55:14:de:07:42:2b:08:42:48:8a:19:ec:e5:
ad:1c:8b:b9:1f:08:0f:22:83:68:00:2e:10:9e:5b:e9:71:aa:
11:4b:db:ac:fb:1f:32:df:f5:9d:9c:0b:d0:ad:af:31:d1:32:
5a:c9:0c:80:e3:54:19:a5:d5:4a:a9:6b:5c:03:c2:79:11:fb:
4b:58:7f:4b:0b:56:dd:a9:5b:ff:19:8b:98:4f:58:25:ee:41:
21:6b:92:bf:cf:12:f3:6a:f2:70:6c:6d:7e:8a:ca:1a:05:8d:
ef:00:83:37:10:2a:a6:a4:88:bc:35:70:18:54:77:40:1f:fc:
26:14:94:75:d8:7b:e6:73:46:64:00:d1:0c:10:98:51:55:38:
9f:5c:bf:ce:fe:1f:36:8a:72:38:37:a6:f1:ce:be:5e:54:34:
ad:66:45:29:a5:09:72:a2:d6:dd:a9:2b:72:9a:38:8a:36:d5:
d7:1d:d7:93:e1:e8:26:45:70:41:c3:9b:ad:a9:a9:4f:8e:66:
1c:1a:24:48:f1:25:a0:8a:5e:cd:ba:4c:2d:5a:4b:31:b9:6b:
13:68:d5:0d:8e:46:dc:6f:43:e9:db:d8:be:2a:52:fd:da:73:
76:6a:56:78:f9:1a:0f:92:35:8a:c5:35:28:ee:d6:21:de:db:
e5:22:86:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:35 2025 by rpki-client