Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: LeYDshxEdMXSfvXYrKNrkngo5+CSEhOOvHqOI7Fw2A4=
Subject key identifier: 7E:47:B3:88:9B:83:C9:00:3A:73:93:53:AE:75:62:84:18:38:96:67
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 0196C3BA0317207B36F40D5B225E4198B7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 09:01:09 +0000
Manifest this update: Mon 12 May 2025 09:01:09 +0000
Manifest next update: Tue 13 May 2025 09:01:09 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: srrr+Mfswm0kSTSkUezimtapyqXWjaQF5AFjJYwVql8=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:ba:03:17:20:7b:36:f4:0d:5b:22:5e:41:98:b7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: May 12 09:01:09 2025 GMT
Not After : May 13 09:01:09 2025 GMT
Subject: CN=7e47b3889b83c9003a739353ae75628418389667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:92:2c:8c:6d:01:90:11:ee:bc:e6:2c:76:
b2:69:cc:b8:1f:88:f2:d3:ac:22:78:57:b1:f7:33:
70:7f:91:16:9e:59:c1:43:ef:de:1a:e1:8b:e7:1f:
d5:a5:f1:5c:20:b9:2b:af:ce:2b:1c:41:80:a5:cd:
2f:c9:6d:17:1d:b6:f8:6a:6d:f7:4f:a1:1a:e6:fc:
be:15:b5:56:cc:9a:ec:be:56:79:90:b9:4b:79:65:
80:10:74:6b:5d:84:6b:eb:55:32:42:af:d3:5b:3e:
c2:b5:bd:99:fd:c7:4e:02:8a:1b:18:92:fa:75:fd:
bb:cf:07:e5:9a:49:dc:5c:27:00:7a:0a:ff:aa:a6:
d1:3c:d4:65:0d:57:bf:6e:92:f9:f2:df:18:39:ab:
a2:ea:bc:66:73:69:01:96:10:ba:d3:10:b7:d2:29:
9c:fc:df:75:05:ba:66:4a:47:38:b0:e9:0b:90:31:
46:d8:5b:b8:98:ee:bb:1e:c8:51:ed:b7:5c:f9:3e:
27:b1:e1:e8:0e:72:f0:d7:1d:cb:5e:78:65:93:c3:
79:4a:64:7c:2b:7f:41:7a:c2:15:ea:32:ec:1a:19:
66:07:0d:97:fb:22:98:f5:4d:3c:78:35:ed:7c:d6:
3a:91:f0:36:19:58:02:61:5e:4e:b9:6f:e9:74:51:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:47:B3:88:9B:83:C9:00:3A:73:93:53:AE:75:62:84:18:38:96:67
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:32:f5:64:5d:fa:74:07:b1:33:6b:04:67:18:ab:da:49:6b:
44:b7:61:d5:17:05:f2:eb:e6:e1:ac:38:11:92:66:b7:db:84:
76:42:37:03:f6:26:08:bc:42:c5:64:ac:23:e1:f6:01:99:78:
e6:8d:b0:50:1b:e9:83:d0:46:17:e9:9f:99:ae:19:c3:35:35:
e3:33:ae:4d:6f:13:f0:94:03:b8:15:4e:27:1e:a3:73:a5:a1:
a3:3d:bd:21:8a:d0:02:39:37:11:48:66:e9:5c:17:05:9c:5c:
8b:2e:1a:aa:f2:26:e4:73:a2:61:bb:26:6f:0c:ee:06:87:ce:
9a:7b:45:fc:2f:99:2e:b1:47:91:4c:0c:74:87:3b:b5:21:f4:
75:f6:df:a9:29:66:bc:13:b9:7e:fc:97:69:63:45:77:d8:6c:
35:07:88:ea:65:78:8f:e0:22:10:4f:03:41:6a:d5:9d:c8:a8:
6c:3e:34:b6:bd:8a:dd:8d:67:f0:e1:c7:95:71:78:18:4e:6a:
34:67:04:6e:33:ed:1d:d5:65:71:a8:b9:3d:12:83:bd:bb:b1:
7d:76:ec:ed:7b:dd:62:37:c5:3e:04:45:40:fc:51:6a:02:8d:
de:4b:a5:e7:36:e6:e2:56:7a:8d:7f:4e:85:2b:ca:b9:af:0e:
7d:52:af:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:51:03 2025 by rpki-client