Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: YTbj2Ule4OqCEJgnBPWbNrA3wJgN9CByd004h/klLtM=
Subject key identifier: 82:18:12:83:2C:B7:9A:4E:A1:DB:25:26:DF:89:86:C9:CE:90:DE:88
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 0197B8FD7CE85901FCB24F390576425037B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 00:01:49 +0000
Manifest this update: Sun 29 Jun 2025 00:01:49 +0000
Manifest next update: Mon 30 Jun 2025 00:01:49 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: YN1uOuAskDdRMYR+o14+Pa4TFYIYqivl/cG6LE+wnIw=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:7c:e8:59:01:fc:b2:4f:39:05:76:42:50:37:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Jun 29 00:01:49 2025 GMT
Not After : Jun 30 00:01:49 2025 GMT
Subject: CN=821812832cb79a4ea1db2526df8986c9ce90de88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:47:cb:58:8f:1c:31:c6:1d:2f:2c:97:23:
03:ed:3a:d3:82:c9:fe:2b:6e:d1:b6:c6:f7:52:7b:
09:f1:53:77:66:0b:ed:69:08:d0:c6:a7:11:88:82:
79:6c:69:f8:53:24:9c:36:9b:f5:ac:0e:57:70:a6:
d7:d3:f4:a2:22:7d:4d:12:f3:9f:84:64:0b:8b:52:
7c:7f:c2:86:b3:1a:df:75:de:96:e4:80:3f:0c:ba:
bb:45:b0:51:26:3a:13:b0:79:01:59:61:ab:7f:18:
df:97:fb:8a:30:80:48:74:92:ec:87:17:dd:51:1d:
a6:d3:85:98:44:b0:0d:d8:32:46:7f:82:69:a3:8b:
c8:1c:98:da:ee:6c:3b:5b:7f:02:8e:95:3f:42:ed:
f2:39:29:9d:a0:73:a7:d6:92:e6:91:5a:12:46:06:
44:24:43:c4:c9:3b:5f:ee:16:80:d6:4d:6e:c3:54:
27:21:64:76:25:98:77:a5:21:76:39:0e:f0:66:6c:
95:1a:c6:1f:f5:7b:65:e8:2e:96:7b:27:24:f2:04:
13:b5:1e:08:d8:b4:71:d8:4b:90:14:43:5a:ae:be:
6e:a8:e2:f5:18:f4:19:84:b7:77:2a:ea:3b:b1:bd:
4e:b2:65:74:f8:54:b5:19:64:6f:05:95:2e:14:d4:
ea:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:18:12:83:2C:B7:9A:4E:A1:DB:25:26:DF:89:86:C9:CE:90:DE:88
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b6:48:f3:ee:26:d4:fd:0a:b0:f6:b9:3d:58:10:58:f8:31:
66:77:18:0f:25:a9:30:9d:4a:62:cb:5a:6e:70:b2:0c:cf:f2:
ee:31:7c:6c:79:93:8d:3a:10:6a:38:61:19:59:55:74:0e:23:
25:48:72:93:88:4f:bc:dc:37:20:90:31:7d:eb:0a:f9:2c:ac:
88:d2:c3:51:e1:4f:5c:f4:c5:ba:fd:cc:5e:fd:d9:7a:c5:db:
b0:ef:9d:e9:84:89:d3:3d:90:70:5b:67:d0:ff:1e:11:3e:e5:
8a:90:74:e1:c8:26:17:78:cd:49:38:69:a2:df:2d:e9:58:7b:
4d:48:c8:8d:ec:60:e4:50:cd:f3:74:a7:1f:3b:5a:41:7d:17:
16:bd:2d:14:57:34:af:4e:2f:6a:3f:68:18:4e:84:19:3f:cb:
ba:18:e5:41:99:a4:73:7c:a9:12:d4:99:10:7f:08:92:8c:3f:
e7:95:e1:d9:76:b3:24:dc:bd:7b:4a:05:44:7c:64:89:bb:c7:
7d:ff:6c:a2:60:a9:2c:16:6a:48:1f:66:92:5a:bc:9e:55:14:
6d:e5:f1:f1:7d:9a:69:4e:6b:88:7d:59:2a:6e:d4:f2:00:f7:
10:e8:6a:13:0f:aa:b7:41:f5:c5:31:d7:a4:bc:37:a4:92:f5:
1a:bd:be:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:20 2025 by rpki-client