Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: EBYC8oIJ5MpNZM5WXIzVWX8XlBsOxDNejLpLGWSYARg=
Subject key identifier: 15:39:FC:81:F7:62:68:22:DD:F4:EB:68:78:52:5E:DD:34:2D:B8:AF
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 0197B6D761C8EA61F8B547727689B3D05FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: sgfOFVs/YiGuq5xxOf2ueRXUXYdTl//vIZ/D+75JpW8=)
2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:61:c8:ea:61:f8:b5:47:72:76:89:b3:d0:5f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=1539fc81f7626822ddf4eb6878525edd342db8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:e1:c7:35:0a:27:3c:38:d4:35:0a:5c:de:
72:31:f8:77:24:88:c3:9c:b0:08:7e:79:71:0e:ba:
01:76:36:63:7d:e7:02:f5:d0:6a:c6:5e:a0:09:14:
35:43:48:97:5f:ba:d9:b6:6c:5d:54:73:9d:a5:19:
b3:04:2a:a7:99:87:c9:b1:f8:63:98:2d:5e:e6:1a:
2f:4c:8e:ad:f6:a8:13:f5:1b:a7:96:17:68:52:56:
cb:9c:d0:09:48:6f:64:89:51:80:ae:19:4f:6d:53:
ba:35:80:d7:e1:0e:1a:13:dc:49:e6:66:ce:9c:dc:
3d:f2:51:2f:64:1c:b0:19:ee:90:cb:57:1e:a7:f0:
f5:8b:a9:5d:d8:bd:57:ac:e9:93:77:4b:97:5b:c4:
a3:8f:01:a7:5f:40:23:22:dc:b8:49:f9:95:0d:a5:
df:7d:39:f6:86:4e:f8:bc:1c:bb:48:33:64:9f:e8:
d6:b9:42:ac:af:47:9e:21:a4:d5:a7:7f:8c:0a:84:
7a:bd:6d:7e:f5:57:4d:4c:60:14:8b:58:c9:f1:d4:
aa:23:da:bc:84:f0:c8:69:54:a6:f3:e8:6a:dd:b3:
81:51:a1:d1:01:49:4d:20:ac:24:e5:3e:9f:c8:6b:
b5:f6:b9:49:3d:be:12:36:7b:54:23:46:bf:27:73:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:39:FC:81:F7:62:68:22:DD:F4:EB:68:78:52:5E:DD:34:2D:B8:AF
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1e:66:ab:d5:21:6a:fe:e3:b4:e7:5c:a9:76:da:48:77:aa:
1f:91:26:88:b7:10:ff:b9:31:f9:0b:40:6f:98:c5:1b:22:6f:
f6:66:f5:7d:6f:fc:33:f4:0c:11:92:b0:5f:cb:d5:30:9c:ae:
40:9f:a9:c4:b9:72:c1:9c:ce:66:03:77:6f:4a:df:72:50:34:
48:27:ec:e5:f7:48:02:92:9e:02:ec:eb:d9:e2:c9:0c:a1:4c:
50:ec:61:6a:08:ba:e8:7d:d7:af:64:b0:22:31:9c:48:c1:a0:
b9:95:52:3c:a8:2f:36:44:41:a2:39:eb:15:b8:8a:c1:21:fd:
55:01:08:ea:6c:81:b5:67:49:00:f4:21:b0:dc:06:a6:5a:f3:
c9:f3:4a:11:17:1f:d2:67:51:29:04:19:2a:d8:bd:1c:41:4d:
a3:d0:db:b7:c9:4d:f8:66:95:18:f8:22:7d:96:e2:10:d6:aa:
0f:9d:d5:7d:9a:62:0f:e2:ce:6e:b3:40:03:b5:0f:ba:c0:c7:
39:70:e4:73:46:da:75:c8:8a:7b:9e:8a:88:c2:19:d7:6d:9e:
92:af:86:a1:f6:a4:e6:89:33:48:21:2a:09:7e:20:7a:3a:21:
b8:4e:52:72:7c:83:33:25:bd:9c:45:b6:df:2c:c4:b4:23:15:
52:64:0b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:25 2025 by rpki-client