Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: PxXM4k89s2gySzFADVwJEudA0vWMiR1xnq2rwAVeLwA=
Subject key identifier: 54:B4:84:8D:51:40:CB:53:52:BF:9E:24:C4:91:C6:D0:96:FE:AE:31
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 01974AE83593B24A07C2AEA5857DC2390CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:21 +0000
Manifest this update: Sat 07 Jun 2025 15:00:21 +0000
Manifest next update: Sun 08 Jun 2025 15:00:21 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: zV9gH6FErDmEl5PIoaz3oB3+DjzMb1utvrYfXnP2GNA=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:35:93:b2:4a:07:c2:ae:a5:85:7d:c2:39:0c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Jun 7 15:00:21 2025 GMT
Not After : Jun 8 15:00:21 2025 GMT
Subject: CN=54b4848d5140cb5352bf9e24c491c6d096feae31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:c8:3b:9f:22:1f:6d:fb:83:ee:2f:7d:e6:
b3:bc:5a:e3:b4:89:72:84:8e:28:e5:12:3e:73:d0:
66:ff:ba:c1:e6:0b:f0:8e:3c:80:11:68:26:ea:cf:
50:57:c8:ce:73:c7:19:33:01:aa:64:48:fe:9c:be:
d6:6c:7f:bd:b7:84:6c:ba:88:1c:5d:35:e0:58:73:
3d:f1:61:5c:ae:60:50:6f:5e:c0:71:7a:5e:74:06:
b0:c8:7d:32:e1:cf:e5:25:b2:e4:dd:9e:dd:34:92:
2b:32:36:4a:e3:b3:c6:d2:26:05:85:d5:90:12:fd:
09:b4:29:b4:3d:12:d2:c4:a1:8d:30:f2:a6:62:da:
b4:fc:58:8d:68:e6:58:dd:d8:ff:fa:bc:90:32:fe:
6e:50:e0:96:e5:59:c3:74:c1:53:36:4b:f8:c6:88:
80:e4:02:29:17:6e:67:1e:0c:a7:1e:13:69:d0:d8:
24:16:78:d3:b2:66:12:be:48:12:56:84:78:78:f7:
6b:e1:cb:86:cf:0f:c5:b0:3e:a4:dd:55:f5:17:34:
d9:40:1f:95:a2:44:ab:35:60:9e:e4:79:d7:97:f9:
f7:17:d3:67:b0:d4:4d:46:f7:44:f6:c1:5a:47:ba:
4b:39:e1:a8:42:99:8a:52:97:c6:1a:8d:19:51:b6:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B4:84:8D:51:40:CB:53:52:BF:9E:24:C4:91:C6:D0:96:FE:AE:31
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:25:0a:70:b2:0f:63:69:08:ad:c5:56:b6:5f:f3:95:55:0d:
ef:c9:c1:02:14:32:56:72:15:23:d5:31:ad:fb:c5:48:a4:d6:
d6:87:f3:5a:af:c2:04:ee:a0:e4:ee:28:7a:75:b3:a9:c5:71:
02:d1:b7:07:06:6d:6f:32:6f:5d:b9:69:bc:3b:56:3c:35:92:
b3:e3:11:1f:06:b2:c9:ea:85:7d:44:20:fb:41:c2:a2:cf:f4:
d0:35:2a:0c:cf:58:96:4e:b7:10:ab:75:da:a7:65:51:5d:0b:
b4:a1:33:60:95:62:ab:50:fa:ef:9d:a6:9a:13:7b:a9:d3:04:
94:3d:2c:ec:0d:ed:0e:34:88:6e:3d:31:69:f1:f1:4e:5e:65:
d6:ff:ae:4d:a4:f6:6e:a3:a4:91:48:95:3d:a8:78:2c:05:7e:
77:a6:7e:cd:22:91:dc:dc:c2:f8:4a:74:57:e5:0a:39:2d:95:
47:ca:57:13:3f:3b:cf:cc:45:ab:ed:fb:13:e9:7e:e5:3c:81:
93:4f:17:38:8a:e6:07:a7:ca:21:6e:e8:0f:d1:c9:79:cd:cf:
be:aa:7b:fb:73:64:89:49:56:ba:96:7f:44:fe:fe:46:65:3a:
d7:89:f7:60:90:dd:a4:81:b2:1c:91:04:4a:51:1b:54:70:12:
6c:3e:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:28:24 2025 by rpki-client