Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: R3Iag4vStuz5kCYRuYQKPjtS6P6rolSIc2jcfWu9rmc=
Subject key identifier: F2:6D:68:BE:E3:97:3B:76:D0:8C:80:AD:6E:97:DE:F8:99:64:32:90
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 019A72263E9AB7130D00C9503EED526D2711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: stnpO44s136s5+sYUNvN4qk9JbRuvbFgHGsGGlDdftk=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3e:9a:b7:13:0d:00:c9:50:3e:ed:52:6d:27:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=f26d68bee3973b76d08c80ad6e97def899643290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:06:74:db:a3:ec:6b:42:64:4c:a8:62:96:
7d:f2:3f:b3:42:6b:0a:63:57:78:99:48:08:4f:97:
c4:d2:3a:2a:a1:cd:c0:94:d7:c3:0b:ae:cc:fc:1d:
44:85:cd:a5:ae:70:d5:51:27:86:50:3f:64:d2:02:
54:5c:3b:dd:03:48:3a:ba:12:16:9c:fe:30:34:15:
cf:38:3e:8c:6c:b1:6c:40:df:f0:fa:76:8e:c4:2c:
eb:c1:38:41:5b:b5:c4:b0:3d:59:05:c1:54:af:29:
cc:f7:10:3f:47:f7:bc:c7:2c:89:62:85:a4:28:f2:
8c:ae:0e:07:a5:33:65:d4:c4:99:57:98:9b:b7:90:
58:fc:bb:ac:18:a3:9f:52:fb:6f:81:04:47:ea:07:
a1:a2:f8:8c:e5:c2:5f:8f:cc:71:3e:1c:8b:b0:ca:
9a:44:30:04:92:9f:77:00:30:95:d7:8a:24:02:e7:
fd:d4:73:98:29:a8:08:56:9f:53:10:7e:4e:73:18:
34:e3:f3:6d:db:8f:3e:87:c4:d2:d5:14:86:51:03:
d6:fe:04:cc:e7:09:8b:47:08:e9:23:38:e4:a1:f2:
4b:b7:79:3b:ec:d4:31:a2:6a:0f:a8:98:22:26:e1:
94:05:bd:10:bb:ea:6b:af:88:32:70:fa:21:4e:37:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6D:68:BE:E3:97:3B:76:D0:8C:80:AD:6E:97:DE:F8:99:64:32:90
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b8:8a:8f:e8:ca:9b:b6:17:47:9e:b6:ab:97:1e:65:43:bb:
0d:88:9e:3d:49:cb:40:d9:17:17:f8:7b:c2:6f:84:2a:75:be:
4c:18:e9:c1:f8:85:73:0b:1a:30:ae:c4:26:b8:02:36:96:23:
02:8d:94:56:9e:06:6e:03:be:2a:c0:9a:7c:46:13:88:a7:be:
6e:39:c7:32:c9:f8:05:dd:49:14:7b:cc:6e:24:99:9a:a4:6c:
b7:75:da:1b:5a:23:bd:a9:91:15:ac:ff:1e:84:db:96:e4:93:
df:96:57:95:4e:67:45:a5:7c:1f:56:c5:9a:13:42:f5:20:11:
8c:6b:d7:24:de:cb:93:58:5d:fe:ed:24:95:35:6d:c1:dc:c6:
31:64:f9:ca:fa:be:40:3b:12:a2:58:7f:b6:a3:08:e1:ce:ac:
3b:80:71:4d:fc:91:4e:3b:5b:ea:a0:e5:0a:44:c0:25:1c:59:
93:a3:3e:a5:b4:70:7f:7f:23:ec:09:75:6a:a3:0b:2a:00:55:
55:85:6a:b6:a3:8e:fd:fe:2b:d6:a0:11:05:18:b0:0d:c5:c8:
95:f7:2b:31:c5:21:5e:a7:66:58:5d:19:e8:62:6a:ac:73:b0:
c8:3f:89:ad:2e:d4:bc:ff:db:d4:3b:c9:f1:bd:d4:57:0f:48:
d1:60:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:16 2025 by rpki-client