Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: vpTt92o/Z7u4bumcosOUeyvXh2SeQZYfubTcybWA+Vc=
Subject key identifier: 75:77:82:EF:A1:C0:A0:64:19:79:59:77:EF:3F:B1:3B:10:E9:8E:85
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 0199375D2CFB7597AF2C8D6DC4B63A3689AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 06:01:17 +0000
Manifest this update: Thu 11 Sep 2025 06:01:17 +0000
Manifest next update: Fri 12 Sep 2025 06:01:17 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: gyyAtraZFFYCB/SBJRt+vkAGmGNIRCVPk0PoZ1yJcmc=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:2c:fb:75:97:af:2c:8d:6d:c4:b6:3a:36:89:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Sep 11 06:01:17 2025 GMT
Not After : Sep 12 06:01:17 2025 GMT
Subject: CN=757782efa1c0a06419795977ef3fb13b10e98e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:4b:38:d6:1e:4e:1d:e2:eb:85:99:19:b4:
34:1d:db:a2:1e:a1:05:ec:b2:8c:bf:ef:98:b3:98:
8b:a9:ea:7d:d0:ab:f3:e2:a6:d8:b5:c2:27:7a:b8:
84:43:67:a1:6c:12:17:9d:36:7d:9c:4f:bb:f2:9c:
98:da:0b:0b:e6:93:1b:b4:8e:a5:2e:aa:96:89:a1:
a5:63:cc:1e:eb:cf:9f:08:01:e8:9a:b2:f9:38:41:
d8:1f:b3:b6:0f:47:8f:38:9c:81:51:1d:10:5e:b1:
eb:b3:bd:45:1b:08:87:46:68:45:f0:df:5d:9b:25:
b7:63:9d:c4:55:4b:dd:60:b0:0d:39:83:7e:bf:51:
ed:e3:1e:f6:e8:0d:13:44:19:04:f2:ef:a3:18:3f:
84:2e:89:24:00:cc:21:20:e0:3c:4e:31:72:7d:5b:
76:cd:04:d5:35:d2:09:4c:94:f1:79:b2:73:20:b3:
d1:bf:d5:95:87:00:50:de:ae:00:a5:f6:e2:cc:33:
1f:09:2c:8e:9d:2a:97:fd:5d:f1:0e:fb:4f:a6:3f:
48:9b:e4:ad:61:5f:13:89:3c:8f:1c:49:74:86:af:
0a:96:01:62:54:81:4c:78:65:99:85:cc:8d:25:47:
10:72:2e:90:93:91:0b:ce:8a:dd:0f:b7:b1:ae:39:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:77:82:EF:A1:C0:A0:64:19:79:59:77:EF:3F:B1:3B:10:E9:8E:85
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:83:57:03:cd:e0:27:74:8d:68:30:ad:b7:63:a5:d5:4b:c3:
3a:bc:36:22:61:ea:e9:00:fd:e8:a1:ce:f6:0e:9b:44:c2:1f:
05:b4:fe:6e:00:22:bb:29:95:72:56:56:e8:c6:c4:b1:70:88:
f1:f3:ae:30:7c:bc:75:b5:1d:59:64:b2:9f:14:e7:c3:e2:ae:
e0:42:c9:e1:a3:b9:40:71:dd:86:7b:9c:3a:30:e6:74:ec:34:
06:2d:71:d4:b7:99:1f:e9:fa:fa:02:8b:1a:65:81:5a:f0:52:
ed:99:ea:f4:c0:dc:b5:5e:f8:10:db:42:71:d5:07:88:55:c1:
b5:fd:0c:7d:3a:f3:c1:fa:3c:70:b2:38:71:72:32:18:86:10:
34:31:3a:22:32:77:c9:f0:b8:a6:ae:51:f9:75:0e:5d:68:6c:
76:b5:0d:09:58:47:7c:06:d3:da:26:02:10:a4:3f:09:ac:b2:
0c:66:68:2c:bd:5f:cc:1a:2c:b5:7a:5c:40:0a:dc:83:f7:de:
95:b9:ea:1e:8f:c6:23:be:b8:ff:ba:da:14:22:2e:d2:53:4e:
be:cc:b2:58:5e:ea:7f:ea:7f:82:de:cd:af:83:7b:80:e2:c1:
10:78:31:eb:82:c3:00:13:62:8f:f8:c4:44:b9:bd:36:03:07:
5b:08:e7:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3XSz7dZevLI1txLY6NomvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNWU1Mjg1ZGVkYzM1YWI2MzUyNzA0OGIzNjZlZTU1Mzgw
NmNlMDQwHhcNMjUwOTExMDYwMTE3WhcNMjUwOTEyMDYwMTE3WjAzMTEwLwYDVQQD
Eyg3NTc3ODJlZmExYzBhMDY0MTk3OTU5NzdlZjNmYjEzYjEwZTk4ZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/ZLONYeTh3i64WZGbQ0HduiHqEF
7LKMv++Ys5iLqep90Kvz4qbYtcIneriEQ2ehbBIXnTZ9nE+78pyY2gsL5pMbtI6l
LqqWiaGlY8we68+fCAHomrL5OEHYH7O2D0ePOJyBUR0QXrHrs71FGwiHRmhF8N9d
myW3Y53EVUvdYLANOYN+v1Ht4x726A0TRBkE8u+jGD+ELokkAMwhIOA8TjFyfVt2
zQTVNdIJTJTxebJzILPRv9WVhwBQ3q4ApfbizDMfCSyOnSqX/V3xDvtPpj9Im+St
YV8TiTyPHEl0hq8KlgFiVIFMeGWZhcyNJUcQci6Qk5ELzordD7exrjm/OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHV3gu+hwKBkGXlZd+8/sTsQ6Y6FMB8GA1UdIwQY
MBaAFANeUoXe3DWrY1JwSLNm7lU4Bs4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mMTk0NGItMTAxYS00MTgxLWEzNmIt
MmMyNzA3NzM2ZmRiLzEvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mMTk0NGItMTAxYS00MTgxLWEzNmItMmMyNzA3NzM2ZmRi
LzEvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGINXA83g
J3SNaDCtt2Ol1UvDOrw2ImHq6QD96KHO9g6bRMIfBbT+bgAiuymVclZW6MbEsXCI
8fOuMHy8dbUdWWSynxTnw+Ku4ELJ4aO5QHHdhnucOjDmdOw0Bi1x1LeZH+n6+gKL
GmWBWvBS7Znq9MDctV74ENtCcdUHiFXBtf0MfTrzwfo8cLI4cXIyGIYQNDE6IjJ3
yfC4pq5R+XUOXWhsdrUNCVhHfAbT2iYCEKQ/CayyDGZoLL1fzBostXpcQArcg/fe
lbnqHo/GI764/7raFCIu0lNOvsyyWF7qf+p/gt7Nr4N7gOLBEHgx64LDABNij/jE
RLm9NgMHWwjn9g==
-----END CERTIFICATE-----
Generated at Thu Sep 11 08:16:11 2025 by rpki-client