Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
File: IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json)
Hash identifier: gLC5uX0y30hUO1vdK3cBS0GyyWVjBmEq+Q5Q4oZdyxw=
Subject key identifier: DF:2B:6F:10:F4:1D:10:F6:A3:DB:5A:57:C7:2E:34:D9:FE:1A:B7:44
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 019A4DE1766CB5E2D64C2E60728F43C024C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
Manifest number: 15E6
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: 6MoDovb85gsc33BqCCkbPNQWP1U.roa (hash: 1RImcsgD4pBgfw1iXWIukE1oXT/AN/WjUPCnMVqomR8=)
2: A3E0-Bx-SkOraAi3ILNLwbtK2q8.roa (hash: oflLVWiMQR/h5//frwNh8Zh/ixGNkdyJmqiH96c6izM=)
3: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: 7hurgqTsRLt+UD1k/DHG05dcdk41Nh9yuMpPOAJKZKU=)
4: ZtZZEAiMokBjnJ6RL0fW_WRtUvg.roa (hash: HYmFAXxKVnFTMBP2WvTIUya5uxGXpwouKqV1Y54fjKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:76:6c:b5:e2:d6:4c:2e:60:72:8f:43:c0:24:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=df2b6f10f41d10f6a3db5a57c72e34d9fe1ab744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5f:3a:06:3d:03:88:54:96:ff:cf:63:07:3e:
2a:48:aa:bc:f8:24:52:35:13:0e:b6:14:9c:c2:04:
5a:7e:b2:e5:b6:42:0d:59:a8:0f:e2:ec:29:b0:ee:
ae:c6:16:92:8a:e6:5a:01:3a:a8:ac:c9:48:5f:cb:
24:0f:ac:34:d5:cc:dc:f0:02:22:b8:0c:25:b2:03:
f4:9a:ed:f6:64:b8:41:be:88:80:10:4d:45:0e:12:
32:32:0a:e5:10:69:d2:cc:7a:a9:82:fd:99:5f:c2:
4c:e3:c6:a1:5e:26:d0:74:5e:33:21:c7:7e:10:3e:
98:f3:51:1e:d9:0e:bc:34:f7:6a:b3:ba:69:7c:76:
a1:8a:d0:05:85:7e:6b:ce:6f:7d:84:4b:f4:e5:81:
e6:7b:e9:40:07:18:6e:a7:ac:9d:90:eb:15:9f:97:
14:33:c5:8d:35:73:91:67:3b:aa:f2:47:4f:5f:3b:
3d:75:03:6e:1e:14:cd:80:80:31:96:f6:72:3c:98:
56:5d:51:0b:9d:76:69:f9:84:6f:0a:ce:e6:a6:94:
09:a4:c0:3a:95:79:8f:d2:50:f7:5e:78:6e:44:6d:
10:f9:30:c9:fe:c1:dc:34:92:d3:e8:c6:29:12:6c:
b3:10:c4:ae:c0:0c:ef:ed:2b:2c:cf:28:6c:1a:5f:
06:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:6F:10:F4:1D:10:F6:A3:DB:5A:57:C7:2E:34:D9:FE:1A:B7:44
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:74:75:10:5f:c3:d9:e6:fc:f2:80:54:91:d8:f7:a9:40:1f:
b6:c9:a1:67:8f:f5:3b:36:52:9c:c1:f3:19:fc:d4:5e:34:93:
3a:f2:eb:30:43:4a:3c:39:55:4a:fc:02:1c:82:1b:73:07:43:
66:cd:2c:89:98:d2:04:7d:79:a2:3a:40:8c:63:06:43:d5:44:
26:7a:72:82:2c:88:ea:b4:d1:24:96:7f:91:d7:20:96:d8:ce:
31:04:d0:97:e0:b5:05:48:87:0c:12:11:45:4e:44:a0:b4:b3:
2a:32:57:45:82:f6:5b:77:e5:67:c7:fa:21:bd:a4:0c:c4:91:
c3:4d:04:f4:06:96:09:91:c5:65:c7:f3:ea:c9:7a:00:00:ab:
f4:18:2c:0c:f5:d0:12:ab:91:3e:9f:01:5c:e2:7e:24:b8:27:
fd:33:e4:ff:80:c6:1d:b4:5b:e3:b6:2e:66:51:33:6a:65:64:
0f:4a:ca:05:59:57:f5:cf:21:de:e2:d0:6f:e5:31:11:26:d8:
c5:67:56:aa:bc:04:dc:2c:58:ca:21:f3:d3:fb:82:f9:c7:4b:
fb:3a:eb:3f:af:2a:5d:26:89:f7:c1:e9:db:ae:03:1c:20:de:
4d:31:0f:33:3e:bd:55:12:6b:8a:40:41:f8:3e:18:62:cf:bd:
76:0e:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:56 2025 by rpki-client