Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: sNY7zNJ9I7xxPiLQohDSz+KQKUYbKugCk+NnOgG3U7k=
Subject key identifier: 98:AA:8F:6C:D3:1C:AF:DF:46:D8:56:5B:5B:AC:F3:9A:77:49:FE:13
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 019A50E42E3DD08E6ADE2B1D90DA29FFB12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 0790
Signing time: Tue 04 Nov 2025 22:02:02 +0000
Manifest this update: Tue 04 Nov 2025 22:02:02 +0000
Manifest next update: Wed 05 Nov 2025 22:02:02 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: rM4r+O0gMJ2PBV0LTEgBy1GwsQlj1n4H2YxHd6pVACk=)
2: qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa (hash: Wp90B7y4b1beWFho9S7pJxCTTLLhfUdptb3Ax7iQwmA=)
3: ygl5P_7lTFnzJgirLplRNSI58XI.roa (hash: cR+NYAbF+5iFZxCdzFXgCBDiu3chwIso0AL6/JnYtEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:2e:3d:d0:8e:6a:de:2b:1d:90:da:29:ff:b1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Nov 4 22:02:02 2025 GMT
Not After : Nov 5 22:02:02 2025 GMT
Subject: CN=98aa8f6cd31cafdf46d8565b5bacf39a7749fe13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:e1:4b:99:92:01:d4:77:53:0a:6a:98:24:
88:5a:f8:9b:10:0a:3c:b6:4e:b9:7d:cf:68:6a:d4:
bb:ba:4a:a2:f1:ef:27:e2:a2:9f:4a:77:24:4c:69:
72:99:a5:d7:02:6a:e3:1a:80:ad:87:83:66:7c:8e:
80:8b:ca:82:bb:91:1b:de:ee:86:aa:28:58:c5:2b:
3d:93:ca:0b:b0:61:f7:55:f8:2d:c4:25:1b:b4:ca:
01:61:58:d8:5f:15:62:6c:47:c4:de:91:0a:53:b2:
be:73:19:fb:f5:ef:ca:ec:82:99:06:9a:8d:3a:29:
f2:8b:12:a7:32:8b:ff:6b:43:b4:70:d1:57:6d:c8:
2c:5e:be:2b:b8:5b:7b:68:49:dd:d0:4d:88:ff:e4:
fd:ee:52:de:b2:41:00:5a:fb:d6:d9:76:42:a7:20:
b3:46:34:b7:9c:f4:7a:ba:a1:a9:33:ea:13:50:a9:
79:0f:f6:69:5d:a4:f6:83:46:6d:c1:cd:3e:c2:29:
ad:35:34:d8:f6:2b:e1:be:04:28:bd:ea:fd:b4:0d:
1c:2c:30:86:6e:c3:b6:db:ee:37:69:4f:b0:78:fc:
74:3a:00:52:27:68:65:14:6d:43:63:7c:29:1b:c8:
24:e3:43:ea:7e:e0:2b:97:78:e3:82:d0:8f:ea:89:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AA:8F:6C:D3:1C:AF:DF:46:D8:56:5B:5B:AC:F3:9A:77:49:FE:13
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b3:95:00:c6:9d:fa:52:e4:8e:02:2d:dc:8d:c2:fa:88:21:
07:23:29:e9:19:79:f9:98:a2:c9:ac:6f:c7:74:bc:f2:e5:31:
6a:9c:7f:c1:2c:52:ad:da:7b:b6:99:cf:e7:7a:ee:d2:0c:b2:
08:cd:cc:5d:9a:e0:88:f4:0f:41:ce:d5:a6:0b:af:44:96:42:
b7:87:47:14:11:c6:80:11:d1:01:b3:f5:ee:03:c1:43:e7:79:
1d:24:db:92:5d:31:78:93:6e:26:74:20:0a:6b:37:b7:e8:8c:
7f:6e:76:74:88:c2:36:10:cd:72:60:28:48:57:a2:4c:91:bb:
30:d7:08:b0:24:76:19:d4:75:e3:85:1e:12:e4:a0:41:62:6f:
a1:e6:25:f9:a8:78:06:89:84:78:af:56:15:53:c0:2c:63:c0:
4d:20:11:84:41:19:ff:0f:87:d2:d7:6d:66:d4:2b:bb:97:74:
07:70:e0:85:da:fa:8d:85:54:d2:88:87:65:a3:0e:bd:02:4d:
26:e3:44:29:21:f2:38:2d:31:f9:21:a3:d3:5e:7d:c3:67:6e:
4e:3b:7b:f6:53:d7:39:5d:55:6c:b4:35:38:3a:bd:47:b0:1d:
fb:07:5a:41:4f:d3:5e:ee:7f:1b:7d:e6:58:a9:70:68:de:8c:
e1:5f:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:52 2025 by rpki-client