
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File: n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier: Pn1h4i7k+97b9kvVkvnb/N4n6g4a2dmKMjBiDl2CkpQ=
Subject key identifier: 0F:31:91:32:91:9F:AF:97:DA:5B:1A:EC:BD:50:79:D1:F0:60:4E:38
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 01987FE64530E12BA507A3D1D5CC220EB54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number: 0BA1
Signing time: Wed 06 Aug 2025 15:00:53 +0000
Manifest this update: Wed 06 Aug 2025 15:00:53 +0000
Manifest next update: Thu 07 Aug 2025 15:00:53 +0000
Files and hashes: 1: 1-jitS6EpXiqLjoTy0y90wIH72rI.roa (hash: Rfg5nTBCaEYBRoN4EImwETKxmFJYdYpWUORSCCGtVf4=)
2: CoX1lhKeqnywoZzkBVdeBK0K-8E.roa (hash: UeFCTUO9sjJL5Z6FG4W0m09+58Inz20WQtlj2knxqFc=)
3: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: WGzCDA39d/fL+WqpSlbWj22UufSDe9+f2f6L2lVpbcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:45:30:e1:2b:a5:07:a3:d1:d5:cc:22:0e:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Aug 6 15:00:53 2025 GMT
Not After : Aug 7 15:00:53 2025 GMT
Subject: CN=0f319132919faf97da5b1aecbd5079d1f0604e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:f1:50:69:b6:44:8f:a0:50:e9:25:b5:1a:
82:0d:3d:01:86:e8:1f:5b:2a:9c:90:34:9c:03:71:
cd:a6:0f:4f:14:71:98:a1:88:46:a1:58:73:55:b5:
23:04:9f:06:5e:30:aa:df:2e:7e:81:86:93:4a:fd:
e1:04:fd:40:2d:c1:70:98:43:c5:b5:05:a4:82:bf:
0b:a8:4e:21:b6:18:63:87:6f:82:ad:7f:9b:64:d8:
2a:4e:91:10:ce:61:d9:29:4f:e4:d7:50:7e:55:b7:
af:fb:9b:ac:7f:ef:27:6b:c3:d8:6b:ae:7f:17:ad:
5a:4f:b6:41:8a:59:43:af:66:ca:0a:b3:4e:de:0e:
61:76:1b:ce:b9:d9:76:f4:f8:2b:13:87:2d:36:c4:
7b:bb:42:5c:fd:13:5c:40:a3:4d:5f:16:a6:17:10:
6f:9f:07:81:6b:c7:3d:ef:01:1c:4f:5e:ad:52:8d:
7d:21:bf:f6:09:91:71:63:62:da:9f:2a:d5:0d:f4:
ce:e1:5d:6e:49:cb:cc:13:98:6d:28:d6:7b:46:55:
36:5b:0e:af:c7:1b:6f:54:c2:83:38:0b:60:79:82:
e6:74:bb:9b:67:2a:3d:79:d8:b7:06:60:b3:3e:1f:
d5:58:b3:d0:d6:da:54:01:a4:87:d0:60:18:3a:26:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:31:91:32:91:9F:AF:97:DA:5B:1A:EC:BD:50:79:D1:F0:60:4E:38
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fa:6d:fa:bc:ae:c3:92:b9:13:bf:fd:dc:8c:ea:0e:04:34:
06:7f:43:20:51:95:0a:6f:91:c6:0e:ed:dc:80:36:15:00:a1:
09:90:c8:e1:fe:08:a4:36:29:9d:8d:c7:4c:50:fb:aa:a9:22:
d0:1e:a9:a9:48:c5:7e:2f:a0:45:01:3e:6c:e0:98:6e:4c:c3:
48:72:e4:1e:00:4f:d6:61:31:26:c4:85:04:ec:15:26:36:0c:
de:09:17:4f:58:42:ff:60:ec:b6:92:da:46:7a:99:fd:a4:f3:
8b:fd:5c:9b:98:44:a1:61:8c:80:42:54:bc:cc:ae:5e:7a:46:
1e:10:e0:6a:92:5b:44:21:b0:71:9d:0a:38:fe:be:d3:0a:7e:
e0:18:3c:f5:80:e8:3d:6d:d5:a1:ef:fa:ba:58:9b:94:b2:a9:
b6:cb:87:5b:1e:d5:0c:99:e8:7b:ad:60:ce:aa:b3:c4:dd:7b:
2d:b4:e5:8d:57:5f:d0:ec:0f:8a:a3:78:b2:01:05:53:7f:12:
29:ee:25:fc:58:3f:34:62:8b:08:69:b9:2d:d1:b7:a2:67:a8:
96:6f:f0:29:83:80:58:b4:0c:37:4f:49:00:1d:28:d9:12:99:
bb:ea:ee:b0:84:e6:f3:66:17:9f:0a:9b:3d:b3:85:69:3d:ed:
92:8f:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:24 2025 by rpki-client