Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: s47iTjn3JtVEEhlOSMP1uMwIYaRyT6CA0Q/WPhSAQkc=
Subject key identifier: 6E:66:7F:A7:FF:B9:12:D0:BB:D5:24:C0:7C:93:66:F9:5E:08:B4:B3
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 01988B0FC456EB1103383879BC4F7CAAC987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0D2C
Signing time: Fri 08 Aug 2025 19:02:02 +0000
Manifest this update: Fri 08 Aug 2025 19:02:02 +0000
Manifest next update: Sat 09 Aug 2025 19:02:02 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: NKABhVH2JsoonViIcG3iAnNCnefnB+TEkUO/cKFfBcQ=)
2: 74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa (hash: BNXJ9UQTlJTDJF7YHXiQBgrxMV0S9TBmp+TiB2lnrCw=)
3: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:c4:56:eb:11:03:38:38:79:bc:4f:7c:aa:c9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Aug 8 19:02:02 2025 GMT
Not After : Aug 9 19:02:02 2025 GMT
Subject: CN=6e667fa7ffb912d0bbd524c07c9366f95e08b4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:a4:b8:28:ff:a6:62:20:59:74:04:d9:f2:
bb:dc:15:4c:a6:20:3d:c5:19:10:65:1e:41:48:20:
98:ac:92:dd:98:67:96:76:df:b8:3a:63:0a:39:89:
bf:2b:fe:27:4d:1e:db:43:7b:2f:03:17:90:61:a6:
9d:17:73:10:40:6c:a5:ff:81:f8:cf:f7:c4:79:69:
62:f7:61:8e:b1:20:86:06:53:56:25:ab:00:8a:66:
d2:4d:b0:e5:e8:f6:b0:8b:4e:0d:63:c3:d6:2d:f3:
5a:c5:84:1f:e2:ed:aa:cf:1d:a3:6f:30:68:da:56:
44:3e:22:a9:fe:3b:ef:0f:6d:e0:08:1f:69:90:67:
ab:05:b7:12:b7:21:81:b2:36:34:cc:05:c8:c0:15:
a4:18:78:eb:a1:9c:17:cb:df:40:32:d2:6e:19:69:
4a:b2:ab:a7:a4:26:ff:a1:7d:76:1e:4d:83:80:ae:
74:7e:3d:27:86:6b:0c:23:30:61:bc:eb:a5:7b:60:
6f:0e:25:40:31:cf:6a:ae:b1:bd:78:fb:f6:98:54:
e7:8f:57:d2:ee:fa:26:d1:5e:07:92:f1:6b:41:2a:
39:59:ce:40:2c:79:4e:44:69:8f:0d:d9:e0:17:06:
f7:3e:ee:7d:55:d2:1f:b1:94:99:66:59:36:c7:7d:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:7F:A7:FF:B9:12:D0:BB:D5:24:C0:7C:93:66:F9:5E:08:B4:B3
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fd:28:a2:ac:8c:35:71:23:ca:11:22:e1:65:09:3b:6b:d1:
63:de:7e:21:a5:56:9e:e7:aa:14:a1:32:0b:be:58:3b:a3:09:
b3:c8:4e:f3:30:c5:3d:a6:60:bf:8b:20:13:fd:1f:81:29:fc:
f1:27:1a:82:4f:4c:f3:60:84:a5:48:a5:0e:7d:d9:6f:5b:c0:
8b:1c:c5:ac:d3:51:a4:b1:cb:89:7c:8f:77:d3:5b:da:e8:10:
ce:9c:56:98:f8:66:5b:45:54:39:65:be:4b:49:80:2d:1d:cb:
12:9b:23:6f:91:ab:50:37:42:ac:4d:0c:29:fb:8e:b2:eb:14:
4d:b3:76:7f:99:8a:e8:06:ad:78:01:9a:ba:e3:5f:35:f5:71:
56:85:d5:69:c3:6f:7b:df:38:5b:9d:58:c3:da:d9:35:b6:2c:
df:b1:93:4a:cd:2d:47:ca:ad:a7:e1:87:87:3e:b9:57:bc:1f:
df:d9:a4:60:f4:82:e2:16:c0:e2:be:d1:f1:5b:8c:3f:76:84:
98:4d:f5:08:fb:00:85:44:f5:64:af:e1:4c:c5:8b:78:5a:38:
d8:8c:06:ad:16:a9:ce:b5:46:0e:5f:ea:5d:c8:95:b5:9c:39:
f7:79:cd:e2:b1:86:d3:56:5e:38:0b:e4:f1:ef:79:85:4b:3d:
17:30:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:34 2025 by rpki-client