
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier: lVosBK2S/Yma1PRuOBVT4Pag6QZmOVBczCtoIlKYc6w=
Subject key identifier: 7B:D3:AB:06:82:2A:C4:2A:8B:B2:10:38:C5:5A:6B:94:AD:E2:BE:E1
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial: 0198816808DCCA565D7E46ED999FB7F0D846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number: 0F8A
Signing time: Wed 06 Aug 2025 22:02:15 +0000
Manifest this update: Wed 06 Aug 2025 22:02:15 +0000
Manifest next update: Thu 07 Aug 2025 22:02:15 +0000
Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: 7S2rIN9a38WeHKy/PwavUwEA7xMRlAyiG7tZSvTGdso=)
2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:08:dc:ca:56:5d:7e:46:ed:99:9f:b7:f0:d8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Validity
Not Before: Aug 6 22:02:15 2025 GMT
Not After : Aug 7 22:02:15 2025 GMT
Subject: CN=7bd3ab06822ac42a8bb21038c55a6b94ade2bee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:06:a6:df:49:0c:3f:66:05:2d:60:d4:74:
ef:b2:d0:a2:af:92:3f:79:0a:a7:60:fd:bd:e1:eb:
5b:be:2e:e7:23:24:54:1e:da:ca:b6:20:76:78:4a:
e9:39:00:ca:f4:f6:2e:d2:d3:58:c1:88:4e:6a:83:
0f:94:da:81:ef:4a:3f:7a:2a:5d:fa:5d:a8:97:9d:
59:aa:d1:99:cf:62:2c:96:7c:1b:9b:b6:d8:0b:37:
2f:32:39:64:61:52:12:be:c2:67:60:04:47:cd:45:
ac:7f:bc:3e:8c:4e:ae:13:3e:f2:f1:95:6e:d9:8c:
cc:0e:e2:ba:8c:eb:f3:9e:f7:ce:81:10:a4:fd:cd:
38:a4:82:37:e5:e3:14:40:98:55:19:13:21:c9:4c:
27:55:c5:50:25:8d:fa:29:13:2e:16:70:98:15:5b:
4e:3f:7f:93:78:df:db:88:48:05:e4:79:75:74:57:
bc:26:56:f9:0e:6f:3b:89:7a:c9:2b:44:05:64:6b:
48:10:74:f7:bf:90:d3:ae:89:4a:11:49:1c:45:1a:
8c:35:da:6a:6a:96:3e:67:50:e4:c1:1e:10:a0:35:
d2:16:cc:38:65:16:e1:55:6f:4c:17:7b:df:fe:60:
72:37:f2:49:b9:75:9e:51:7a:a5:9c:3b:e2:21:81:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D3:AB:06:82:2A:C4:2A:8B:B2:10:38:C5:5A:6B:94:AD:E2:BE:E1
X509v3 Authority Key Identifier:
keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e3:15:4a:0d:e4:8d:a6:c4:d2:ba:85:af:c6:a7:74:94:d3:
52:18:f1:d5:48:1e:9f:f7:e7:53:2d:4e:0f:33:bc:d1:9f:6e:
0c:8e:11:7e:2c:a2:67:bd:df:76:f6:c8:87:29:95:96:82:fd:
bc:ca:c5:e5:6b:60:87:e1:d0:6c:ea:3e:d2:5f:d8:49:61:2a:
ea:76:4e:98:02:61:fd:b4:a3:b0:f4:5c:8c:13:90:55:3a:b6:
c6:68:55:e9:4e:05:f3:e4:00:e9:38:89:6d:a2:64:cf:fe:38:
d7:97:f7:df:e6:bb:9d:a7:a7:94:a0:22:36:a0:a6:61:b2:c7:
31:95:24:3b:a1:8c:7d:c9:56:41:22:04:21:38:f8:84:99:83:
1d:8e:e4:04:72:84:25:af:6b:a8:f7:78:34:0b:b1:45:a8:82:
7c:a4:f1:8d:e0:c3:4c:3f:d0:f3:4a:ff:0d:bd:84:3e:1e:cf:
68:e9:ed:00:8c:86:d2:a7:10:41:e1:f2:45:63:80:6f:20:05:
39:06:ba:7a:b1:db:11:3b:ec:3a:28:a1:6b:9a:f5:35:cb:cf:
c7:8b:d9:32:d5:5e:f1:45:8e:a9:c6:1c:22:de:79:51:7a:89:
90:78:67:74:ca:c4:cc:98:07:9b:42:03:ca:c5:b2:bb:1a:ff:
3f:f4:97:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:22:10 2025 by rpki-client