Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier: Oq4kdEIyMffJW1f62Eu9ba9Im8DUp0SfZNSZyicGecs=
Subject key identifier: BD:0B:83:95:E8:A2:6E:5E:29:0F:A3:93:21:EF:63:A0:11:FB:FA:62
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 0198A083A1D09F4C7C9EB53D57C64249A454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number: 0DB8
Signing time: Tue 12 Aug 2025 23:00:37 +0000
Manifest this update: Tue 12 Aug 2025 23:00:37 +0000
Manifest next update: Wed 13 Aug 2025 23:00:37 +0000
Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: PN8zKFGCQMOEW7ssoweRPBtUIkJFyGmRBlRhO+NigFg=)
2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:a1:d0:9f:4c:7c:9e:b5:3d:57:c6:42:49:a4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Aug 12 23:00:37 2025 GMT
Not After : Aug 13 23:00:37 2025 GMT
Subject: CN=bd0b8395e8a26e5e290fa39321ef63a011fbfa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:18:39:ac:6f:d4:8e:8a:98:72:85:f9:21:
42:ab:e7:a6:9a:f1:8f:c5:5b:6b:af:37:75:79:1f:
dd:97:26:7a:27:5f:9e:83:74:1f:0f:ea:7f:f0:4b:
5c:a0:72:74:89:dd:6e:c7:e7:50:2c:ed:e3:30:c7:
35:f3:06:ec:ec:5f:e9:8a:44:8c:f0:39:42:95:b7:
ea:ce:3f:8b:f2:5e:06:71:18:ac:36:cd:d0:3f:10:
66:95:5d:c8:97:3e:89:90:a0:06:56:a2:14:6a:e2:
60:03:1a:88:f2:da:b9:68:3f:8d:81:86:f0:c2:79:
e9:8e:c7:e5:88:6a:d6:53:e7:10:ce:08:99:33:0b:
76:4a:3d:66:43:5d:b9:e9:c1:5a:78:87:da:a2:df:
51:2f:05:77:32:7c:4d:94:3b:c1:dc:06:a3:ac:d5:
7f:3e:e2:13:4c:52:a9:2e:76:5c:8a:8f:7e:49:66:
49:79:de:b1:db:67:57:bc:be:0a:3d:7f:26:61:82:
b5:38:31:e7:a0:ae:39:f0:47:8d:fe:f3:de:d9:44:
0f:b9:c6:c0:7e:a4:cd:68:bc:dc:40:64:10:21:12:
3e:65:79:8d:f7:6f:ef:d9:c5:1d:e8:0a:d6:67:ab:
cd:df:06:56:2a:b8:33:c7:2a:d5:d9:fd:d6:80:d9:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0B:83:95:E8:A2:6E:5E:29:0F:A3:93:21:EF:63:A0:11:FB:FA:62
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:34:09:0c:65:3e:4c:b0:27:67:19:6d:8a:34:29:25:39:1b:
f5:da:e9:15:38:a2:d5:5a:32:78:49:9f:53:8f:7a:35:39:05:
6b:a8:ea:f9:77:80:c9:7e:dc:17:0d:72:27:c3:f5:87:b3:31:
5e:17:f4:14:ba:9c:f0:e8:f3:01:3b:74:a2:81:57:0c:55:9c:
38:8c:e1:cb:84:ce:3e:86:24:47:e1:10:91:c6:0a:1f:7f:ab:
1c:80:52:88:16:cb:4f:f5:f6:ee:15:4e:f6:10:98:f7:6c:2a:
27:81:89:a0:94:68:1e:83:4b:1a:d7:67:95:35:00:bd:12:a4:
21:6e:51:57:87:50:e0:55:2e:42:42:99:14:ac:2a:4f:f6:a9:
04:ac:96:16:41:c2:8e:c2:97:b2:cb:94:b0:74:52:34:c6:38:
d3:fd:c3:19:78:6d:e8:ac:5f:d8:25:42:cd:91:8b:d4:b1:11:
31:66:39:ad:a1:4b:a3:d7:ad:15:e6:ab:67:fb:be:d3:4c:cb:
80:8f:7a:8a:ce:9e:d5:fb:62:89:58:62:2b:aa:6a:83:93:49:
e5:d2:57:fe:fc:da:e1:93:9b:12:12:10:03:bb:84:e6:8f:7a:
b0:de:1a:c7:0d:13:c6:75:c0:21:a4:12:53:55:d4:8c:57:97:
86:70:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:57 2025 by rpki-client