Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: 1WDTK3O13RirVOYsK7rf7jB2EWGICQa2MyTcuWpuDk0=
Subject key identifier: 15:AB:4E:A2:AE:85:A7:61:9A:E5:C0:F0:FD:36:78:46:5B:6F:06:45
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 0199FE468AE69199BBE08F279CD1D10B9D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 21:00:59 +0000
Manifest this update: Sun 19 Oct 2025 21:00:59 +0000
Manifest next update: Mon 20 Oct 2025 21:00:59 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: pyd7bGRkOHX82u1IbN4XpwsKRjIY9O5VwI5xA7xmkjQ=)
2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=)
3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=)
4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:8a:e6:91:99:bb:e0:8f:27:9c:d1:d1:0b:9d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Oct 19 21:00:59 2025 GMT
Not After : Oct 20 21:00:59 2025 GMT
Subject: CN=15ab4ea2ae85a7619ae5c0f0fd3678465b6f0645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:f0:2b:cd:39:10:d9:80:00:92:2c:3f:04:
46:dc:1e:4d:be:d7:9d:05:73:9c:99:de:4f:ad:8a:
f1:64:b9:2d:c6:de:f5:35:08:d3:68:83:c9:4c:fb:
4c:cc:13:5f:18:c4:de:21:28:8f:b9:5a:41:01:76:
e6:77:05:f0:81:21:b0:ab:86:80:a9:de:7a:68:67:
4a:85:11:9c:74:4b:67:5f:55:23:cd:37:2a:ad:4f:
3f:0f:5a:83:96:7d:10:e0:2b:77:0a:f4:b2:f5:e5:
f9:e1:84:23:ec:2f:84:5c:ac:db:17:38:e9:f2:ed:
7d:16:c4:8f:e2:41:59:9d:c5:05:ca:e8:3c:ed:49:
be:2b:b0:f5:db:e8:10:e8:e1:25:f1:f1:31:46:c6:
41:d0:41:f3:37:92:2e:7f:ba:4f:06:b2:fc:03:b4:
7a:5d:b9:12:b4:db:fb:3c:58:5d:a4:b4:3b:9f:fe:
e6:91:df:04:0c:e7:11:21:36:f4:4c:f8:e2:68:4e:
56:27:10:31:d2:b8:0e:fe:e4:6c:b2:38:d5:c7:61:
70:a9:e9:98:4a:a9:38:b9:70:76:c0:3a:63:51:d9:
48:b0:e1:ab:62:eb:75:6a:85:20:8f:16:3e:68:50:
90:04:1e:b0:25:60:6b:f7:10:78:a0:7a:28:f4:e8:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:4E:A2:AE:85:A7:61:9A:E5:C0:F0:FD:36:78:46:5B:6F:06:45
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ba:5a:ab:51:9c:cc:2b:a0:f1:f5:ed:bc:94:4d:da:f5:0f:
46:39:b5:54:51:bc:a4:40:99:68:6e:13:c9:65:d7:0e:ee:e7:
41:39:cf:2f:4f:ce:91:d9:0b:10:5e:f6:fa:5e:9e:ea:93:d3:
88:89:5f:95:40:21:50:6f:04:38:31:4c:59:7c:ac:36:8e:08:
2c:18:15:a5:d6:fc:93:97:5c:d0:24:c9:55:78:08:3a:c9:eb:
31:48:34:4d:30:38:25:19:17:76:d0:09:b0:94:dd:46:ba:de:
d0:1f:34:fc:86:37:9d:9c:b8:f8:df:f8:70:55:e5:66:d7:f6:
03:bc:75:07:1f:48:09:3d:2e:1a:ce:99:55:57:5a:b1:2e:3d:
b0:35:1c:96:c6:3b:b6:71:ac:7a:5b:5c:fb:df:c6:20:62:57:
ad:33:ad:36:29:0e:7a:31:3c:b4:8a:ae:cf:ca:36:4d:37:b3:
cc:43:32:91:55:fa:9d:63:51:48:98:99:56:72:a9:18:d7:b4:
3b:c5:f9:17:fe:0e:10:3e:b6:b7:14:e9:e4:ba:0a:5e:09:a9:
3c:58:55:df:87:24:1f:e8:c2:d3:53:3a:33:b7:c7:dc:de:b6:
36:86:15:09:be:21:ee:35:8b:52:bc:48:c6:24:42:2f:8a:39:
74:bc:50:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:15 2025 by rpki-client