Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: XM5vGrB3kCgRy/jfRv7svvZZZLarKj95XgqJikSFSLI=
Subject key identifier: 1B:09:23:DE:21:6E:BA:6E:04:78:76:B8:01:E2:33:9D:9B:F9:5C:FD
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 0199FBEA945933FA3167916F496FE1AA178C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 0764
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: 3BdNaaRYXT/24m9xWLlvzJP5ctHU58EgDd1pEGS7zsg=)
2: qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa (hash: Wp90B7y4b1beWFho9S7pJxCTTLLhfUdptb3Ax7iQwmA=)
3: ygl5P_7lTFnzJgirLplRNSI58XI.roa (hash: cR+NYAbF+5iFZxCdzFXgCBDiu3chwIso0AL6/JnYtEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:94:59:33:fa:31:67:91:6f:49:6f:e1:aa:17:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=1b0923de216eba6e047876b801e2339d9bf95cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:c4:0b:c1:e6:c5:38:2c:47:d1:66:12:79:
22:a4:79:91:52:f2:bf:ef:42:a1:0e:35:2c:ea:cb:
bd:b5:a6:e6:d4:fa:76:82:81:ea:85:16:79:28:a7:
c8:76:06:c0:26:f9:ee:73:be:4c:24:44:04:86:82:
ce:8b:4e:80:4c:74:10:c6:ac:93:8a:bb:75:58:dc:
90:d9:1d:c7:96:8e:fb:03:f9:ab:83:b3:f7:e1:0d:
63:85:a2:3f:25:53:02:45:a3:92:d6:30:29:59:a6:
b0:16:c7:10:e7:8b:7f:a3:61:b4:45:4f:82:25:90:
fd:0f:3b:60:ef:cb:27:a9:0e:e4:c7:3d:b5:0d:fc:
5b:21:a4:42:ad:d0:0f:54:fb:7a:d0:ae:e8:4d:a5:
e1:7c:3d:c1:8a:92:5a:f9:0c:a4:ae:a4:67:16:e4:
1e:96:dd:b5:28:18:31:b0:4b:93:72:f5:38:00:03:
0a:0d:d9:72:e0:a3:00:5f:0c:61:54:5d:6a:df:4b:
e0:ad:ae:e0:b6:48:73:60:e7:f9:43:e0:36:59:c9:
4b:53:98:bf:c8:3e:77:41:5f:02:6a:f4:6e:f7:99:
c6:b5:24:ee:19:a9:e3:e9:c7:05:67:9f:1f:ad:79:
69:3c:14:fa:ee:20:d7:2e:5f:69:f6:b0:63:5b:70:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:09:23:DE:21:6E:BA:6E:04:78:76:B8:01:E2:33:9D:9B:F9:5C:FD
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:94:09:7f:60:09:5b:e9:0a:d2:4f:da:98:6f:13:2a:17:2c:
24:d2:06:7d:07:ec:92:8e:dc:b3:64:39:c1:a4:c8:ee:6c:71:
50:6b:39:9a:3d:97:36:81:15:8e:c4:c4:5a:23:5a:bb:6e:01:
16:f5:c2:65:b9:e9:6b:88:17:8c:bb:de:64:e1:5e:e4:7f:39:
cb:d7:6c:84:b9:a0:8f:86:f6:64:f3:ed:12:35:08:28:4c:55:
0a:0a:ae:28:16:c5:2c:da:c3:ad:6c:3e:9b:f1:ed:a5:68:3c:
36:ed:34:79:fd:6a:b1:1f:d1:f5:fb:09:2c:55:21:de:7f:b2:
49:55:62:38:c9:81:d8:a4:15:4d:8f:93:3b:5e:7e:e9:de:72:
fd:52:86:48:40:1b:f7:0f:ba:32:53:56:9b:71:bb:f3:c1:39:
48:5a:6f:62:90:ca:39:2a:34:85:58:6e:f0:6c:b8:c0:6c:90:
fe:c7:83:21:8a:dc:63:02:27:fe:01:3e:ab:9a:3b:21:a2:d5:
0d:e6:c0:55:17:e9:89:03:a8:a3:21:5b:2e:81:ac:7f:21:27:
ea:65:66:e8:d9:76:99:3e:07:be:82:3b:ab:ca:23:0f:a8:2d:
0b:d8:d5:b2:74:c3:b2:52:dd:8f:b6:e8:9a:2f:35:51:fe:53:
53:c7:4b:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pRZM/oxZ5FvSW/hqheMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWY5MjVlMTczOGJjMzUyYmM2YjVjZjVmZjk1MWIzZDgx
M2FlMzkwHhcNMjUxMDE5MTAwMTE4WhcNMjUxMDIwMTAwMTE4WjAzMTEwLwYDVQQD
EygxYjA5MjNkZTIxNmViYTZlMDQ3ODc2YjgwMWUyMzM5ZDliZjk1Y2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYnEC8HmxTgsR9FmEnkipHmRUvK/
70KhDjUs6su9tabm1Pp2goHqhRZ5KKfIdgbAJvnuc75MJEQEhoLOi06ATHQQxqyT
irt1WNyQ2R3Hlo77A/mrg7P34Q1jhaI/JVMCRaOS1jApWaawFscQ54t/o2G0RU+C
JZD9Dztg78snqQ7kxz21DfxbIaRCrdAPVPt60K7oTaXhfD3BipJa+QykrqRnFuQe
lt21KBgxsEuTcvU4AAMKDdly4KMAXwxhVF1q30vgra7gtkhzYOf5Q+A2WclLU5i/
yD53QV8CavRu95nGtSTuGanj6ccFZ58frXlpPBT67iDXLl9p9rBjW3DA4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsJI94hbrpuBHh2uAHiM52b+Vz9MB8GA1UdIwQY
MBaAFNefkl4XOLw1K8a1z1/5UbPYE645MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjIt
OTZhMzRiMDIyZjg5LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjItOTZhMzRiMDIyZjg5
LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA15QJf2AJ
W+kK0k/amG8TKhcsJNIGfQfsko7cs2Q5waTI7mxxUGs5mj2XNoEVjsTEWiNau24B
FvXCZbnpa4gXjLveZOFe5H85y9dshLmgj4b2ZPPtEjUIKExVCgquKBbFLNrDrWw+
m/HtpWg8Nu00ef1qsR/R9fsJLFUh3n+ySVViOMmB2KQVTY+TO15+6d5y/VKGSEAb
9w+6MlNWm3G788E5SFpvYpDKOSo0hVhu8Gy4wGyQ/seDIYrcYwIn/gE+q5o7IaLV
DebAVRfpiQOooyFbLoGsfyEn6mVm6Nl2mT4HvoI7q8ojD6gtC9jVsnTDslLdj7bo
mi81Uf5TU8dL5w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:17 2025 by rpki-client