Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File: n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier: 0YGzIVXUZL+UOhr9WRlx3yobzVelA8jSaZOsl13l338=
Subject key identifier: 65:0B:5A:A8:57:39:C6:0A:D2:CA:16:65:99:5A:9A:68:01:71:8B:28
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 019A00352E6E33BEF80C4CEE07432B297D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number: 0C68
Signing time: Mon 20 Oct 2025 06:01:16 +0000
Manifest this update: Mon 20 Oct 2025 06:01:16 +0000
Manifest next update: Tue 21 Oct 2025 06:01:16 +0000
Files and hashes: 1: 1-jitS6EpXiqLjoTy0y90wIH72rI.roa (hash: Rfg5nTBCaEYBRoN4EImwETKxmFJYdYpWUORSCCGtVf4=)
2: CoX1lhKeqnywoZzkBVdeBK0K-8E.roa (hash: UeFCTUO9sjJL5Z6FG4W0m09+58Inz20WQtlj2knxqFc=)
3: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: e+NWEM7ceKOcRZAPLnzfqJ2Goo7yeo2kRgr/KZQLKK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:2e:6e:33:be:f8:0c:4c:ee:07:43:2b:29:7d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Oct 20 06:01:16 2025 GMT
Not After : Oct 21 06:01:16 2025 GMT
Subject: CN=650b5aa85739c60ad2ca1665995a9a6801718b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:f6:22:95:3b:da:ef:1a:18:02:60:a8:b2:
ba:cb:fe:d8:81:3f:dd:0a:6f:e8:7d:38:9a:8a:06:
27:47:e3:11:df:5c:68:95:64:c0:08:37:ff:56:13:
f6:bd:6e:8f:d9:d2:92:72:d7:36:b5:48:7e:f7:f9:
5d:26:2c:4a:29:7c:48:a2:69:f9:13:5e:ce:8a:8b:
bc:61:97:fb:1e:b1:5f:3f:c5:21:5e:5c:ff:52:a4:
9f:d1:ce:bd:83:d9:8d:3b:4a:cc:e7:03:f8:55:51:
20:97:01:17:c0:ee:b2:f2:62:22:75:37:f7:20:66:
89:05:f1:07:20:1d:cc:0d:58:e9:96:c8:4b:f9:c6:
5f:05:cb:dd:5b:04:c2:7c:aa:13:1d:9e:4e:67:3b:
72:4e:4c:3a:60:83:d2:5b:bf:b9:4f:d5:3a:70:09:
2f:86:f2:ad:3d:63:2c:96:f2:eb:cb:e9:73:2c:3f:
6e:9e:85:f7:74:8e:64:13:a7:8e:2d:41:a4:21:8f:
9a:8a:ab:6c:c6:d6:b5:2b:69:48:61:33:d8:74:a5:
ad:e3:0c:0c:ea:f6:88:8f:fe:12:89:58:e1:dd:43:
87:a1:3c:67:3b:90:65:ae:de:f6:bd:84:fa:12:bb:
09:50:76:8c:eb:aa:07:05:26:83:2d:2e:af:31:19:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0B:5A:A8:57:39:C6:0A:D2:CA:16:65:99:5A:9A:68:01:71:8B:28
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:56:6a:9a:ed:8a:90:a3:54:37:6d:31:94:57:81:39:ce:2b:
91:d3:b4:73:c6:cf:7a:16:c9:42:a1:3f:37:14:dc:67:3b:ee:
c0:75:d5:12:2d:b1:46:64:96:aa:79:54:f7:d0:74:aa:91:d6:
3f:4b:b2:6c:65:f3:66:d7:b9:12:3e:b1:c1:2c:0a:88:54:e5:
e3:fa:bd:c4:b6:68:10:54:f8:d0:92:72:8a:c6:d2:27:e7:90:
93:13:d9:02:fd:a4:ed:73:33:14:bd:ea:1f:ea:d4:e3:5e:2e:
5d:4a:49:b5:d9:22:a7:ab:b7:6e:dc:ce:98:be:45:68:3d:15:
78:fb:7b:ef:26:cc:dd:35:51:14:d0:57:f7:0f:a6:6a:53:84:
b1:ca:7b:91:21:0c:54:07:a6:6f:5a:14:6d:2e:52:91:41:a4:
8a:af:54:42:de:56:8e:f5:c1:62:79:72:6d:1c:2b:2f:f4:ef:
50:05:f7:c8:82:1c:d1:87:0c:3a:e8:c9:2f:1b:54:e2:35:ec:
14:1f:98:14:6b:71:66:dd:b3:bf:1b:dd:4d:a0:12:6d:64:0d:
55:79:2c:31:ce:28:55:30:23:6e:e0:48:8b:72:32:c7:c9:c3:
53:0a:97:15:bf:fb:ef:46:5d:24:e9:f6:a0:dc:f1:ff:98:1f:
ec:98:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:29:01 2025 by rpki-client