Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier: F+bUABUT+p15S9FNshPQFd3RhfhPH1TlQ/v1WFrQoqw=
Subject key identifier: 9B:A9:0A:AC:AC:35:DA:EA:6C:4D:D6:27:60:12:F3:BC:EE:94:3E:46
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 0198D5BBA9BD05D18C67620C2E02371EE97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: 0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa (hash: 1DO414ntcLEzGPYsqi1T9pktOlbe8IXJos67T1vJeiY=)
2: 1UI6HT_8GUtsbAt1u0K32h0qEv8.roa (hash: RqgJutHKgdkCSusd/ckZpEoLNhIYSrs1ZKahvFk+D38=)
3: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: tdWA76xrqAG5fVcd3ZfwpwKv1vG8COeXb2Cnx7MI95s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a9:bd:05:d1:8c:67:62:0c:2e:02:37:1e:e9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=9ba90aacac35daea6c4dd6276012f3bcee943e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:fc:99:bb:c5:a8:dc:b6:99:6f:4e:7e:74:
a5:dc:4b:89:da:9b:b0:12:41:d6:a3:e5:18:c5:7e:
1e:98:83:96:d8:2b:6a:f8:03:ca:ec:17:59:b5:c0:
6c:69:0d:62:63:7b:1e:9b:4c:91:24:fd:20:59:a5:
ee:bc:c0:3c:9d:2f:fe:82:68:b2:e6:24:92:06:46:
84:c4:23:a3:18:b9:77:ff:c8:8d:47:ca:87:56:b7:
d6:3a:ea:df:1f:6d:5e:5d:07:40:2a:70:aa:ca:19:
52:27:b1:fc:fe:06:c5:68:77:e4:f5:96:51:66:7c:
1c:d1:e2:85:da:48:36:68:ea:33:c8:ce:b0:bf:a1:
14:bd:58:23:12:f9:86:dc:98:aa:07:63:aa:52:fe:
54:7b:c4:ac:a8:b8:88:21:a1:b9:e7:a4:3b:47:01:
d0:0f:eb:5c:1c:f0:c8:d4:85:e9:41:53:1d:a8:3c:
f8:6f:4f:ab:b5:99:08:0a:fa:83:9b:c3:af:9d:8b:
2e:70:6c:4a:29:23:58:d4:2b:04:97:53:9e:b1:bc:
fe:5a:c9:1c:b0:f0:0a:b0:97:c2:03:4d:dc:b9:33:
cd:dd:5d:85:41:31:c9:af:da:6b:ad:6e:9d:01:e2:
ea:cd:fa:7c:10:e5:86:29:65:ca:a6:04:92:63:7c:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A9:0A:AC:AC:35:DA:EA:6C:4D:D6:27:60:12:F3:BC:EE:94:3E:46
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:80:22:a5:50:f2:51:c6:fe:6c:2e:dd:21:63:f1:75:e1:
cb:ec:a7:ce:59:32:8d:49:54:04:40:c3:ee:a1:f3:a1:8b:ca:
18:fd:50:0b:31:b3:c9:45:90:6d:f5:44:b9:a0:f4:19:5e:83:
3f:f7:08:d6:b4:a9:94:82:cc:e3:c7:6a:f8:db:50:a1:fb:59:
e7:8e:58:6d:53:f4:74:33:8b:ca:3b:77:1f:65:98:ee:3f:38:
ce:99:28:f4:20:31:d8:67:94:90:58:98:31:de:4f:2f:a0:18:
1a:01:61:2e:94:69:e3:6a:6a:0c:d9:8a:0a:43:d9:55:d9:ee:
cc:58:34:6a:60:70:25:7d:ea:6e:57:91:b1:ce:3b:c8:3d:a3:
96:d4:51:28:4c:17:92:a8:5e:b8:97:d8:26:34:85:71:56:cc:
16:31:9d:06:88:44:fe:2f:04:f7:1e:69:74:50:c7:a6:ce:2f:
80:ec:8f:19:18:73:54:9f:02:55:9a:f8:47:8b:99:87:f7:42:
79:bf:f8:a7:49:af:62:6f:7a:e0:86:23:3f:1e:4a:6c:0c:c2:
f1:e0:f3:d6:aa:0b:a8:d9:8c:5e:1d:5a:81:48:52:25:e7:fb:
ad:6c:1c:7d:0e:fb:64:88:25:3e:71:42:7e:fe:f2:df:c2:f4:
8b:6d:92:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:18 2025 by rpki-client