Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: uhx0ZKkHpx6531rJr+71sWAg5bLW4Ee5uxZpmI2AmkU=
Subject key identifier: 7C:44:AD:49:2F:0B:20:C5:64:25:58:43:EF:3B:B5:6B:31:2A:D5:7D
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 0199FAD7DE37FD7DA762A798B1F24FFD3015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 07F0
Signing time: Sun 19 Oct 2025 05:01:15 +0000
Manifest this update: Sun 19 Oct 2025 05:01:15 +0000
Manifest next update: Mon 20 Oct 2025 05:01:15 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: O2t61unzjVaNCS2zmCf6zug3W1jR9QDxY5EDdX+AMgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:de:37:fd:7d:a7:62:a7:98:b1:f2:4f:fd:30:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Oct 19 05:01:15 2025 GMT
Not After : Oct 20 05:01:15 2025 GMT
Subject: CN=7c44ad492f0b20c564255843ef3bb56b312ad57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:d8:0e:be:4d:9b:e3:c9:5b:01:51:11:87:
ec:5e:99:98:f2:63:84:2a:2a:08:b1:d6:cc:87:99:
62:c1:4a:d6:f7:e0:bc:7b:e9:6b:7c:1f:8c:42:1d:
e6:72:60:1c:09:eb:68:6b:2b:3e:b6:8c:9e:54:b1:
5f:fd:db:74:d1:69:55:22:0e:d9:ef:fc:0c:b0:b1:
d4:35:f8:2d:7f:85:05:cf:24:1d:09:97:4d:8e:31:
c1:56:92:65:84:e0:9f:74:e6:96:93:7b:b5:68:e4:
99:6d:49:4f:3a:43:f5:ea:3e:50:6e:1d:db:eb:43:
07:e6:b3:dc:72:61:e4:fe:ae:d5:bb:c9:0b:67:5d:
c5:98:eb:99:5c:25:7e:34:f7:bf:41:bc:5e:f3:51:
48:f0:7e:ba:6f:38:13:76:76:ec:3b:1f:0f:d1:92:
c1:17:7b:61:be:d5:a8:3a:32:d9:83:bc:1f:ca:bf:
72:f7:25:9f:d2:ed:84:1f:1a:e3:b3:17:8a:38:a1:
1f:1c:fd:3f:fe:e9:f0:da:66:99:c6:9f:c4:ba:07:
f0:4e:39:a7:21:76:cb:98:45:3c:14:12:ef:25:bd:
05:cd:51:7d:7b:eb:4b:5f:d3:e7:dd:7c:e4:de:d6:
1d:69:32:97:3b:ea:7c:01:5a:a4:1c:99:9c:b4:ef:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:44:AD:49:2F:0B:20:C5:64:25:58:43:EF:3B:B5:6B:31:2A:D5:7D
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:08:1d:18:02:1b:1b:f0:03:81:2d:c5:3e:75:27:56:ad:1b:
b8:41:69:d6:43:90:6a:3b:89:db:23:fa:74:97:30:ec:f4:7e:
a3:4c:e3:7d:95:1b:2c:22:aa:01:66:54:83:1e:f9:7e:06:40:
19:f6:30:48:6b:94:46:c1:bb:d6:0e:ae:e0:50:a2:76:30:dc:
bb:44:5c:46:8b:e0:43:8e:a8:64:d0:e5:06:d4:aa:ac:fb:ab:
2b:56:c0:f5:d9:29:d4:f9:79:e5:30:4e:0c:a2:78:c4:76:b9:
bf:b3:b3:3a:f2:14:29:11:8a:f0:9c:32:4f:aa:53:eb:84:a4:
34:c1:52:2e:c2:52:70:01:2e:94:3b:9a:e6:d2:e8:e9:fc:e8:
b7:83:7f:4d:74:50:e2:44:95:0d:57:55:0e:8c:dd:37:a4:36:
16:a7:2a:19:7d:ba:63:a5:11:11:78:fd:bd:75:85:57:aa:e3:
97:fa:fe:30:0f:51:08:38:89:8f:50:95:b6:5a:1c:55:a8:e7:
7f:56:11:d5:76:c9:38:68:2c:fa:71:a9:7f:bc:3d:fa:af:a3:
51:77:0a:f5:85:ba:1d:d5:0c:21:f5:3e:ff:d5:44:68:11:3a:
d5:23:e2:aa:c5:f9:8c:8c:e1:84:c5:0c:ec:9d:b1:6b:b9:ad:
cc:1a:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:05 2025 by rpki-client