Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: t5u1bsc2yw0jeaxon8UhMgRH1U1nUUJGk+EOdS1Ioa8=
Subject key identifier: 2E:5F:A9:AB:23:56:17:BD:BB:77:BF:48:04:B2:AF:41:76:1F:E4:56
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0199FBEB0C3B22B42BDC3E4981CA45A2A8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0DEC
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: Bqx/zB0otQ3YriuJxgrfy9Ovx5izVImggZmRYoq5DO8=)
2: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
3: jC5EQ2pE1hoJnWUa8__n2F6U0jU.roa (hash: VaWxumOUwy/KUDWIkuUcnIO+udOZdz3MVrVO9LN7HhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0c:3b:22:b4:2b:dc:3e:49:81:ca:45:a2:a8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=2e5fa9ab235617bdbb77bf4804b2af41761fe456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:03:4f:34:96:e4:0a:43:c3:0e:1c:b3:6d:
c3:d1:d7:1e:68:aa:07:4b:05:4b:3f:be:32:6f:92:
ba:81:45:9c:4b:db:68:7e:8a:ca:fc:09:7d:06:2b:
47:d0:30:20:aa:5d:c8:c1:02:fe:00:ee:53:5f:e4:
d5:bb:ce:92:4e:50:a3:00:19:26:ae:b2:e5:70:a1:
ee:6d:75:ed:26:e6:71:cd:b5:de:c4:fa:99:bb:33:
e5:de:12:3b:13:c9:d2:56:00:b4:80:90:17:c5:db:
77:f1:93:bb:6a:37:ed:e4:15:6f:33:50:e3:08:08:
41:0a:de:ea:7f:f8:c4:d6:f0:20:b5:a7:0b:c8:22:
7f:2c:65:1d:81:f8:24:6d:1e:25:ef:e2:d6:9b:6a:
fe:4d:f8:3d:71:a9:8b:06:de:52:a5:95:ee:df:4f:
7e:24:f1:ec:14:e5:63:51:a1:65:27:ba:ab:f2:0c:
b8:2f:3a:46:36:da:8c:fa:e1:72:50:12:80:3d:6b:
53:17:36:37:f0:d1:d2:40:aa:be:f1:5f:1e:dc:ed:
06:11:7b:b0:b2:15:31:40:bc:86:f0:f9:06:11:a0:
86:dd:6f:55:1a:f4:cb:2f:36:3e:7c:6f:7d:ae:2c:
03:3f:21:62:02:bd:67:1f:ba:e5:8f:80:85:35:df:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5F:A9:AB:23:56:17:BD:BB:77:BF:48:04:B2:AF:41:76:1F:E4:56
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d1:80:eb:8c:0d:40:80:c1:00:f0:d4:a3:6c:61:12:12:bd:
f2:a8:f2:1c:b4:72:23:6f:0a:89:c3:23:db:40:26:de:c7:79:
b0:26:97:a9:f4:1d:8f:20:71:ed:2c:69:3c:23:7b:67:e2:c2:
a0:07:60:0e:ff:b0:f5:2e:66:27:8f:3a:f9:1f:72:cf:87:c2:
53:bc:98:18:db:d0:be:e3:19:73:37:1a:a3:33:19:83:1e:b0:
ee:9e:e0:19:1d:13:da:c0:a4:b3:08:b5:44:a6:9f:88:d1:5d:
f6:02:1e:e2:9b:f9:a5:a2:36:85:89:9c:09:46:8a:32:19:e7:
ed:ee:fe:0b:35:5f:60:c9:f1:3a:09:ef:ee:ce:eb:d1:01:a3:
86:a7:50:64:99:9e:27:f7:e9:c4:36:5c:ee:ae:de:06:13:ea:
6d:e7:ff:19:7f:99:a4:8b:38:57:5b:e1:62:11:67:60:fb:eb:
85:e2:0c:e1:fe:d8:5c:1f:51:d5:d8:99:18:f9:96:77:46:76:
cc:91:2d:4f:f4:2b:7e:d4:90:64:9d:cb:8b:21:9f:23:51:7d:
aa:2f:91:2c:92:32:bf:3b:b4:5f:b6:a6:30:1a:92:ca:21:ae:
45:19:e4:d8:5d:74:39:3f:9c:9e:c4:58:3d:d8:b6:4a:11:b3:
68:b5:87:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:33 2025 by rpki-client