Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
File: 15dPQ3RodlWDV_H7kcOFKlg6FFM.mft (raw, json)
Hash identifier: /TRv7rUpjMIQYM7flv3onpelNchLhK5wAQDieL4gkgw=
Subject key identifier: F0:B5:8C:76:C6:B5:5F:DF:B1:6A:70:E6:30:A3:E3:E9:40:89:56:C8
Authority key identifier: D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
Certificate issuer: /CN=d7974f43746876558357f1fb91c3852a583a1453
Certificate serial: 0199FCC6B34AF8AF10FB3214477BBE64E5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
Manifest number: 0A98
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: 15dPQ3RodlWDV_H7kcOFKlg6FFM.crl (hash: yWfpEhnFVXzlPb08a6s9s8+ZJuRqm99qnanPJL+4s7s=)
2: eTKtoFWz_Mx4YanJDAi3s36ZTD0.roa (hash: /F4jtOytXs7E/d+FweZOPefzhGOW8m0ae7Vd5vmb9SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b3:4a:f8:af:10:fb:32:14:47:7b:be:64:e5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7974f43746876558357f1fb91c3852a583a1453
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=f0b58c76c6b55fdfb16a70e630a3e3e9408956c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:47:22:be:54:a7:f9:64:fb:35:6a:be:16:
01:4d:d2:99:78:7b:67:24:4a:80:a5:60:fa:30:b9:
ff:bc:9d:42:af:6d:3e:1b:c9:fd:b5:38:af:f7:9e:
6d:ee:95:3e:7b:fb:c7:2c:bf:b2:3d:34:f6:4a:f6:
dd:0a:49:0b:19:72:9e:f1:be:20:e0:04:fe:f3:cf:
a4:41:68:75:b1:55:76:de:68:39:b9:17:7f:7f:89:
2f:94:09:f1:b5:4c:23:06:83:13:57:3c:a1:8c:b8:
88:81:16:71:94:f5:de:cd:59:14:14:46:d2:71:03:
96:53:77:57:ab:51:1d:d3:bd:aa:bb:74:ce:da:49:
9f:04:36:98:98:e2:88:cb:5f:b1:52:82:9c:6f:43:
81:71:f3:c6:f0:3e:98:ea:89:db:18:c9:44:cc:04:
ac:7a:de:12:d8:ad:ae:15:b9:57:86:d6:a5:48:b4:
67:97:4c:a3:3e:08:a6:d9:14:d7:93:3c:a8:85:a0:
5a:0c:ae:06:fc:15:6a:23:1b:67:d8:70:87:4c:04:
9c:f1:b8:32:16:6b:bb:c7:83:bc:c5:67:48:f4:88:
07:50:64:95:a8:77:44:8d:00:7b:fe:c1:71:32:37:
91:bc:4b:5d:d3:70:c4:b2:94:c1:8b:d8:79:ea:aa:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B5:8C:76:C6:B5:5F:DF:B1:6A:70:E6:30:A3:E3:E9:40:89:56:C8
X509v3 Authority Key Identifier:
keyid:D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:11:05:88:e5:01:47:4e:dc:36:45:cf:9b:b2:ed:36:aa:12:
12:40:4a:3c:ee:d2:08:00:6e:a6:cc:9a:d2:d5:91:a1:7a:7c:
a0:7e:54:08:ef:e2:49:b1:d5:d0:30:40:96:ff:cb:4d:dc:cd:
79:f0:fa:72:36:7b:d4:e0:d5:f0:f7:d7:c8:d5:06:6f:93:cc:
d5:5f:24:1f:83:c7:e0:4b:19:07:e2:75:fb:ee:87:d2:59:54:
0a:7b:71:86:e0:2e:b2:a0:88:6f:50:90:19:49:d1:b6:0c:1f:
83:b2:6e:04:f6:08:7c:da:b3:40:df:12:7f:7b:23:c0:9b:5a:
ac:2b:f0:4d:12:bf:c9:4a:65:24:83:7a:e6:5d:13:fe:1d:ba:
ef:16:78:c9:5f:99:b7:0c:7e:d4:0e:47:c4:64:b3:80:17:db:
9e:14:61:32:d1:62:dc:4f:47:5d:8f:ed:a5:58:7a:40:9c:17:
c0:3c:b4:f4:b9:b4:77:5d:88:90:b5:80:e3:96:70:9b:3d:4f:
ab:90:96:5e:2e:69:cc:5e:14:e3:c8:7a:7a:b4:79:07:ea:6b:
33:49:bf:f0:43:99:d7:d1:16:08:a7:9b:b7:f8:41:91:47:e2:
86:ab:4b:fa:ea:51:ec:20:1b:a5:e6:e9:87:2e:04:5b:62:c3:
bc:24:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:00 2025 by rpki-client