Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: R9mhmpxrGhRuvjfTs+V896u2BWlnBHOQIsaNRtE9mlI=
Subject key identifier: 9D:13:50:61:E0:67:F1:7B:11:70:E5:98:46:62:AC:B7:69:0D:86:89
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 0199FCC61FA574550FCCDBF817E98E658D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: JXOrYis/BWmVdU7vzs9Q9QxvUHvmMsWThhHIfHXqcyc=)
2: oP_NZCckorWlK08uLtq1ZhjEmNw.roa (hash: TmGRTgVUIXQXGjYy9QqbbgsvjEEm+TAtLS3xKb+xEyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1f:a5:74:55:0f:cc:db:f8:17:e9:8e:65:8d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=9d135061e067f17b1170e5984662acb7690d8689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:0a:91:b5:d1:ae:e9:b9:ee:5f:1d:23:9a:
36:46:54:4f:59:40:d1:d1:7e:01:ef:52:44:5d:df:
26:b1:1f:91:f1:63:cb:57:88:44:ff:3b:18:c7:dd:
5a:04:b9:ed:37:56:0d:8f:bf:50:bb:14:62:9c:61:
af:34:aa:87:86:13:4c:f7:63:49:ef:42:31:8a:1c:
c3:96:e0:4a:62:9e:55:ab:ac:ac:47:8a:6b:7c:8d:
da:97:eb:14:1a:db:96:4d:bb:df:80:34:50:96:e3:
f5:ea:ed:be:21:1c:b7:1a:ba:4e:2f:ef:18:ca:05:
71:33:35:20:b2:b0:8d:db:00:97:7b:57:74:a8:cf:
6a:02:e4:c9:8e:00:b0:81:7d:7f:38:a8:d5:0a:c1:
6b:8b:bb:0d:0f:80:c6:05:f9:46:05:d1:93:d2:03:
49:01:93:90:78:68:5a:46:34:33:2d:ad:7b:88:c2:
20:db:5e:0f:bd:13:ff:ab:e9:f6:63:6e:12:b6:3e:
19:cb:67:c9:78:d0:9b:d7:12:86:c3:aa:9e:78:7b:
74:0d:c4:61:78:8c:6d:bb:41:08:8f:5e:c5:af:32:
8c:00:bc:8c:3b:5b:0c:ca:49:3d:8b:f7:c4:76:b6:
01:72:00:3b:55:6e:79:90:15:73:2a:89:30:bd:b2:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:50:61:E0:67:F1:7B:11:70:E5:98:46:62:AC:B7:69:0D:86:89
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:9e:a2:00:e9:70:b1:05:5f:44:c2:72:5b:26:a1:48:c6:
8c:73:e9:4c:a3:3f:53:b8:f5:fb:c2:71:0f:f6:95:5c:ad:80:
d7:99:cf:a1:74:9c:63:ec:93:12:24:ee:ea:74:e9:84:ad:2b:
60:e1:8f:24:76:7e:c1:c3:29:82:78:28:20:8d:0d:f1:d8:e9:
a3:d3:d0:e8:75:de:76:36:18:1b:61:68:20:b2:63:fe:11:da:
9f:cc:fe:f6:04:2c:90:5a:a3:f8:6f:02:fa:3b:ea:12:7b:55:
47:80:d0:40:58:00:45:9f:71:02:8f:61:69:33:98:f4:b5:95:
54:2c:31:3e:c6:59:43:bf:25:50:89:4c:39:0a:47:5d:fb:47:
8d:db:cb:a9:75:66:76:7f:30:1f:e4:13:20:29:ad:d5:3d:6b:
2c:28:c5:e2:0a:02:1f:32:0e:e5:d6:f1:84:67:25:2a:71:24:
21:21:d9:ed:49:bc:7e:a6:f0:ed:5a:25:fd:4a:10:e8:10:45:
25:8f:79:5b:9f:65:25:77:43:af:36:27:e1:ec:dd:42:9a:cf:
4c:1e:27:92:8e:14:45:74:6d:84:74:63:27:a5:ad:5c:30:23:
d6:b6:45:97:6d:f4:3c:32:4a:55:a1:d0:0f:8f:ae:0c:ce:28:
62:64:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:18 2025 by rpki-client