Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: a6ZaAG/03SS4rjQDHxOfA31ga5/eCZf0Xn0QUr+U2ac=
Subject key identifier: F6:07:0D:B7:0A:DD:AB:6D:3B:05:11:DF:4C:82:18:9C:83:25:25:60
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 0198D5BB94A0E7D1ED37BCDCAF58DD0A8B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 02C7
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: AKqpEVSpQJ0Dccrg092/UxMeUz/tpMEsvhzLXgH/3/A=)
3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:94:a0:e7:d1:ed:37:bc:dc:af:58:dd:0a:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=f6070db70addab6d3b0511df4c82189c83252560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:9a:96:cc:4e:3d:13:fb:e0:59:c8:11:9d:
9a:cd:a6:a8:42:96:b5:2b:4e:b0:68:e8:f7:6a:41:
ec:f8:db:b7:b6:bb:4c:9a:05:18:e4:1a:a1:b5:fa:
0f:17:aa:64:4a:c4:4e:ab:47:c2:4a:b5:40:62:5f:
29:32:65:ae:37:49:1f:97:bc:ec:d0:af:b8:e2:98:
c7:a0:d0:7d:e1:ba:0f:9c:b5:ac:a1:e0:ea:88:fe:
cc:25:89:83:8e:8e:44:d6:3d:b4:2c:61:18:b0:99:
0c:d4:ca:85:1a:64:ea:f3:f6:20:fc:f3:97:f2:ed:
9a:36:a5:03:5c:0b:67:17:73:75:69:cd:3a:a1:9c:
88:71:26:96:f0:3f:68:0b:52:1f:8e:84:ff:78:7e:
95:fe:b3:1c:27:2f:f8:83:e4:2c:43:51:a7:23:ce:
b8:8c:31:9b:45:09:26:11:79:35:2a:fd:38:37:ac:
f5:3b:00:c6:29:a2:bd:a0:c1:b1:3d:59:5f:62:06:
64:d9:63:8d:29:68:93:9e:7c:2f:c9:00:af:48:28:
30:7a:f2:bd:33:23:ce:5a:1c:79:3f:55:dc:70:ee:
eb:cf:68:c1:d0:50:55:e1:35:6d:37:a7:fb:68:80:
ca:e4:1c:c2:95:e3:15:ce:6b:3b:b9:1b:1d:67:90:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:07:0D:B7:0A:DD:AB:6D:3B:05:11:DF:4C:82:18:9C:83:25:25:60
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:18:9c:37:fd:8b:cf:c5:53:9a:2a:93:bc:78:2e:80:e2:40:
57:a3:94:e3:a9:2b:70:56:d5:64:f9:d8:5e:84:0e:68:b9:fe:
c1:ee:14:fa:c4:b5:e5:61:67:45:cd:65:3b:34:7c:bb:d1:65:
79:d7:41:a0:de:99:e8:64:1c:ff:e7:73:c8:35:ae:86:40:91:
15:55:ad:2a:d7:78:de:bf:f4:63:b3:74:1a:15:c7:2b:c5:7e:
e3:91:36:b7:5e:8f:ec:f7:e2:ea:c0:fd:84:ef:92:4d:d0:c9:
bf:66:e7:10:41:59:7c:7b:06:b0:f5:ba:ce:ac:8d:5e:74:7f:
c5:b0:4c:81:67:73:15:6a:9f:54:cf:bc:8c:18:90:34:89:50:
af:78:86:7c:67:c7:3f:ce:8b:c7:71:87:0d:f4:7d:24:3c:6d:
f4:dd:fc:9e:9e:bc:c0:ba:7f:76:03:37:5d:bd:b9:bb:34:c9:
c2:65:c8:d9:40:29:17:af:6f:f2:f2:63:ec:55:c3:d8:79:2e:
b2:c7:bf:0e:6b:ad:9f:60:ef:3f:42:53:c5:97:71:d2:03:c1:
d1:da:d9:62:28:ea:76:1e:f8:e1:af:69:75:ef:e0:a8:f8:af:
7b:d6:a4:1c:e1:86:4e:42:2d:6c:1c:14:f7:a3:48:4d:70:90:
6d:90:39:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu5Sg59HtN7zcr1jdCot0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWU1ZjQ4ZjUzYThkYjljYTYwZmE4ZjE4MzdkMDdmMzE5
MTEwNGYwHhcNMjUwODIzMDcwMTM2WhcNMjUwODI0MDcwMTM2WjAzMTEwLwYDVQQD
EyhmNjA3MGRiNzBhZGRhYjZkM2IwNTExZGY0YzgyMTg5YzgzMjUyNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPqalsxOPRP74FnIEZ2azaaoQpa1
K06waOj3akHs+Nu3trtMmgUY5BqhtfoPF6pkSsROq0fCSrVAYl8pMmWuN0kfl7zs
0K+44pjHoNB94boPnLWsoeDqiP7MJYmDjo5E1j20LGEYsJkM1MqFGmTq8/Yg/POX
8u2aNqUDXAtnF3N1ac06oZyIcSaW8D9oC1IfjoT/eH6V/rMcJy/4g+QsQ1GnI864
jDGbRQkmEXk1Kv04N6z1OwDGKaK9oMGxPVlfYgZk2WONKWiTnnwvyQCvSCgwevK9
MyPOWhx5P1XccO7rz2jB0FBV4TVtN6f7aIDK5BzCleMVzms7uRsdZ5DyZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYHDbcK3attOwUR30yCGJyDJSVgMB8GA1UdIwQY
MBaAFJdeX0j1Oo25ymD6jxg30H8xkRBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmIt
NjNmNTAzNWYzNDQ2LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmItNjNmNTAzNWYzNDQ2
LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBicN/2L
z8VTmiqTvHgugOJAV6OU46krcFbVZPnYXoQOaLn+we4U+sS15WFnRc1lOzR8u9Fl
eddBoN6Z6GQc/+dzyDWuhkCRFVWtKtd43r/0Y7N0GhXHK8V+45E2t16P7Pfi6sD9
hO+STdDJv2bnEEFZfHsGsPW6zqyNXnR/xbBMgWdzFWqfVM+8jBiQNIlQr3iGfGfH
P86Lx3GHDfR9JDxt9N38np68wLp/dgM3Xb25uzTJwmXI2UApF69v8vJj7FXD2Hku
sse/Dmutn2DvP0JTxZdx0gPB0drZYijqdh744a9pde/gqPive9akHOGGTkItbBwU
96NITXCQbZA5xA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:54 2025 by rpki-client