Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json)
Hash identifier: Igi4QdGbRyPW7MfiY0bRCHVva4d1aXVDJXOiSCz4Prg=
Subject key identifier: 27:81:81:15:C7:3D:12:C0:E6:81:EC:C6:00:A1:59:E7:FD:E7:D4:3C
Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Certificate serial: 0199FB7CBEBB343968C2A4E4D848476D3FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
Manifest number: 015A
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: AfqWLE/yqpyjh99pOf3sdYsBw8NxsCN55NbLA9BTByU=)
2: paTtElWGmU9hAIEDu_IgYgPtAVs.roa (hash: gF5VuGVggwKtY1Dsuv7xJ4ySU2bi6uUiiENjoaY2rmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:be:bb:34:39:68:c2:a4:e4:d8:48:47:6d:3f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=27818115c73d12c0e681ecc600a159e7fde7d43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:7a:02:27:01:7b:eb:5c:b5:24:54:63:9c:
c9:70:d5:d0:f3:29:c0:94:83:08:c9:be:73:02:cb:
a0:32:48:02:7e:30:8c:03:65:30:55:4a:f8:77:27:
4e:a3:9a:50:48:a0:68:8d:87:e2:cd:bf:1e:2a:11:
76:2d:01:17:09:58:59:93:ba:bf:a0:10:e7:ab:ca:
39:28:b8:58:dc:cf:46:7a:78:09:e5:b8:af:33:a0:
89:68:d4:db:d0:93:fe:9c:84:bd:96:6c:5f:8c:44:
c1:b1:f5:f4:1d:4b:11:5d:45:eb:9f:ba:68:91:10:
28:80:ce:39:6d:3e:df:d2:9e:ee:fb:0e:1f:b3:ab:
18:66:89:e6:9a:86:6a:b3:7e:93:de:08:7b:ee:09:
79:25:b0:f9:77:8c:82:64:a4:9e:f9:27:02:b6:04:
4f:92:d7:da:81:84:8e:aa:d5:fe:f4:ab:15:c1:6a:
be:30:62:6f:51:1e:f2:c6:ae:4f:22:09:e7:2b:ba:
73:4b:ad:46:33:67:15:ea:df:11:68:d6:43:86:9c:
59:d2:45:65:4b:f1:be:80:93:7a:33:8e:7a:0b:20:
ce:09:03:e8:56:d1:be:b3:6e:7d:25:e5:f8:c8:37:
69:8e:5c:08:bd:78:72:c0:9d:d3:e1:4c:0d:71:14:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:81:81:15:C7:3D:12:C0:E6:81:EC:C6:00:A1:59:E7:FD:E7:D4:3C
X509v3 Authority Key Identifier:
keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:24:cc:aa:91:32:6c:33:6f:1e:4b:4a:e5:48:24:6e:ea:f9:
b3:47:e1:b9:21:91:32:37:0e:8a:45:05:89:6e:c7:4e:cf:54:
e4:53:b7:c6:16:41:93:9d:2b:4e:21:36:4e:48:40:11:9f:3a:
65:f2:ad:03:18:3f:25:fa:07:ed:63:e2:10:00:4b:78:4b:54:
45:2b:b1:aa:a4:d3:3c:7e:44:4e:0c:1a:4e:3e:76:92:15:f3:
f7:d2:03:48:4c:b7:21:1d:ee:36:39:73:dc:8d:41:be:6b:51:
f1:29:32:4b:48:4b:c9:21:6f:44:6b:22:87:52:ea:a8:01:21:
8a:04:97:cd:e0:52:ce:19:bc:b4:29:69:e8:a7:0e:fd:05:9d:
dd:93:4c:24:1f:0e:bd:9b:e7:af:13:d9:9a:9d:32:8f:cd:e1:
c6:15:95:4d:4a:f0:70:72:c3:0f:4f:62:43:a5:a7:b1:0a:2d:
23:9d:0e:20:aa:6f:1e:e7:1e:4d:ed:b3:fa:b2:f1:0c:69:c4:
2e:f2:f9:1c:a4:59:d7:13:ad:e4:33:45:8e:26:64:dd:ac:1e:
50:e2:cb:df:ee:4a:76:f9:15:f1:15:40:b7:48:68:81:1a:bf:
ed:b8:2f:cd:83:81:20:6f:9d:8c:e5:c5:f5:1d:e5:56:86:17:
07:fb:7a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:06 2025 by rpki-client