Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: BfDqRuuIhjn6/bRIGrhC1dAn+aG28K9JQI7dO5k90rc=
Subject key identifier: B6:80:83:8A:24:12:04:F8:99:C8:8D:BA:1C:B4:B0:BE:44:13:E1:E1
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 0199FCC6587E04D641EEA133F129B748B5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 15BC
Signing time: Sun 19 Oct 2025 14:01:21 +0000
Manifest this update: Sun 19 Oct 2025 14:01:21 +0000
Manifest next update: Mon 20 Oct 2025 14:01:21 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: elg+PPtZF/WjHmaGJJpZxmJoarNDGpOts4ic1fUmQLE=)
2: n6mO0jwfMCGtBTJz4z0BBFhaaaw.roa (hash: depvn6FAlXY00NO5eAYz1KXbUInLhBp+Jz+PGCqafeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:58:7e:04:d6:41:ee:a1:33:f1:29:b7:48:b5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Oct 19 14:01:21 2025 GMT
Not After : Oct 20 14:01:21 2025 GMT
Subject: CN=b680838a241204f899c88dba1cb4b0be4413e1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:02:5e:ea:b7:14:63:34:21:ee:e9:8d:bf:
4a:44:38:5e:ae:24:c4:57:cb:e8:39:71:d5:7e:d9:
f4:0e:a0:b4:9d:95:64:0a:72:9c:6b:64:65:97:a4:
48:e7:07:af:6c:2f:89:9d:e8:3e:bf:be:be:a9:f0:
ac:33:eb:d4:b7:c0:4a:54:54:84:0e:0b:1a:b0:3e:
f8:0d:88:f4:9f:3e:ce:36:9d:4c:30:0c:b1:12:67:
ab:08:80:8b:ea:a0:ea:13:ec:f2:75:c8:36:d4:6f:
16:28:b3:3a:eb:c0:00:95:7c:28:9c:51:13:75:84:
95:f0:16:a2:14:f2:0a:b6:22:31:51:b0:52:a1:e8:
5a:51:82:43:bb:d9:c7:68:be:a3:11:1c:e6:f4:7a:
d0:1b:7f:82:b6:83:96:be:4d:3c:6f:38:98:00:c8:
70:a8:07:6d:3a:0f:e5:f6:46:c5:a8:3a:02:6e:7c:
db:03:89:37:e0:97:8f:66:30:a6:9a:d3:b5:95:dd:
6f:1c:62:a7:97:4c:2e:75:e2:df:19:c0:ab:1c:86:
f3:bf:9a:f0:4e:a8:98:3c:36:0b:db:ec:81:c5:1d:
ba:5e:93:0b:4d:ee:84:5d:dd:5e:90:da:08:a1:dc:
da:2e:7d:77:dc:6d:1f:1a:03:26:40:d5:e7:8e:35:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:83:8A:24:12:04:F8:99:C8:8D:BA:1C:B4:B0:BE:44:13:E1:E1
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:51:4c:e1:55:5c:95:5c:ab:be:50:20:57:02:ac:1e:99:e7:
52:83:39:9a:f3:5b:54:4e:c3:16:34:82:f4:b6:8c:1f:06:77:
03:7c:18:a4:ce:87:81:dc:48:3e:ab:75:0c:7b:f2:f9:ec:ff:
20:16:ad:bd:db:82:49:ff:c7:ba:4c:03:9d:89:f3:5b:ee:63:
f3:63:01:da:f8:a1:2c:17:02:45:0c:59:4e:6c:7f:ae:c3:e7:
f7:3b:53:88:20:83:36:b5:90:fb:01:12:e5:3b:5f:18:5d:cf:
07:81:1c:68:6e:60:03:ac:96:97:e4:d6:06:f0:3e:17:e4:ee:
ba:fb:69:cf:24:0f:f8:f7:ad:64:9f:66:80:66:51:72:9a:c8:
54:58:f9:ee:45:69:0d:24:c4:d1:cd:d6:d4:3d:69:17:d6:b0:
cc:e2:05:98:f3:f8:30:cc:ae:5e:77:36:9d:3d:b4:ba:88:5f:
58:46:79:27:6c:22:19:74:65:56:0a:1f:c3:99:68:e2:59:30:
4e:76:a6:fc:2f:0f:c4:51:09:07:58:d9:13:d1:1b:bd:7f:56:
7f:3a:20:ca:75:8c:f2:ad:6a:61:64:e6:ee:85:66:fd:64:59:
22:73:c9:9b:76:0e:84:e7:0e:a1:99:a2:e2:96:27:b9:3d:46:
94:ba:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:02 2025 by rpki-client