Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier: lQweF1R4UtGxDGVdhgR9plWoSRwbJx6d1MoVtVQYFx8=
Subject key identifier: C1:56:F5:71:11:2A:85:0F:7B:36:B0:A2:CC:1E:AD:67:69:BE:AC:7C
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 0199FC216DEBE4B20A38E27ACC3711EAB337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number: 0E6C
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: 99WlHDSpbLYaRMWhzAA2sblDP0Cxje8XBOlytkXbORM=)
2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6d:eb:e4:b2:0a:38:e2:7a:cc:37:11:ea:b3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=c156f571112a850f7b36b0a2cc1ead6769beac7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:4e:7c:37:8a:95:62:2c:0d:12:95:42:17:
99:cc:62:c1:37:15:ce:e7:38:e8:29:ee:ef:ce:59:
d6:dc:ba:1a:11:c3:79:57:25:9d:c6:d9:f1:d9:20:
dd:1b:10:0d:0a:c5:ae:49:31:91:a6:67:42:06:2c:
84:22:b8:a7:c9:d8:84:09:13:ff:b5:79:9e:0e:a6:
bc:55:e1:90:6b:d1:a6:51:08:45:5f:29:3c:81:22:
1b:62:2d:9a:19:f7:77:21:5e:ba:fa:c5:a5:b9:29:
36:62:86:13:ae:fb:eb:19:c9:3d:c0:15:1c:8a:d4:
13:f0:d1:75:a6:7d:5f:f9:a2:61:64:7d:e7:33:19:
a0:cf:ce:b0:8d:32:8d:4e:c3:bf:c2:c1:44:5f:82:
2a:e0:a0:c7:48:a6:47:77:83:57:31:22:f3:75:b6:
b7:65:e2:80:0c:95:a5:5a:5f:97:d7:6e:9b:b3:96:
76:ce:7b:b7:8b:70:6d:04:0b:27:ec:8a:80:21:0d:
32:5a:81:66:f1:65:94:41:7c:8e:50:61:a5:f1:5b:
56:64:14:b9:ed:38:95:3e:42:e6:98:8f:d1:7f:d9:
a6:2c:b7:d9:f4:39:80:96:d3:fb:6d:db:59:de:de:
d8:3e:d8:74:10:d3:66:a6:62:8c:2a:ae:81:dc:8e:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:56:F5:71:11:2A:85:0F:7B:36:B0:A2:CC:1E:AD:67:69:BE:AC:7C
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bf:a8:7a:eb:b3:20:18:09:55:05:63:b9:9f:db:95:f4:c2:
58:e2:0d:98:71:11:65:aa:31:ba:15:4d:a9:42:0d:42:f6:cd:
a5:a8:97:5f:da:53:68:d3:82:12:e1:0a:0f:ab:72:16:65:95:
f1:8e:d9:b8:b3:2b:92:f0:9f:4d:30:8a:9d:07:27:78:d3:41:
1b:b0:9a:a0:82:d3:c3:f8:e3:ee:ad:87:52:b4:0a:1b:5d:63:
8c:7b:73:76:6b:75:6e:37:bf:38:a4:95:2d:57:56:7c:5d:e8:
23:24:21:94:c6:bd:dd:89:94:60:b4:88:ea:d5:b0:19:67:7e:
05:1d:92:59:42:ae:a6:b3:69:c5:64:84:a0:4d:7a:8b:c3:30:
35:b2:c4:32:a2:8d:89:b8:0a:a0:ed:86:1e:5e:3f:3a:91:22:
df:7b:ae:6a:9e:13:d0:59:d8:46:d1:de:44:94:62:96:bc:f4:
01:07:a7:2a:96:eb:81:b3:67:2c:7c:e1:7d:6a:f2:0f:53:bc:
82:18:b1:31:90:17:91:42:e2:ad:f4:80:b2:24:b6:1d:d0:5b:
64:a2:df:59:c7:32:71:30:55:10:4d:ef:9e:6a:23:0e:42:8b:
98:c3:6f:74:56:bb:f8:a1:71:71:14:3c:78:62:25:c5:be:ad:
e9:f2:0d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:07 2025 by rpki-client