Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier: vyfWga106XABVSHDEMle5ihNSgOx9dw6l9A572nDFqQ=
Subject key identifier: 2B:A1:5E:48:BD:FA:4C:6F:28:D2:C4:0A:35:5A:4D:5C:6E:03:F7:DE
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 0198499BF80794CB9B430B7BDEBBDA910A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number: 0D8B
Signing time: Sun 27 Jul 2025 02:00:15 +0000
Manifest this update: Sun 27 Jul 2025 02:00:15 +0000
Manifest next update: Mon 28 Jul 2025 02:00:15 +0000
Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: JQx8OneqEx4djOX/w1abi0NicDeTQ9o1B9J2co3ql2E=)
2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f8:07:94:cb:9b:43:0b:7b:de:bb:da:91:0a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Jul 27 02:00:15 2025 GMT
Not After : Jul 28 02:00:15 2025 GMT
Subject: CN=2ba15e48bdfa4c6f28d2c40a355a4d5c6e03f7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:e7:88:5b:a3:96:49:cb:2f:89:0f:3d:a9:
20:e0:98:27:9e:f5:6b:22:52:8a:51:01:81:56:2b:
c3:f7:17:f7:5d:fb:26:78:2b:ec:c0:87:7a:f0:12:
98:cd:f5:d8:64:e2:92:75:0c:59:05:aa:60:8d:6c:
3c:01:fe:1d:ca:1e:1b:b1:f6:e5:19:6e:a2:55:f1:
3f:90:52:3d:b3:1f:a4:60:b4:44:6d:6d:1a:74:c8:
88:ff:f5:60:03:98:2b:36:bc:de:24:25:f8:c0:91:
a6:87:fb:9a:26:2e:cc:2a:07:03:6a:39:38:c2:39:
c5:a7:37:41:be:4a:8b:8f:ee:f2:e6:f5:0d:4c:0d:
09:40:80:a7:6c:ad:83:5c:be:56:26:77:a5:d3:ce:
eb:2d:13:a4:64:50:5f:c4:27:8a:1b:5a:5c:c9:37:
9f:cb:f1:f7:bf:f9:07:19:3f:3b:69:be:2f:7b:b0:
35:9e:a5:05:48:0b:8e:c9:a1:77:fb:cc:71:4a:52:
72:d7:e3:64:38:03:5d:fb:83:45:5f:e2:a7:76:00:
39:be:af:86:c4:fd:7e:f1:07:e7:2b:8f:ea:63:0e:
be:c9:a1:10:eb:a6:4c:8a:ed:ee:20:77:e5:78:7b:
c9:bf:98:84:d6:7a:f7:4f:1d:66:f6:22:aa:34:68:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:5E:48:BD:FA:4C:6F:28:D2:C4:0A:35:5A:4D:5C:6E:03:F7:DE
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:56:20:dc:9f:01:a9:88:30:69:96:28:b7:b7:a7:95:55:eb:
ea:00:05:a5:81:47:84:83:45:46:10:b3:91:82:97:0c:56:62:
fc:a8:79:c7:cc:db:c0:e5:b3:56:85:f8:a3:55:5f:74:9b:e0:
2e:2b:1b:bf:82:55:04:04:e8:4c:e7:5f:94:15:a2:86:8b:f9:
0d:18:56:b8:26:d1:83:1c:dd:2a:9d:8e:d7:11:b1:e1:b5:eb:
f4:5d:32:4c:38:fa:bd:08:da:96:81:68:64:18:0f:3d:dc:b1:
0d:7c:88:6d:9f:14:02:44:2e:fc:ee:11:67:e5:12:a2:51:4f:
e6:5d:57:d9:5a:30:6c:53:72:63:de:82:7a:b4:74:d8:b1:36:
61:54:49:af:99:c4:73:4a:8c:3d:d0:92:1a:df:fb:98:2b:03:
35:9c:52:b3:53:90:75:2c:18:9d:9a:73:36:9d:90:a6:eb:58:
a8:53:8a:46:61:7d:fe:b2:b3:39:ea:a0:5e:74:94:93:f7:d9:
7e:80:39:e2:d2:b9:71:96:d2:dd:2e:c6:44:c8:c8:35:dc:9f:
a3:9f:82:a3:c2:e7:73:10:64:3c:e4:7d:15:06:77:d3:38:c3:
0f:db:4d:07:7e:51:63:7f:25:a1:70:e8:d8:0f:4a:34:2a:de:
d7:f5:dd:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJm/gHlMubQwt73rvakQpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4
NGY2ZGMwHhcNMjUwNzI3MDIwMDE1WhcNMjUwNzI4MDIwMDE1WjAzMTEwLwYDVQQD
EygyYmExNWU0OGJkZmE0YzZmMjhkMmM0MGEzNTVhNGQ1YzZlMDNmN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaHniFujlknLL4kPPakg4JgnnvVr
IlKKUQGBVivD9xf3XfsmeCvswId68BKYzfXYZOKSdQxZBapgjWw8Af4dyh4bsfbl
GW6iVfE/kFI9sx+kYLREbW0adMiI//VgA5grNrzeJCX4wJGmh/uaJi7MKgcDajk4
wjnFpzdBvkqLj+7y5vUNTA0JQICnbK2DXL5WJnel087rLROkZFBfxCeKG1pcyTef
y/H3v/kHGT87ab4ve7A1nqUFSAuOyaF3+8xxSlJy1+NkOANd+4NFX+KndgA5vq+G
xP1+8QfnK4/qYw6+yaEQ66ZMiu3uIHfleHvJv5iE1nr3Tx1m9iKqNGiUJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuhXki9+kxvKNLECjVaTVxuA/feMB8GA1UdIwQY
MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt
MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0
LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlYg3J8B
qYgwaZYot7enlVXr6gAFpYFHhINFRhCzkYKXDFZi/Kh5x8zbwOWzVoX4o1VfdJvg
Lisbv4JVBAToTOdflBWihov5DRhWuCbRgxzdKp2O1xGx4bXr9F0yTDj6vQjaloFo
ZBgPPdyxDXyIbZ8UAkQu/O4RZ+USolFP5l1X2VowbFNyY96CerR02LE2YVRJr5nE
c0qMPdCSGt/7mCsDNZxSs1OQdSwYnZpzNp2QputYqFOKRmF9/rKzOeqgXnSUk/fZ
foA54tK5cZbS3S7GRMjINdyfo5+Co8LncxBkPOR9FQZ30zjDD9tNB35RY38loXDo
2A9KNCre1/Xdgg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:45:31 2025 by rpki-client