Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
File: a15HDpDV693Mqpz2uyLoneDZ8gc.mft (raw, json)
Hash identifier: 4IF4fID2hXTK6ArC5wk/MAvHqiOoIQuCOPv2txJk+rY=
Subject key identifier: 65:20:6D:56:67:81:81:01:67:B7:97:D3:4C:35:62:6C:71:04:1A:18
Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
Certificate issuer: /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Certificate serial: 019A706E2AE90684C1AC155E031B0730FF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
Manifest number: 0D5B
Signing time: Tue 11 Nov 2025 01:00:59 +0000
Manifest this update: Tue 11 Nov 2025 01:00:59 +0000
Manifest next update: Wed 12 Nov 2025 01:00:59 +0000
Files and hashes: 1: IpPxqrkAJLVsXHeB04cvVHAP5Fg.roa (hash: VtX3ApkZgzYiR7CYiCSZq34MU+2YZHhoSAVs9vYdqbA=)
2: a15HDpDV693Mqpz2uyLoneDZ8gc.crl (hash: omfYOCnWn19Y84j6G+PeBIzonIf6zK3/LUdIh/nx5vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:2a:e9:06:84:c1:ac:15:5e:03:1b:07:30:ff:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Validity
Not Before: Nov 11 01:00:59 2025 GMT
Not After : Nov 12 01:00:59 2025 GMT
Subject: CN=65206d566781810167b797d34c35626c71041a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:36:98:68:bb:b1:cc:e0:fb:26:d8:45:e3:
01:db:09:60:54:7a:98:28:aa:d9:4a:7b:f4:86:77:
04:12:e5:89:0f:cc:0c:43:f6:95:8e:2a:62:01:7c:
67:a4:60:4b:c3:85:27:b7:f9:c8:8a:06:d0:c6:41:
68:d9:53:da:e2:8a:ba:de:84:38:9b:05:bb:e9:2a:
2c:2c:04:17:8d:96:57:26:b5:6b:46:3d:54:c3:1b:
95:39:f8:db:e4:3a:ff:ad:ec:6c:e4:3d:ec:ce:e7:
60:2b:5c:9b:71:d0:63:43:02:fa:cd:41:c3:da:2f:
b6:99:96:99:a0:c2:bf:13:fa:f2:a9:84:19:9f:13:
d4:f1:55:e4:5b:6e:fd:d1:48:10:7a:b5:1a:a1:c7:
96:0d:fc:97:5f:33:3a:e1:3f:91:7b:fd:f3:bf:8c:
d2:cc:12:1a:f7:60:13:45:ba:4d:16:02:3a:e8:f2:
ca:37:bd:29:eb:7b:a6:86:f2:07:cc:16:39:84:b3:
d6:e0:b7:00:70:2a:61:98:09:0a:b7:c8:44:9b:46:
c5:de:9d:c2:2d:ed:34:34:6b:b5:11:41:bc:03:36:
d5:72:d5:be:e2:de:9c:f8:32:4d:6f:df:d9:59:9e:
ae:f1:5a:a3:96:cd:0a:55:28:b7:30:43:02:4d:2c:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:20:6D:56:67:81:81:01:67:B7:97:D3:4C:35:62:6C:71:04:1A:18
X509v3 Authority Key Identifier:
keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:98:46:eb:12:d6:3e:a6:83:80:e8:31:28:97:b3:44:8c:0d:
d0:05:c2:9e:19:12:10:e5:d1:82:a3:16:84:e1:97:9a:e7:03:
d8:26:66:0c:7e:fe:e5:67:3d:99:6c:79:c5:0b:cd:8f:34:ca:
99:1a:26:bb:2c:12:8a:3b:e6:7f:09:a0:a7:bd:40:b4:e1:0a:
05:05:2f:c1:b1:1d:8c:78:0e:6e:d9:7c:76:3b:75:f1:e8:19:
a7:bc:84:4e:24:e2:e2:b9:87:3a:5d:7c:bd:14:75:32:12:67:
07:df:78:22:3d:af:a9:97:50:bf:25:a6:11:4a:ac:86:1c:f8:
73:6a:a6:76:09:9a:5f:cc:74:b9:1d:0b:83:39:84:8e:7b:85:
5d:ee:fe:6f:92:e0:68:09:2f:12:70:33:79:a0:2a:81:90:b7:
b5:72:c6:5b:d6:aa:03:3f:56:78:0b:4e:05:45:10:82:23:2e:
d5:4b:f7:5c:27:af:5c:8f:e6:f6:9c:82:9d:11:ed:b3:7d:f8:
5a:ab:cc:fd:d7:d7:a8:36:b3:79:a9:2c:b0:52:18:05:88:27:
2f:c7:57:1e:cd:9a:94:d9:cd:ce:f5:a4:19:45:a7:04:72:87:
b0:b2:30:f5:ca:90:17:9a:f5:cd:e9:09:bc:58:c4:c4:ae:cd:
2b:52:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:48 2025 by rpki-client