Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: xg90dk+sBpXY45eTBNqdu4sjyWBHkec3kC9+hTM9EQk=
Subject key identifier: 0D:86:DB:6D:A1:E4:1E:22:7B:24:5D:28:FF:CB:C4:5D:C6:2A:49:97
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 019A209B35E1901B739DA5D99D7AD591B395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 0777
Signing time: Sun 26 Oct 2025 13:00:34 +0000
Manifest this update: Sun 26 Oct 2025 13:00:34 +0000
Manifest next update: Mon 27 Oct 2025 13:00:34 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: R4wp6dWfo7VBYSPiD6CZLKdBd/HjqaX+Z/OLNOJyysI=)
2: qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa (hash: Wp90B7y4b1beWFho9S7pJxCTTLLhfUdptb3Ax7iQwmA=)
3: ygl5P_7lTFnzJgirLplRNSI58XI.roa (hash: cR+NYAbF+5iFZxCdzFXgCBDiu3chwIso0AL6/JnYtEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:35:e1:90:1b:73:9d:a5:d9:9d:7a:d5:91:b3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Oct 26 13:00:34 2025 GMT
Not After : Oct 27 13:00:34 2025 GMT
Subject: CN=0d86db6da1e41e227b245d28ffcbc45dc62a4997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:dd:03:dc:16:d0:9c:bf:aa:f9:8f:0a:64:
24:3e:14:43:74:f0:b7:fe:14:7e:8b:33:a8:24:89:
f4:70:77:99:dd:53:c0:91:d5:bc:5d:ea:78:73:b6:
d5:69:67:01:68:85:0b:ba:5f:21:f1:17:6c:49:c6:
89:c8:fd:30:00:78:12:c5:0e:c5:d4:07:91:a3:64:
aa:b8:d1:aa:68:f5:96:f4:fa:ef:df:72:23:2b:e3:
5d:4b:53:5f:a9:5c:6a:57:b8:b8:00:0a:88:e0:b1:
32:55:3e:87:97:72:be:47:c4:cf:04:54:1c:c6:0c:
85:3e:14:0d:5f:08:32:01:70:09:3a:ea:be:08:1c:
e6:34:d1:58:f2:e0:99:c8:20:0a:49:92:af:40:99:
6e:21:47:c7:3a:41:21:8c:f7:f3:d8:52:7b:7f:80:
d5:a5:20:cb:0c:c4:3f:81:08:6f:9a:00:57:49:17:
39:2c:32:a1:57:d7:c4:53:55:7e:36:62:c7:2e:c9:
b8:47:1f:41:d2:f2:91:86:5b:53:31:48:81:2b:5b:
58:b3:ed:74:86:67:d4:76:23:15:48:dc:48:7a:bc:
ce:40:63:8b:a9:ce:31:33:0a:aa:e3:8c:b0:c8:da:
5a:7b:bf:85:8d:42:c7:61:ea:ec:dd:d3:76:0e:c1:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:86:DB:6D:A1:E4:1E:22:7B:24:5D:28:FF:CB:C4:5D:C6:2A:49:97
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cb:34:9f:81:13:20:4f:a0:1a:0d:c3:ab:1f:e2:fa:ec:96:
c0:25:4e:cd:6b:9f:87:96:ab:22:b0:98:12:14:01:4b:c0:06:
f1:49:89:1f:fb:85:bc:6c:43:ba:92:be:b1:5f:80:1d:95:1d:
6c:1b:92:19:77:60:8e:f5:bc:30:c7:48:11:08:9c:3c:bd:d1:
c4:b1:9e:30:20:67:b4:0b:c4:d9:9e:76:e1:a1:a3:0d:13:13:
04:9f:9b:77:71:43:c8:dc:e9:57:fb:66:c2:1c:e0:75:3e:ee:
38:f2:02:cb:fc:c7:ac:a1:7f:3b:e7:33:50:da:dd:73:f1:fa:
88:73:74:79:f4:b0:a9:e7:c0:04:62:c1:46:f9:85:b0:2f:f4:
38:57:14:39:71:c7:af:24:c3:7c:20:5c:f7:4d:fa:90:94:cb:
41:99:e2:67:b2:d5:6c:cb:65:ca:52:ed:b1:21:51:b1:98:63:
7d:84:72:0c:e4:58:48:0d:18:a9:df:05:0d:b3:7f:27:3c:85:
11:11:aa:63:20:db:9c:11:12:79:59:6a:3f:53:74:b7:0f:3c:
db:e0:8b:22:70:0a:58:b4:3e:e4:69:e9:3f:bd:c0:17:52:5d:
64:68:28:65:8f:48:5b:10:e8:aa:a2:4a:08:f2:58:18:cd:0c:
c1:b4:3e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:16 2025 by rpki-client