Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File: n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier: 8baz9rmne/2cCAO4TaAxwXEtMTclSXddZp/0VVL9AY8=
Subject key identifier: 31:A7:04:0F:B0:E3:C0:73:85:B8:9C:20:86:62:84:D0:3C:77:9A:DF
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 0199221E602BB5CD1A6EFEFB4A043D06A23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number: 0BF5
Signing time: Sun 07 Sep 2025 03:00:39 +0000
Manifest this update: Sun 07 Sep 2025 03:00:39 +0000
Manifest next update: Mon 08 Sep 2025 03:00:39 +0000
Files and hashes: 1: 1-jitS6EpXiqLjoTy0y90wIH72rI.roa (hash: Rfg5nTBCaEYBRoN4EImwETKxmFJYdYpWUORSCCGtVf4=)
2: CoX1lhKeqnywoZzkBVdeBK0K-8E.roa (hash: UeFCTUO9sjJL5Z6FG4W0m09+58Inz20WQtlj2knxqFc=)
3: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: Xq/NIbcupQ8VrwrR1sqsq70mjGdxu05yCP7MhXpStRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:60:2b:b5:cd:1a:6e:fe:fb:4a:04:3d:06:a2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Sep 7 03:00:39 2025 GMT
Not After : Sep 8 03:00:39 2025 GMT
Subject: CN=31a7040fb0e3c07385b89c20866284d03c779adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:15:ee:b5:da:a9:07:ec:c6:1e:15:be:46:
cd:1e:16:9a:48:f4:4c:92:45:17:1b:5a:e9:97:19:
b5:1d:dc:b7:96:f7:32:98:f7:a2:1e:d9:e7:13:7c:
07:20:d7:d4:e3:b7:59:e4:4d:a9:23:71:78:72:ca:
ae:40:bb:bd:f3:bc:9d:c8:93:5e:b9:32:0a:d6:68:
16:ed:7f:b9:a8:77:40:0b:05:0a:1a:cc:eb:64:b3:
1b:9b:c3:b0:18:93:bd:eb:59:bb:92:85:dc:03:0b:
ff:e7:b2:25:7a:d7:ca:0a:47:dd:00:c6:02:52:ec:
cc:0c:d6:85:1a:0d:d6:e6:4d:ce:45:50:eb:43:fa:
fc:89:40:dd:b3:35:08:9a:59:b9:5f:71:aa:d1:c5:
87:bc:f5:d5:cf:d5:5b:58:f3:c4:d6:bb:d0:89:27:
6e:fe:19:4c:47:35:d8:ea:ff:37:63:cf:cd:d4:a8:
e1:02:fe:67:a4:79:a1:a3:c2:ee:ab:b0:47:64:0b:
35:1d:70:66:d3:57:ea:c4:92:5a:64:2b:2c:e2:1f:
54:08:60:e5:11:b0:e5:60:b5:32:94:fb:fa:26:c2:
73:27:af:64:04:13:46:51:9f:1e:5b:a3:fd:66:88:
a5:54:57:04:d0:ad:71:b1:13:65:29:54:00:44:32:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:04:0F:B0:E3:C0:73:85:B8:9C:20:86:62:84:D0:3C:77:9A:DF
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ac:fe:f3:19:7f:aa:80:1b:04:ca:65:9f:66:21:ed:83:d6:
5f:53:14:2e:d1:ed:96:b0:78:c3:de:32:b5:65:d5:cd:ad:31:
54:58:62:7e:0c:a3:cd:eb:d3:6f:f2:1d:52:70:90:31:4e:74:
2b:23:01:38:4b:8c:3e:1a:d5:33:c1:a2:88:7a:70:6d:b2:cd:
4e:bc:4b:a7:2a:1a:2b:7b:d6:a4:e1:c5:7f:a4:5c:d0:c4:88:
88:25:30:ae:07:68:eb:0e:e4:b5:e8:ab:4c:eb:9e:fa:20:cc:
a1:30:e2:34:c4:64:e9:9b:7b:e6:42:0e:7b:1d:52:a1:53:6b:
f8:33:3a:7d:ed:31:00:ec:7c:d5:2c:86:75:e4:25:29:fa:8d:
b9:68:a1:08:65:13:35:a9:d0:d0:a4:ad:ba:f1:68:a4:24:19:
f5:21:d6:00:98:65:cc:20:6c:d3:5d:db:a0:a5:65:12:ae:6b:
46:bf:a5:8a:8b:84:17:9c:8e:09:4b:37:49:0f:6b:ae:0d:9c:
15:a3:6b:cc:26:a2:0c:a7:1e:a5:fd:5f:e0:66:43:fe:ba:1f:
31:ef:44:22:88:85:ad:11:88:6b:11:f4:78:0a:db:97:03:48:
b4:4e:08:25:a6:43:95:88:65:72:34:42:31:fe:5c:23:40:4b:
8d:29:1c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:13 2025 by rpki-client