Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: BNb8NTUeBDxNSNpLz9rSaG2EN9d/n4Ak3NJiiG7GZkY=
Subject key identifier: BE:D0:ED:E5:BC:8F:39:BC:96:2F:50:10:64:85:A4:D0:41:CA:D3:2F
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 019A1EACFB64224D449EB265B3FD6C33C979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0DFE
Signing time: Sun 26 Oct 2025 04:00:44 +0000
Manifest this update: Sun 26 Oct 2025 04:00:44 +0000
Manifest next update: Mon 27 Oct 2025 04:00:44 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: 9BkGU2RB3Y39zqV7R2hqA64JSRH/4ebSlbZm/k3FiVU=)
2: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
3: jC5EQ2pE1hoJnWUa8__n2F6U0jU.roa (hash: VaWxumOUwy/KUDWIkuUcnIO+udOZdz3MVrVO9LN7HhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:fb:64:22:4d:44:9e:b2:65:b3:fd:6c:33:c9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Oct 26 04:00:44 2025 GMT
Not After : Oct 27 04:00:44 2025 GMT
Subject: CN=bed0ede5bc8f39bc962f50106485a4d041cad32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:b9:22:70:f8:e8:eb:a3:eb:8f:e3:ed:88:
ce:51:5d:10:4b:af:44:a8:56:10:91:7c:4b:0c:e8:
b1:0e:b9:29:78:53:bd:88:e4:5e:18:66:6b:96:ba:
c8:27:ca:13:5d:f2:ec:36:21:07:cd:d1:2e:00:7b:
2e:b6:32:b4:92:0a:4f:55:a7:a4:3c:18:14:01:91:
f9:d4:6c:12:f4:46:c4:13:03:7e:8c:bb:77:2b:f0:
ca:dd:c1:84:9f:f4:fd:7c:ff:e1:99:9d:4f:91:37:
00:88:b9:50:a1:f2:46:44:f1:e9:22:fb:8a:c3:f9:
90:6e:b5:eb:af:fc:06:52:47:7b:f6:13:d0:3c:0f:
db:e9:04:c9:ec:46:a1:23:51:4b:06:63:d8:c5:f3:
cf:07:7d:ef:e1:c9:c9:1e:ca:b5:7a:31:6b:b2:aa:
3f:0b:98:e7:e3:f2:f7:ed:79:03:33:aa:db:38:fe:
58:85:8c:cb:b8:68:14:d8:ee:3d:6b:bd:2e:af:e9:
5b:95:47:f3:c7:bd:3a:91:a1:c4:18:ec:4b:53:c4:
b8:45:d1:e3:32:52:1f:8a:7d:cd:88:a5:d6:56:ff:
cf:9a:6e:a2:b1:a4:18:f7:9e:06:27:c3:77:b8:36:
a0:4b:89:0f:0a:95:2f:f0:a1:3d:3c:56:1f:a4:c5:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D0:ED:E5:BC:8F:39:BC:96:2F:50:10:64:85:A4:D0:41:CA:D3:2F
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bf:e6:a2:b7:8e:c4:b3:d8:c1:65:4c:08:49:27:7e:28:b6:
2c:47:a3:4a:e6:8b:b1:89:9e:24:d2:49:17:f8:fe:a6:05:6d:
b1:6b:87:a8:72:66:a6:4c:a3:c0:6b:e4:8b:04:3d:db:c8:f7:
ec:a5:15:2e:a6:04:d9:65:bd:fd:37:6a:a8:e1:f1:59:23:f8:
7c:89:e5:05:28:76:d5:31:f3:56:1d:ee:38:2b:6a:ba:7f:0e:
69:bb:90:74:40:5b:6d:65:fc:73:85:97:57:01:24:61:8a:ea:
11:00:a1:30:cb:8c:c6:c8:59:64:94:8d:1c:18:b5:57:6c:71:
91:2b:52:72:ba:42:0b:7e:23:14:56:da:57:5d:29:6c:3d:1f:
ad:e2:81:80:70:48:ed:a0:ad:28:7d:38:b4:57:99:73:b3:a1:
cd:b1:9f:6f:3a:93:61:0d:78:98:cf:5d:85:6e:80:4d:d6:94:
79:40:e9:8f:49:e0:04:3e:db:df:9b:19:ad:d6:a0:72:e5:12:
fd:ed:0d:9d:5e:de:83:8b:7d:a0:33:c9:4e:43:bd:dd:9b:09:
97:60:ff:f1:1c:69:44:22:e0:1c:7b:ee:b6:84:db:bd:9d:18:
b4:4d:de:14:75:9b:a2:29:ac:03:df:c8:a9:f6:36:fd:a4:41:
68:e2:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:10:28 2025 by rpki-client