Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: TRTNa7v1XP1PtYfsqtEDo9U0kuUqs4zB8cWvTZ3qlLo=
Subject key identifier: 15:A5:B1:78:E8:8A:68:1D:82:88:A5:F7:7E:CF:CB:34:D6:C0:83:07
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 019A7293F10B597264B3318E700929D8F470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:01:29 +0000
Manifest this update: Tue 11 Nov 2025 11:01:29 +0000
Manifest next update: Wed 12 Nov 2025 11:01:29 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: hPlF7X94rNYr+pSOnkesKMUxkL8lV3p7KxLBFKj4KGU=)
2: oP_NZCckorWlK08uLtq1ZhjEmNw.roa (hash: TmGRTgVUIXQXGjYy9QqbbgsvjEEm+TAtLS3xKb+xEyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f1:0b:59:72:64:b3:31:8e:70:09:29:d8:f4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Nov 11 11:01:29 2025 GMT
Not After : Nov 12 11:01:29 2025 GMT
Subject: CN=15a5b178e88a681d8288a5f77ecfcb34d6c08307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:c6:45:39:6f:6e:ea:ec:d4:f4:73:7c:3a:
3c:71:26:47:c2:2e:9f:f2:28:18:0d:a0:72:c0:6a:
63:56:16:c7:ae:df:5a:82:fc:b3:a6:cf:15:ca:3b:
87:c6:46:6b:85:71:02:27:ed:1a:ca:4a:d7:66:03:
7c:2e:d8:28:69:81:38:db:6f:5f:e3:cf:87:32:c3:
ef:3b:38:be:5f:88:b4:4b:90:3d:ba:83:7d:0d:ba:
a5:56:7c:d0:78:41:cb:f7:72:f3:3a:b0:a3:22:cb:
77:08:2d:66:88:54:64:b9:d8:f7:68:e0:a1:25:a7:
db:c5:75:4a:95:8a:14:ff:63:b8:ad:45:56:ad:f0:
90:33:95:2c:81:a6:5c:98:63:8d:17:8f:0a:3b:d8:
61:f1:24:64:8e:b9:47:61:2b:0e:c5:18:e7:3e:76:
91:a5:10:f2:ba:a7:09:54:13:8d:4b:9a:36:02:7e:
55:5a:bd:36:e8:1c:39:40:9a:86:d9:9e:a3:26:19:
f9:e3:f0:c2:c8:9d:46:54:b3:d5:32:7a:24:2b:aa:
36:f2:2c:54:20:ac:a6:fe:0f:c5:77:74:a7:bb:40:
c6:16:87:e2:84:30:05:d5:dc:27:58:e9:96:e4:0a:
81:78:94:a8:41:fc:84:03:e0:9e:b6:55:25:3a:1c:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:B1:78:E8:8A:68:1D:82:88:A5:F7:7E:CF:CB:34:D6:C0:83:07
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a2:e6:c5:6c:02:b3:c4:44:42:17:66:9d:9b:0d:1d:fe:1d:
cf:ef:00:ef:ee:1d:a1:5f:04:4c:84:56:29:e4:51:ca:42:66:
5f:d5:7b:b1:2d:4b:35:cd:fb:35:1f:51:09:8c:44:08:31:71:
5f:32:f0:56:e1:32:13:06:ec:33:8e:50:72:a0:be:bb:14:eb:
b5:ce:fc:1f:4c:04:4c:98:f2:3b:c9:ee:86:1f:67:c1:9d:6c:
7f:9e:54:eb:41:34:b2:84:c7:2d:97:ec:0c:52:79:42:8e:6b:
57:5e:51:b7:41:a0:79:ee:e2:c5:7a:77:62:b2:fb:63:28:d2:
a8:83:0b:27:eb:92:d0:a8:2c:a3:a6:e4:45:90:a8:50:e4:b6:
9c:98:bc:a8:c5:cc:e7:52:02:2c:d1:4e:7d:c1:02:b0:d6:7e:
a6:f6:17:c4:ec:80:6a:7a:3f:15:ac:29:a0:a0:13:a1:ea:40:
f4:85:2f:86:88:b8:4e:e1:00:cb:70:d3:6d:95:a2:eb:2c:22:
ea:96:d7:eb:8f:88:80:a3:7d:5e:71:a0:e9:d1:73:3b:3d:b9:
ca:88:cc:36:8b:8d:74:3a:17:b1:0d:51:5e:ce:84:de:1e:e5:
bf:25:6b:9f:13:5b:e9:ba:c9:1c:e8:52:d3:14:8f:f8:7e:e3:
90:f0:05:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:16 2025 by rpki-client