Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier: SVwUClnesSxq/19G5cHEyqMNjEaG20RZS63xUiY1SgM=
Subject key identifier: 41:3D:28:19:4E:7C:55:14:65:9B:8E:9E:1E:07:5D:53:92:C5:58:4E
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial: 019A1D9A875639C7CF945B71DD15B983B457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number: 0219
Signing time: Sat 25 Oct 2025 23:00:57 +0000
Manifest this update: Sat 25 Oct 2025 23:00:57 +0000
Manifest next update: Sun 26 Oct 2025 23:00:57 +0000
Files and hashes: 1: GLkcEMe4eneYkegJdDsN96p2G5w.roa (hash: a+Y+AIr4ILwMbtFOtGWppkOOeW987wrq4kOZaYCKOMI=)
2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: MxfMI/6OCvbFJ0IhFGh6Ds+NdUawg8vRtJyzZefsEvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:87:56:39:c7:cf:94:5b:71:dd:15:b9:83:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Validity
Not Before: Oct 25 23:00:57 2025 GMT
Not After : Oct 26 23:00:57 2025 GMT
Subject: CN=413d28194e7c5514659b8e9e1e075d5392c5584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:59:c1:61:5c:18:b4:04:99:06:48:d7:0b:
c1:21:e9:3e:a1:2a:ba:fc:3b:d4:af:58:9b:5c:a9:
24:8a:7b:6a:66:41:89:97:8b:64:da:c2:62:8f:d6:
27:2a:d9:c3:0f:43:c3:ad:e4:ce:84:93:0f:d5:77:
05:fd:66:33:3d:ab:4e:19:17:c7:fd:6d:08:58:b7:
ab:30:fe:8b:b7:bf:8b:6c:71:b7:cf:c2:25:4c:07:
20:c4:eb:7a:36:90:dd:0d:73:60:68:61:44:33:67:
47:48:cf:c8:fa:8c:07:c5:07:a0:ba:1d:8e:fb:18:
ee:82:9d:1b:a2:a2:cd:51:b1:e9:f1:2d:26:7d:8e:
08:4f:8d:7f:05:5f:fc:5a:45:3b:03:01:a1:2a:82:
9f:b3:6d:d6:9f:f5:5f:88:e9:ea:f2:25:80:dd:34:
ff:8e:1f:da:7a:69:b8:04:e3:47:44:22:10:50:84:
fb:ae:2d:d6:84:32:93:0c:1a:b1:13:0a:48:99:95:
56:43:b9:29:46:2f:6a:91:b4:bc:9c:9e:f1:80:9d:
8c:55:99:89:c7:c6:38:0b:2c:5d:7a:cb:3b:d7:28:
68:e8:d7:e5:72:53:b5:1d:78:44:d9:c8:ae:83:60:
59:ae:7b:03:bb:7c:2d:41:fd:e3:78:7f:e1:2c:0a:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3D:28:19:4E:7C:55:14:65:9B:8E:9E:1E:07:5D:53:92:C5:58:4E
X509v3 Authority Key Identifier:
keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:eb:8d:9e:a4:57:64:a3:be:6d:b4:8e:e8:e5:e4:3f:29:49:
b0:04:1c:fa:af:dc:a3:60:a2:1f:19:82:91:e5:48:47:a3:69:
82:3b:f4:fe:79:36:f9:6a:95:e8:00:71:48:32:d4:8b:83:8c:
87:4f:e0:e8:a4:ae:12:5a:19:e0:91:79:f6:08:ce:72:2c:99:
b8:ea:c2:84:f5:df:3a:f2:07:24:03:89:42:a7:e9:ee:c5:58:
27:68:08:3e:6e:29:8f:b4:7a:df:c5:33:bb:0d:ab:e0:77:79:
16:06:4b:cd:14:48:a2:d7:96:c1:1d:8b:cd:a4:01:bf:d4:a2:
04:06:c5:9e:7b:9f:1d:f8:1c:76:1f:48:a6:5b:37:cd:ce:95:
ff:1b:3b:c5:d2:c2:17:a2:4c:69:d2:2c:bd:69:97:17:53:80:
4b:ec:40:5e:48:e3:86:8e:62:9e:00:21:15:98:d9:98:9c:f8:
e4:c6:42:f2:a7:7c:e7:3c:47:e8:4c:27:57:43:85:1e:9a:6d:
b3:74:e9:87:66:88:c0:86:b9:e5:9b:43:d2:85:b8:10:b7:7c:
ea:00:28:86:c9:66:f7:c4:8c:0f:cd:01:1b:c2:1c:a7:5b:79:
8e:f8:41:42:b7:66:49:a6:06:bf:fd:b7:37:5d:76:f3:1d:79:
c6:8c:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:34:01 2025 by rpki-client