Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: Mlwks1DSEwsihlWa8UiVTuvnovHTzAlgTC7NLx51Z6I=
Subject key identifier: 15:B9:5B:70:F5:AC:53:60:B5:E3:2C:8E:CD:FC:92:9E:35:93:65:9D
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 019A0F3A7197A5D4CAC0EB6D121DB0369CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 16EA
Signing time: Thu 23 Oct 2025 04:01:19 +0000
Manifest this update: Thu 23 Oct 2025 04:01:19 +0000
Manifest next update: Fri 24 Oct 2025 04:01:19 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: PKJP6slVUBeMQcDsrZyOAiOIzdNv9zXzMuFkAIGLqz8=)
2: XITchRD6fktx1wcD-akQf-lrx7Y.roa (hash: n2NJUWPmQKH808gxYEyCrRDNlUi5MnimQGzfm9J+OVg=)
3: gZLT5wUedCmW-PX2sDiQAVKNuT4.roa (hash: Bsg9vymR2URZ/xLntFSerTzkFFeEBNsWgx7gYqyDMPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3a:71:97:a5:d4:ca:c0:eb:6d:12:1d:b0:36:9c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Oct 23 04:01:19 2025 GMT
Not After : Oct 24 04:01:19 2025 GMT
Subject: CN=15b95b70f5ac5360b5e32c8ecdfc929e3593659d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:83:6f:3e:12:67:e3:a2:68:88:5e:fa:a9:
5e:ff:6b:76:07:bf:f0:04:96:96:2d:d5:9a:25:e0:
a2:8e:1d:0f:51:e9:86:77:9e:ca:5b:c1:fc:e2:c7:
29:e5:31:91:2e:ee:d1:45:1e:61:ec:4e:47:bf:f5:
d1:c3:54:fe:c7:0e:db:29:c9:7d:25:30:45:b1:ca:
0b:0c:de:c6:df:e4:71:2f:4d:28:ec:34:28:02:b4:
32:79:3f:eb:45:dc:d3:c9:e9:ef:3b:96:5e:c4:8c:
b1:27:3b:7d:d9:34:61:78:07:19:46:f0:bd:dc:21:
b8:12:e2:20:a1:a9:79:a2:09:28:27:9f:28:ff:0f:
be:04:1b:5e:9a:5d:60:5f:db:04:d8:61:82:ec:74:
86:79:c4:fe:3a:48:a4:77:16:96:5a:f3:4c:43:48:
5d:d7:e8:b2:74:f0:16:2f:83:23:1f:d5:29:db:a4:
db:c3:d2:79:f4:6c:2f:e5:ba:b0:89:24:d4:02:92:
59:a1:46:1c:ef:da:00:8c:22:6e:49:10:75:5e:a6:
62:6d:59:5c:f3:0a:40:0a:60:58:d3:fb:e2:08:40:
10:d8:bd:1b:56:d2:9a:2d:e8:85:ca:9b:7b:a0:2c:
d7:ae:e3:f1:9b:a3:48:9c:8d:85:42:0b:24:b1:18:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:5B:70:F5:AC:53:60:B5:E3:2C:8E:CD:FC:92:9E:35:93:65:9D
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:94:7c:18:55:d6:45:c6:44:04:13:54:4b:d3:3f:b2:a1:2d:
bd:a9:06:40:99:f0:c4:45:8a:9a:c9:90:36:2a:fd:45:72:31:
03:ae:90:d4:5c:7e:a1:0c:83:82:e0:c2:5f:e3:f2:d7:7e:36:
5d:62:5e:74:21:0c:ad:d0:3f:db:76:e6:7a:84:b6:53:7c:09:
90:33:0f:ec:2a:1a:29:71:e5:fb:e5:6b:16:b1:3c:b8:e0:1d:
5f:c8:30:9b:8b:7d:fb:de:0e:9f:57:b3:3a:b5:72:2d:3b:79:
b3:b0:f7:1f:99:76:95:03:0c:e6:78:1d:01:85:c1:a4:a3:94:
ec:2e:fc:04:1b:ad:38:3c:f0:84:9c:c2:e5:aa:c7:8b:89:b8:
55:58:a2:c7:2d:f0:d1:db:d7:fe:04:c7:ba:90:3e:d7:e4:35:
15:73:54:00:11:37:e5:96:b5:f0:91:03:29:87:eb:5a:47:51:
99:ca:b8:f1:ff:02:ff:4c:c5:1a:09:f6:eb:b8:04:c4:5d:d5:
49:f6:17:8f:82:bb:ca:c8:d4:d0:82:fa:25:66:a4:3b:0e:33:
74:61:3c:cb:28:8d:84:9f:b3:8a:97:62:82:19:3e:5c:23:37:
48:e0:71:51:68:78:a1:fb:38:05:45:82:cc:6a:87:76:1e:99:
ac:1b:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:54:59 2025 by rpki-client