Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
File: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json)
Hash identifier: zoJ2cntd8DEs11i34nEkHN0jUa2uNnZpwsJUrb5ggys=
Subject key identifier: 93:F7:53:B1:48:EC:CE:F6:21:56:DB:ED:31:14:0D:6A:35:C1:D9:06
Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Certificate issuer: /CN=d795a7259f9537186493f482d55cef4b64b1c435
Certificate serial: 019A722659EDF0C6062D19039A733D09FAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
Manifest number: 0F23
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: XhbLJCM8wxPc67v2s2notxQq0G0nHfJzCkqhezJQkhQ=)
2: ZllkD09XX0UjmpDgviQyHJhN0tQ.roa (hash: cXj6wMyOUxluunshyfWaumFrSwMD+oIYxgPqs4SCj1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:59:ed:f0:c6:06:2d:19:03:9a:73:3d:09:fa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=93f753b148eccef62156dbed31140d6a35c1d906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:95:8d:c5:83:44:e5:54:94:c7:8e:fe:58:
54:77:5a:38:f6:df:aa:35:77:95:98:e4:d2:d1:ea:
9d:66:99:36:2b:7f:f4:ba:56:e8:88:99:2d:f8:ce:
7c:68:0d:55:44:73:ff:40:47:2f:dc:29:2c:6a:6e:
34:c7:0a:8e:47:10:d9:ce:b9:04:1a:cf:f7:dc:d7:
13:ce:52:e3:90:5f:a2:92:72:f8:a5:18:27:e9:72:
11:23:13:4b:79:0a:c9:8a:7c:fe:42:80:30:ca:dc:
0f:ca:ce:06:46:54:c3:eb:2d:ca:56:cb:48:e2:e1:
a2:53:82:a5:2d:c0:0b:83:4e:e4:88:7d:60:21:af:
48:a6:4f:ac:67:2a:85:d2:46:e0:cc:34:47:50:9f:
eb:c2:54:8b:db:a8:16:87:2d:6a:72:3e:e6:ab:65:
2e:25:36:85:1f:7a:6d:3b:dc:c1:bf:6a:7b:34:47:
d3:0c:69:ac:d2:a3:74:45:3d:d1:94:a5:7d:d6:50:
cc:89:8a:12:de:e9:c0:2e:56:d5:3f:49:8f:55:06:
c7:b1:b2:36:a5:04:a5:e1:d8:54:d6:06:de:0b:4c:
ab:de:30:05:15:1a:8c:e9:6d:53:21:a3:05:fd:3f:
7b:1c:4a:e7:46:28:ff:ee:81:6b:42:00:82:05:5f:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F7:53:B1:48:EC:CE:F6:21:56:DB:ED:31:14:0D:6A:35:C1:D9:06
X509v3 Authority Key Identifier:
keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b2:22:41:e4:43:f7:41:c9:a3:fe:39:c8:f3:3f:d6:a2:34:
12:0a:f3:bd:e2:26:63:f9:ba:7e:84:ae:33:6f:04:2e:b4:e3:
24:5c:5f:18:72:d6:2a:05:88:0f:47:2e:ff:4e:75:f4:49:5b:
dd:ae:69:49:21:ce:9c:7a:8f:55:32:36:f8:f7:a3:b6:02:db:
e3:8f:f1:21:71:66:51:de:33:b6:a8:44:d9:0c:4c:bc:eb:41:
ff:96:59:6e:fa:f9:1b:92:94:31:39:9f:1e:a6:47:45:b5:d3:
31:76:9f:4a:cf:b1:b9:f8:a4:c6:eb:f0:01:d7:6c:6a:fb:db:
c1:c9:66:0f:4e:70:00:e2:08:89:3e:ec:5e:1b:fc:92:92:21:
98:22:77:b9:13:0a:ac:19:a8:3c:0d:b7:fe:b9:22:77:5e:f0:
f3:d7:bd:a8:72:a3:73:e2:71:f4:dd:de:7c:2c:b7:dd:37:c4:
96:f7:36:64:71:49:81:07:94:7e:6e:09:40:66:2d:2a:a1:9b:
c2:27:ea:d8:fb:fb:be:38:47:15:80:2d:de:d1:3f:de:9e:6e:
9e:02:10:08:e6:1d:83:7b:fa:93:9b:c0:43:f4:1a:b1:02:1f:
eb:11:9d:4b:d5:94:8d:08:b3:1a:53:ad:ab:78:aa:7d:55:6b:
bf:72:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:45:51 2025 by rpki-client