Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier: BxgeheP84ycwldUFYC1MjsP1svEX/ogL4qNcGIT9bGE=
Subject key identifier: 0E:E8:80:6A:E3:5D:EB:E1:CF:80:4A:34:F4:78:7D:53:80:FE:A8:AA
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 019A71EEC378EF894AD35A317DDFEDBB370A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number: 0EA9
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: Au+uOPObZSSZyrwBAn/lLIz4hVh48V/ubi1+RUfNi+o=)
2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c3:78:ef:89:4a:d3:5a:31:7d:df:ed:bb:37:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=0ee8806ae35debe1cf804a34f4787d5380fea8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:66:ac:ff:5e:4c:92:e7:52:32:1a:06:cc:
c3:52:d5:ae:42:b7:a7:51:38:26:59:7b:e1:fe:88:
5e:8e:4e:27:aa:da:71:ad:36:e7:77:75:77:3a:37:
ba:3f:26:e6:5d:e0:8e:fd:cd:ec:c3:de:cc:b1:26:
ee:1b:3b:4f:eb:a6:70:54:f3:77:19:43:97:35:48:
7f:ca:4b:84:78:f0:ec:fb:39:f3:5c:a6:75:b2:bf:
55:5f:14:c4:bf:d3:fd:c1:89:7f:e5:7b:aa:82:24:
60:f3:c0:65:dd:bf:63:86:69:2e:a2:6d:fb:82:62:
8d:c7:86:fa:ac:f8:8e:b3:9d:40:69:91:92:21:6d:
6b:8a:b1:64:d7:3e:f6:3a:f3:82:0e:41:19:63:88:
21:e6:e5:6d:49:4c:55:bc:0e:2b:c0:1f:dc:18:94:
fd:57:b2:e2:41:59:c1:01:b4:4a:47:52:91:30:19:
ff:b2:bc:de:6a:4b:ef:3b:89:81:36:06:d9:65:83:
d0:b0:f1:d7:5d:de:0e:cc:78:14:f3:2b:6d:68:6d:
4c:7a:8a:73:59:41:78:cb:53:0c:bc:ee:44:71:0a:
21:71:58:e8:25:1d:d6:76:86:cf:2c:0c:73:5d:31:
9b:18:55:68:7b:f6:53:69:ea:f5:dc:e4:90:9f:ca:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E8:80:6A:E3:5D:EB:E1:CF:80:4A:34:F4:78:7D:53:80:FE:A8:AA
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:06:2a:3f:4f:8c:e6:f6:dc:cf:83:39:86:98:86:1d:76:89:
51:1d:9d:9a:4d:01:71:0e:61:d5:60:2c:d2:71:75:62:a2:a7:
17:a9:24:6f:5a:fc:b9:31:42:ee:98:1b:78:c6:81:8f:f2:7a:
aa:40:15:4c:4e:c9:82:8e:a2:0c:24:0b:9d:35:f3:49:c5:78:
2a:0c:4f:9b:87:56:a3:3e:5c:66:35:c5:9f:a0:b9:f7:35:44:
d9:f5:d0:86:b6:d4:cc:d0:8a:8c:b6:f3:28:9e:21:c0:aa:7c:
66:68:86:61:46:c2:42:51:d3:92:7d:80:80:ea:dd:1e:e8:2e:
00:b5:cf:5e:27:34:72:67:cb:dd:da:76:38:d3:6c:82:1c:d4:
d4:58:53:80:39:c8:db:9f:b0:a7:9c:56:a8:e5:69:29:35:47:
09:d1:9d:86:01:d4:22:a9:49:03:81:12:ac:da:fa:cd:63:37:
63:08:50:9f:34:bd:7a:e4:74:5b:b9:bf:00:f8:86:10:5c:a0:
a1:f7:73:91:00:b7:7a:4d:9d:32:97:54:ae:70:8e:c5:8c:d8:
c2:a6:32:65:53:be:15:f6:b1:f0:89:4c:77:66:45:e1:c6:e0:
5a:4f:d5:d8:d7:b1:a9:45:3e:a7:65:a3:80:7c:67:3d:45:db:
dd:b4:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:02 2025 by rpki-client