Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: RGSFn9jjYEq251fIz7mZz0MRlTpJ7PRMVLwYcpQSP7I=
Subject key identifier: 61:13:80:18:76:0B:11:A0:A5:92:C3:AA:90:15:9F:0A:C3:E8:DB:95
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019A0223815C576A6B063DCE9079C5B94E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 16F0
Signing time: Mon 20 Oct 2025 15:01:12 +0000
Manifest this update: Mon 20 Oct 2025 15:01:12 +0000
Manifest next update: Tue 21 Oct 2025 15:01:12 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: nyjfqyxqo200OzByi5RUgiGYXJogunZk8E2q/sMsi2s=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:81:5c:57:6a:6b:06:3d:ce:90:79:c5:b9:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Oct 20 15:01:12 2025 GMT
Not After : Oct 21 15:01:12 2025 GMT
Subject: CN=61138018760b11a0a592c3aa90159f0ac3e8db95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:6b:99:29:6b:4d:8a:76:02:03:31:0f:47:
96:6b:92:a7:a3:b3:4a:7d:dc:72:28:af:7e:65:51:
bc:cf:1b:55:73:bb:e1:4e:79:83:c4:74:dd:3a:9a:
d7:91:93:49:33:12:f7:16:65:0e:23:9d:80:b3:30:
33:27:6a:6a:df:1f:67:d5:d5:c9:2a:d4:9a:5d:6d:
d4:05:cd:c4:e9:15:fe:0f:49:7b:8c:e9:6d:8b:68:
17:6c:1d:e2:02:d0:14:c1:4d:54:bc:61:90:38:34:
74:fd:c0:27:8c:ab:07:84:e6:b8:87:0d:3a:cb:50:
e3:7d:89:4b:09:3b:97:68:d3:d0:cf:2d:fa:74:9b:
dc:b4:c6:12:00:06:3e:3e:e5:f4:1c:fe:83:15:33:
0a:df:52:37:24:88:e4:b4:f9:d8:ea:ab:de:5b:12:
04:03:4e:aa:07:a6:de:ba:8d:80:85:f1:9e:59:6a:
32:1a:d0:22:cf:fc:55:38:83:da:0a:1d:c6:72:84:
4d:d3:e3:30:41:93:05:c4:a1:e3:b4:0a:67:50:7c:
d7:5d:71:9e:c6:85:24:c9:73:ff:37:0a:13:38:50:
0a:6e:db:c3:01:94:46:d8:59:16:ba:b3:d8:84:6c:
9d:bd:52:01:fd:13:58:5e:54:e4:fd:b1:91:99:ec:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:13:80:18:76:0B:11:A0:A5:92:C3:AA:90:15:9F:0A:C3:E8:DB:95
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:06:59:f6:06:9b:0a:26:f2:15:8d:d6:bb:df:d9:6b:42:b8:
a8:0e:6a:b7:0e:7e:00:39:b8:5b:ee:6f:23:e9:3c:f7:02:a6:
5f:00:b2:7e:53:32:8b:d3:5b:6d:e5:93:d0:1c:72:28:ed:bc:
08:92:c1:01:c3:90:95:b7:8f:f2:b5:fb:e1:35:d9:57:80:a0:
fc:c8:07:85:7b:94:bf:b6:be:d7:9a:90:b6:1b:d6:53:e7:56:
7e:7d:f6:10:3f:68:ea:f0:3c:d0:7f:76:d8:34:8e:38:e5:2e:
bf:29:2b:e8:07:1c:f1:55:5b:a9:cd:b9:3b:1f:5a:36:91:60:
b2:8c:b4:dc:61:e1:85:e0:6f:50:a2:27:fa:49:bc:10:e3:53:
5f:fd:92:f6:a5:67:a2:89:9f:13:01:2c:2f:5e:3f:67:14:44:
0b:ef:03:38:35:83:70:cf:a0:a8:b9:3e:a7:80:2e:81:d4:c0:
a2:ea:14:27:22:a9:73:66:b8:ef:ad:36:8d:bf:4b:77:32:d0:
56:dc:20:92:bd:2c:e0:dc:e4:03:00:7b:ec:01:7e:41:10:55:
89:58:22:48:28:7c:df:11:10:89:1e:43:8a:7f:56:2b:5d:f2:
24:14:15:ab:92:26:bf:56:8c:03:c0:f2:da:c0:3b:29:bf:2c:
8a:84:9d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:57 2025 by rpki-client