Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: KmV4xaMiR7axk2SpoR8bqpBXmcvBbSpHldEYtsB8NEk=
Subject key identifier: F3:37:43:86:B5:6F:D9:83:F4:AC:B0:B1:BB:15:12:40:2F:60:B6:6C
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 0198D4E089E29ECF51BF641E99EB78472469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: X923Rej3psvICFLi23RYwfSJsmWxA8LXjsq53ZCE5Do=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:89:e2:9e:cf:51:bf:64:1e:99:eb:78:47:24:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=f3374386b56fd983f4acb0b1bb1512402f60b66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:8a:78:b9:3b:ff:bf:8e:d6:bb:60:70:3f:
ca:40:65:3c:bd:a4:f1:da:11:04:50:18:7a:4b:2d:
5e:85:70:b9:49:47:9c:a3:94:3f:d3:c1:df:79:d1:
2e:ca:91:de:21:e9:db:e8:8a:62:9f:81:26:ed:d9:
d0:a2:67:3e:9f:cc:ec:4e:11:ce:d0:70:01:02:0f:
af:2c:e3:b7:c3:cb:05:d2:e3:1b:ef:0a:63:b0:35:
3f:7d:7e:38:90:2d:4b:27:27:1c:3e:84:7f:b6:5c:
c2:50:cc:05:27:d4:ab:e1:2a:8d:6f:aa:ee:c8:e4:
94:6f:18:d0:c0:53:d2:a3:6f:3f:4a:08:81:6f:33:
e9:83:d3:e7:90:87:2c:47:05:e1:07:bb:01:3f:c7:
20:e5:91:df:1a:55:84:09:59:22:80:37:ec:10:99:
8c:04:b4:01:6d:3d:45:9f:62:0d:9d:22:a2:35:01:
16:0c:b0:8a:38:31:59:15:ee:78:d8:68:b9:a7:26:
6b:9c:5a:01:89:db:a9:96:4a:33:e7:dc:cc:9e:c2:
4c:f8:81:40:cd:de:04:29:4c:ed:82:ad:7c:76:ab:
08:f3:60:91:13:c1:0d:f0:53:50:24:87:a2:4e:3a:
13:27:cd:00:e0:8c:4a:bb:af:2e:8a:64:5b:32:95:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:37:43:86:B5:6F:D9:83:F4:AC:B0:B1:BB:15:12:40:2F:60:B6:6C
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:aa:58:48:01:47:b0:0c:65:27:c7:b0:ae:94:1f:73:57:4d:
75:b8:5e:66:d0:04:41:4f:25:64:2a:9b:1c:23:26:a3:eb:a0:
f6:8f:c6:1a:b0:c0:36:ca:f0:8f:16:70:9a:7f:6a:06:9d:90:
a2:30:40:13:55:73:68:f3:cd:f1:ea:15:0e:34:b8:8c:7e:53:
1d:4c:86:fb:c8:0c:ce:5b:03:63:6b:e7:1d:cd:aa:7c:a1:48:
9d:61:19:ae:74:95:c6:38:7c:b8:bd:ee:ae:35:c8:35:85:72:
75:15:ee:4b:e2:a0:0b:06:34:3a:68:a6:41:2d:85:a1:3c:5b:
19:bb:3b:8e:25:79:cb:66:0d:6c:db:ba:2a:61:c1:07:ee:3e:
8c:63:81:a3:8b:f6:ba:f0:4c:7f:51:49:ef:df:21:44:39:fa:
4e:56:33:59:9c:d2:95:72:ff:6a:12:84:8b:33:0f:54:75:27:
94:5b:b4:49:76:c7:97:f1:cd:91:32:b4:70:5b:2a:ef:89:27:
6f:e8:41:58:6c:d4:56:4a:82:fa:fa:76:21:b6:43:c6:4c:4d:
da:bb:63:1e:96:61:4f:0a:11:5e:90:76:37:f7:48:d3:d2:2f:
db:8a:37:29:6e:9f:ae:b0:5d:e9:7b:01:30:2e:a8:89:ec:bf:
35:90:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:32 2025 by rpki-client