Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: xQu1chgzQifm8QlaPyyC3crO0HrpMSBkx5fVad1SP+o=
Subject key identifier: 59:8B:F2:9C:81:AC:1E:C9:22:62:88:B1:8F:08:7E:CA:5B:73:F1:2D
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 0198D697EDDEC60C79E6DFD06D930F14D3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:17 +0000
Manifest this update: Sat 23 Aug 2025 11:02:17 +0000
Manifest next update: Sun 24 Aug 2025 11:02:17 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: dGqMNVpFSkooFB/Q0Muk1Caqd1oVDjvuJh9ZYTi4j2g=)
2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ed:de:c6:0c:79:e6:df:d0:6d:93:0f:14:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Aug 23 11:02:17 2025 GMT
Not After : Aug 24 11:02:17 2025 GMT
Subject: CN=598bf29c81ac1ec9226288b18f087eca5b73f12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:41:a9:0e:88:4a:cf:92:14:90:3c:2e:bb:
91:47:e5:89:35:a3:9e:12:94:4a:a8:43:32:fb:3d:
78:bd:e2:1d:c9:3e:83:5c:85:92:6e:04:84:4c:15:
94:72:d4:d4:1a:6e:84:3d:b2:f3:fd:cc:81:5d:17:
1a:e9:b7:56:b8:e2:97:93:3f:dc:2f:69:47:5f:e6:
ec:95:60:a0:55:69:30:01:33:5d:cd:0b:01:db:32:
cd:71:d9:15:17:3c:bc:ad:ed:4f:fb:a6:df:c9:b8:
4b:a6:b7:d7:9a:b0:a4:4a:b8:26:5f:d8:2f:05:63:
c6:28:ca:9a:dd:6a:7b:11:d3:c0:13:21:f8:06:1f:
59:c7:25:1b:24:69:be:fb:55:3d:39:0c:32:cf:94:
4a:ff:1b:fc:e7:8b:3c:a4:01:d9:7e:c1:27:d9:38:
27:3f:b5:ad:de:de:ac:88:aa:7e:32:39:1c:0a:4c:
c8:03:4c:35:a3:01:3f:66:d1:63:0e:8e:00:52:48:
a6:91:05:93:58:2e:7a:0c:03:e2:c3:e2:19:2d:4a:
fd:9d:e3:54:2a:a5:ed:26:d0:6d:dc:27:90:7c:0e:
43:1d:f8:f6:88:07:99:3e:50:82:57:97:68:1b:e9:
40:ec:f6:1d:bc:b5:79:28:bf:94:97:e6:1f:93:e1:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:F2:9C:81:AC:1E:C9:22:62:88:B1:8F:08:7E:CA:5B:73:F1:2D
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:da:80:8e:c7:e3:52:4a:7b:26:41:55:96:b5:64:2c:8d:22:
32:d8:87:5e:69:42:ed:5e:c4:5d:4c:5f:21:f3:45:21:ea:09:
b0:ec:d4:81:b9:e4:57:66:23:0c:25:ce:aa:1c:ea:e2:8c:36:
fd:5a:b2:8c:fb:5f:ab:81:07:df:61:b9:4c:ef:fe:57:0f:19:
09:7f:74:73:8a:79:87:db:c2:06:ab:5d:88:ac:d8:83:3c:04:
92:2a:a7:30:a7:73:79:3c:32:e4:97:7d:7f:c8:04:1b:55:49:
b2:16:c7:74:12:db:be:42:81:74:e7:a2:16:48:fb:cf:2f:cd:
79:ab:7a:53:12:a9:dc:ae:79:9d:6a:b2:0f:a2:0a:d7:78:0d:
ae:13:62:31:49:c6:0d:2c:92:f1:a7:35:cb:03:21:6a:d6:1a:
71:cc:52:9e:be:89:4d:d3:d7:37:68:98:e5:b6:4d:e9:e9:8d:
f7:d2:58:d0:74:be:cb:b4:21:5e:55:b6:ee:34:27:07:d3:b5:
14:a4:42:2c:39:d2:a3:d1:ad:13:8a:af:55:4d:0f:a9:e0:e4:
b9:da:84:b7:54:e4:bd:84:e3:72:be:e3:70:df:c5:d6:6b:3c:
15:22:d4:52:92:f8:b4:ec:85:5f:91:71:f4:55:19:f1:c4:f3:
6d:3a:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:52 2025 by rpki-client