Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: 1BE0T40YsCIpM9sefoTpFRaPyDcoQJ0iVNPD24Mmz1I=
Subject key identifier: 5A:43:72:0B:C5:6C:05:78:F3:11:93:91:66:0F:BB:46:2F:29:75:83
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 0199FC21AABE600056B34AD648F60A2E397B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: 7oSbBET1zWD5NMyF9E0e2ocmZQNrwbrBY1FmeyDLfmY=)
2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:aa:be:60:00:56:b3:4a:d6:48:f6:0a:2e:39:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=5a43720bc56c0578f3119391660fbb462f297583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:a8:27:29:43:27:a9:88:df:b7:38:6c:af:
2e:f6:14:2f:76:cb:02:a9:ab:22:17:58:74:bd:6c:
59:00:73:37:a0:26:c3:6e:f9:f1:21:e6:30:3f:bf:
bd:0b:c0:0d:27:f6:eb:bb:ca:b7:e5:28:8d:6f:5c:
cb:26:cc:54:d4:52:e1:b3:9f:9f:4c:cd:f6:58:5c:
d7:32:f1:6b:39:5e:6b:61:5c:60:eb:58:84:6f:05:
a6:1c:2c:ad:f5:85:a4:70:f9:fe:4d:d7:b1:ad:cf:
28:f4:65:09:5a:be:e0:0b:f3:c1:f3:7f:c7:8a:78:
1a:ff:64:53:a7:45:78:7c:54:ee:e2:da:0e:a9:d8:
0a:95:be:fd:9b:d4:58:8c:7a:b5:37:93:a2:9f:d3:
41:19:a5:a6:54:60:88:e6:e1:62:e7:9d:8d:c6:b8:
e0:dd:5c:db:03:10:12:89:06:51:2d:29:24:78:10:
dd:c4:bf:67:bf:24:0b:1d:82:9d:17:65:a3:c0:71:
ee:23:75:c5:c6:52:8a:c8:4b:6c:d6:23:b8:df:29:
54:e0:dc:d9:09:0c:c3:87:17:2c:9a:7c:4e:84:03:
5c:4c:7e:5a:00:62:dc:d4:d5:23:48:64:9d:17:4f:
74:84:b6:7d:65:32:08:a1:3e:56:ac:f4:c1:6f:e4:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:43:72:0B:C5:6C:05:78:F3:11:93:91:66:0F:BB:46:2F:29:75:83
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:99:67:14:29:68:e6:8f:f6:5c:89:ed:9b:58:d5:20:47:60:
3c:3b:c6:22:5a:fc:a8:26:1c:5a:e5:a7:0d:ca:8a:3d:fd:e8:
e6:4a:47:7b:89:a8:57:51:09:b4:bf:f4:08:ba:e6:2a:e8:cf:
16:41:68:e8:58:79:a2:2d:46:0c:ec:a8:69:fd:02:22:8b:cf:
e5:9a:a9:fd:8c:7c:6e:fa:39:05:31:9f:94:32:2a:91:de:ad:
c9:34:55:29:c5:9e:92:90:a6:0f:da:7c:15:01:a8:43:a0:3f:
4e:69:a0:3d:e8:5e:bb:e7:86:ef:0c:79:de:2f:c1:5e:89:0d:
55:7b:e1:74:1c:82:d8:76:c2:b2:a8:9c:b4:9c:8a:9c:d6:d7:
af:4d:d1:a8:c9:f3:8f:5a:38:af:f5:3b:49:56:35:db:dc:e9:
2b:4e:1f:a9:d5:3e:9e:b1:d9:a6:8f:eb:11:01:dc:ee:10:f2:
43:47:2d:a4:6e:b0:f7:da:d7:65:f9:cb:16:78:ab:eb:4d:3e:
d5:4b:0a:c2:13:67:ec:f2:85:5c:87:9a:14:f6:46:e5:8e:59:
4f:74:42:e3:59:47:18:e2:54:68:71:54:03:8a:bf:47:8a:cb:
6d:15:10:7f:a2:69:db:ea:0f:94:97:29:a5:9c:b8:d5:2c:56:
64:cf:64:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Iaq+YABWs0rWSPYKLjl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2EzYzBiMTk2ZmRlMGJhNzRjMTQ4N2JkY2I5YzVmYTA1
MzY2NGIwHhcNMjUxMDE5MTEwMTI4WhcNMjUxMDIwMTEwMTI4WjAzMTEwLwYDVQQD
Eyg1YTQzNzIwYmM1NmMwNTc4ZjMxMTkzOTE2NjBmYmI0NjJmMjk3NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbSoJylDJ6mI37c4bK8u9hQvdssC
qasiF1h0vWxZAHM3oCbDbvnxIeYwP7+9C8ANJ/bru8q35SiNb1zLJsxU1FLhs5+f
TM32WFzXMvFrOV5rYVxg61iEbwWmHCyt9YWkcPn+Tdexrc8o9GUJWr7gC/PB83/H
inga/2RTp0V4fFTu4toOqdgKlb79m9RYjHq1N5Oin9NBGaWmVGCI5uFi552Nxrjg
3VzbAxASiQZRLSkkeBDdxL9nvyQLHYKdF2WjwHHuI3XFxlKKyEts1iO43ylU4NzZ
CQzDhxcsmnxOhANcTH5aAGLc1NUjSGSdF090hLZ9ZTIIoT5WrPTBb+RckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpDcgvFbAV48xGTkWYPu0YvKXWDMB8GA1UdIwQY
MBaAFNDKPAsZb94Lp0wUh73LnF+gU2ZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2Et
NmI2MzMzMWVmZjAyLzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2EtNmI2MzMzMWVmZjAy
LzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5lnFClo
5o/2XIntm1jVIEdgPDvGIlr8qCYcWuWnDcqKPf3o5kpHe4moV1EJtL/0CLrmKujP
FkFo6Fh5oi1GDOyoaf0CIovP5Zqp/Yx8bvo5BTGflDIqkd6tyTRVKcWekpCmD9p8
FQGoQ6A/TmmgPeheu+eG7wx53i/BXokNVXvhdByC2HbCsqictJyKnNbXr03RqMnz
j1o4r/U7SVY129zpK04fqdU+nrHZpo/rEQHc7hDyQ0ctpG6w99rXZfnLFnir600+
1UsKwhNn7PKFXIeaFPZG5Y5ZT3RC41lHGOJUaHFUA4q/R4rLbRUQf6Jp2+oPlJcp
pZy41SxWZM9kpw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:41 2025 by rpki-client