Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: eSatEx/1PQnyzAgDgHmJuDYajXMNBRkW4whovgSRLBI=
Subject key identifier: 2A:05:FB:C1:F5:DC:01:57:1B:A0:19:E1:7A:82:67:F6:E2:C8:C7:72
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 0198D54E4EAE0D7707498147E054737C069C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 05DE
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: 0i_jhQqN2iNg5AEP50J1N6ocU14.roa (hash: dte6GhHBF0dhj/nHMGGQvO/MzVf6vGP1TT8x/x47jYs=)
2: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: opV8W3hiGhbbT/J6aIko8SF7HtrT+AlugOCztsiP4ig=)
3: wH2BXhQbp4RbWEqazf0ETM0OAOI.roa (hash: WPj1rnPevOFK6Wz2Mo2etzdEIyu2IX1IvghxSjU5v1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4e:ae:0d:77:07:49:81:47:e0:54:73:7c:06:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=2a05fbc1f5dc01571ba019e17a8267f6e2c8c772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:54:8a:6a:dd:34:fa:34:e8:f3:d5:e2:f5:
43:76:35:b7:02:e2:f3:1b:e0:4a:fe:a1:8b:b4:68:
50:4c:34:8e:09:e7:a7:a8:da:e7:3c:5a:1a:de:4b:
c0:f9:ca:d4:93:1b:fd:15:32:69:76:ce:2f:5c:24:
94:35:67:7c:f7:7a:f7:33:8d:bd:c9:6e:02:a8:d4:
fb:b6:07:94:bf:0e:3b:d6:5b:fc:43:57:bd:83:7b:
57:3c:e5:39:56:f7:34:60:aa:64:a0:ee:6b:1b:bd:
4b:72:35:9a:0b:11:93:ae:7a:c5:7c:13:cc:31:d1:
76:81:68:6f:c7:38:8e:5a:b3:3f:76:e5:56:85:01:
70:bc:8b:90:ae:7c:5c:94:7e:39:70:2d:af:d4:fd:
1f:ca:45:d6:a1:19:40:9f:30:7d:15:f0:b3:ef:ce:
ef:f3:f8:1f:7f:83:01:e4:1f:2b:69:a7:71:46:5a:
0c:dc:ce:21:fb:91:10:84:7b:61:67:c5:48:02:3f:
c0:d1:3c:3d:48:b7:91:ea:06:1d:8a:2b:74:b4:47:
87:25:6f:27:64:4f:69:c1:db:7b:97:8e:a6:4b:f9:
ca:3a:f3:ab:f8:9a:29:9c:93:61:05:cc:e7:6e:ff:
df:7c:c4:f6:90:ce:ff:21:7d:49:5c:3f:92:6a:a0:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:05:FB:C1:F5:DC:01:57:1B:A0:19:E1:7A:82:67:F6:E2:C8:C7:72
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:46:c1:dc:d0:ea:4e:52:8d:07:b2:52:90:c3:7a:78:91:b1:
cf:eb:fe:0b:18:ea:dd:2d:ff:90:54:27:72:21:63:53:41:b5:
7b:5c:25:72:2e:cd:ce:c0:66:8b:c0:02:0d:7b:3c:1a:44:d4:
20:f0:93:65:bc:cc:6e:fe:48:9d:ab:66:31:98:ca:73:34:a7:
15:8b:18:cd:18:00:3f:8f:8a:bf:d1:cd:b7:ba:c0:d2:e2:2d:
31:fc:c3:c8:74:bb:db:9d:c4:c4:19:4b:d9:30:aa:e0:b9:c4:
1f:14:9f:90:79:17:00:8c:51:5e:c2:1d:0f:72:58:26:9a:75:
6f:c6:ee:e3:21:4e:89:41:cb:da:36:f2:14:06:7b:0c:9f:a0:
96:14:3f:9b:df:b9:43:dd:54:d9:a1:56:7e:4d:b2:2c:03:b8:
d7:f4:25:5b:b0:a3:79:e1:7c:fd:ab:d2:dc:c2:57:63:27:c9:
48:9e:8b:9d:47:fb:25:d6:7a:7f:29:ed:7c:4a:ac:98:d6:41:
b8:15:74:3f:9e:c5:dd:d2:26:c2:c3:1b:e1:fd:47:05:39:f2:
32:18:43:36:6f:58:bc:16:9c:15:1c:93:50:fe:97:ea:cf:93:
5e:08:bf:f5:dd:66:69:09:3e:19:45:02:bb:b6:22:74:3f:ef:
8a:30:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:36 2025 by rpki-client