Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
File: 0d2oMnacMWgfglaFFHNorzoR9vg.mft (raw, json)
Hash identifier: trKRqkKyzoSHKOUm/gToZoMeP/VMlX0vQcEhEjJ0Jsc=
Subject key identifier: 25:C9:1C:F1:B0:DD:04:D6:21:29:1F:0C:7E:F5:B9:62:B6:01:6F:CD
Authority key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Certificate issuer: /CN=d1dda832769c31681f825685147368af3a11f6f8
Certificate serial: 0198534496896C130D5E13B1D08F46C29246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 23:01:00 +0000
Manifest this update: Mon 28 Jul 2025 23:01:00 +0000
Manifest next update: Tue 29 Jul 2025 23:01:00 +0000
Files and hashes: 1: 0d2oMnacMWgfglaFFHNorzoR9vg.crl (hash: hC3UpHg1ZeQvhT7T5J/UrcfgsUP/OWP4R/Sh68ogi8Y=)
2: b7sNWlzHmaj36hpl7542OiFeLhk.roa (hash: r2LdfaqH2ThvketoRQBfUQ9ZRTad2+2P2sxQXJTCIiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:96:89:6c:13:0d:5e:13:b1:d0:8f:46:c2:92:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dda832769c31681f825685147368af3a11f6f8
Validity
Not Before: Jul 28 23:01:00 2025 GMT
Not After : Jul 29 23:01:00 2025 GMT
Subject: CN=25c91cf1b0dd04d621291f0c7ef5b962b6016fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:32:df:99:75:a1:ae:65:c7:99:c3:ee:9e:
41:53:1a:2d:ef:47:3a:25:03:f9:72:17:8d:67:7c:
9d:cf:ba:16:dc:6c:a6:b9:ea:06:fc:d0:cd:0a:ca:
60:f3:c1:c0:b0:fc:6b:b5:5f:25:a4:5d:b9:e3:0c:
09:0e:02:02:f9:c1:0b:d5:52:b0:23:bd:85:49:9b:
6a:30:7b:2f:31:77:22:5f:76:62:29:5b:2c:67:59:
9d:b0:86:e6:50:05:c6:36:db:d4:8c:3b:7d:34:b5:
e4:16:c4:b8:ba:3a:ed:7f:0e:27:cd:0c:1f:31:95:
dd:28:b0:70:cb:f7:b9:51:12:b0:58:9a:05:a8:d8:
49:8c:a2:26:00:e7:50:50:7d:76:7b:b3:e0:26:24:
b5:f0:1e:37:fb:9b:e9:bf:dd:ee:3f:1c:97:10:41:
10:05:1b:01:8f:9c:ba:b7:5a:20:c2:21:29:90:87:
a0:f4:a0:be:1b:6e:3f:eb:a5:91:6f:14:c5:50:af:
c8:cd:4a:b4:03:d0:31:2e:e6:bd:55:ba:0b:cd:7d:
29:26:4e:ca:00:e6:04:d3:8f:10:77:12:ad:b5:8a:
3c:84:74:ae:ae:85:86:b4:19:f5:d1:e5:dd:b2:c4:
c7:e3:3a:7b:67:43:18:43:c3:c8:a6:48:51:cd:26:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C9:1C:F1:B0:DD:04:D6:21:29:1F:0C:7E:F5:B9:62:B6:01:6F:CD
X509v3 Authority Key Identifier:
keyid:D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ef:3c:68:62:d3:bf:42:03:50:0d:4a:2d:5a:02:41:c0:74:
ce:6c:48:c8:84:3d:e3:f6:95:f4:a2:de:bb:cf:fa:e1:bc:b6:
0f:f3:7a:8c:7d:f1:94:d3:da:77:34:95:0b:69:ff:d1:d4:bf:
38:4d:70:b1:af:54:26:ef:2c:f0:56:c1:dd:39:da:74:78:50:
a1:5a:df:88:be:e3:7f:b1:e5:b4:7c:92:b5:6f:67:8a:05:62:
e9:cb:bd:df:1e:f3:56:ac:4e:af:13:56:47:42:c1:6b:7a:d6:
43:d3:2a:f2:35:10:0e:0a:ec:d2:0c:96:da:1a:fe:4e:30:7f:
40:14:fd:82:ae:76:c8:96:d2:24:d7:c4:f2:8a:26:c9:7d:66:
77:9e:fd:c5:c7:f7:e0:96:72:22:95:be:d1:46:ef:e1:c8:c4:
34:88:e2:5b:13:4e:e2:6d:f9:2c:c5:81:15:9c:4e:9b:a9:63:
a6:c6:56:78:d2:f1:2b:a5:d8:cf:d9:e2:fc:fb:41:d3:e0:f0:
71:d5:fd:f9:4b:36:19:d8:21:71:56:ea:4c:51:54:72:3c:41:
af:7f:fa:59:1a:4d:ca:25:9a:f4:26:dc:1b:ae:28:8a:29:65:
b8:20:0e:e1:a9:dd:4b:4a:47:1f:ac:fc:12:dc:a4:b0:f9:e3:
4f:fa:1f:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRJaJbBMNXhOx0I9GwpJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGRhODMyNzY5YzMxNjgxZjgyNTY4NTE0NzM2OGFmM2Ex
MWY2ZjgwHhcNMjUwNzI4MjMwMTAwWhcNMjUwNzI5MjMwMTAwWjAzMTEwLwYDVQQD
EygyNWM5MWNmMWIwZGQwNGQ2MjEyOTFmMGM3ZWY1Yjk2MmI2MDE2ZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVUy35l1oa5lx5nD7p5BUxot70c6
JQP5cheNZ3ydz7oW3GymueoG/NDNCspg88HAsPxrtV8lpF254wwJDgIC+cEL1VKw
I72FSZtqMHsvMXciX3ZiKVssZ1mdsIbmUAXGNtvUjDt9NLXkFsS4ujrtfw4nzQwf
MZXdKLBwy/e5URKwWJoFqNhJjKImAOdQUH12e7PgJiS18B43+5vpv93uPxyXEEEQ
BRsBj5y6t1ogwiEpkIeg9KC+G24/66WRbxTFUK/IzUq0A9AxLua9VboLzX0pJk7K
AOYE048QdxKttYo8hHSuroWGtBn10eXdssTH4zp7Z0MYQ8PIpkhRzSZQgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXJHPGw3QTWISkfDH71uWK2AW/NMB8GA1UdIwQY
MBaAFNHdqDJ2nDFoH4JWhRRzaK86Efb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQyb01uYWNNV2dmZ2xhRkZITm9yem9SOXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81YTZkM2MtMTdkYS00NGQzLWE0MDIt
ODYyMzZiYWMxMzA4LzEvMGQyb01uYWNNV2dmZ2xhRkZITm9yem9SOXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81YTZkM2MtMTdkYS00NGQzLWE0MDItODYyMzZiYWMxMzA4
LzEvMGQyb01uYWNNV2dmZ2xhRkZITm9yem9SOXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACO88aGLT
v0IDUA1KLVoCQcB0zmxIyIQ94/aV9KLeu8/64by2D/N6jH3xlNPadzSVC2n/0dS/
OE1wsa9UJu8s8FbB3TnadHhQoVrfiL7jf7HltHyStW9nigVi6cu93x7zVqxOrxNW
R0LBa3rWQ9Mq8jUQDgrs0gyW2hr+TjB/QBT9gq52yJbSJNfE8oomyX1md579xcf3
4JZyIpW+0Ubv4cjENIjiWxNO4m35LMWBFZxOm6ljpsZWeNLxK6XYz9ni/PtB0+Dw
cdX9+Us2GdghcVbqTFFUcjxBr3/6WRpNyiWa9CbcG64oiilluCAO4andS0pHH6z8
EtyksPnjT/ofgw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 01:14:54 2025 by rpki-client