Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: vGrN9bQRUoPsY1RzGhaLRQsG0Mz9RwB5XHrxLCt5M8k=
Subject key identifier: 12:A5:95:FD:69:2E:94:0A:0D:E7:92:DF:6F:1C:E2:E8:2D:45:14:14
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019847E47225BA10F90ECDBA5BF64125A75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 160B
Signing time: Sat 26 Jul 2025 18:00:10 +0000
Manifest this update: Sat 26 Jul 2025 18:00:10 +0000
Manifest next update: Sun 27 Jul 2025 18:00:10 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: RXS9WzegRiLJQRUz1z/63agAgy8HzfAL8QvgL1pet+k=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:72:25:ba:10:f9:0e:cd:ba:5b:f6:41:25:a7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jul 26 18:00:10 2025 GMT
Not After : Jul 27 18:00:10 2025 GMT
Subject: CN=12a595fd692e940a0de792df6f1ce2e82d451414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:97:a1:c6:78:9d:4b:8b:eb:1b:5f:06:0f:
39:ff:6f:a7:e8:bc:dd:18:c8:42:0e:2b:67:ee:d9:
c6:e2:c8:c7:52:5f:47:88:16:6d:47:7f:a7:d8:eb:
93:5a:b4:7d:35:ed:e7:83:b4:38:ed:62:2c:3a:9b:
e9:30:bc:05:c5:69:5e:e3:51:ce:9a:7a:6e:de:37:
d8:14:b5:a5:51:ed:ab:3c:95:99:33:a4:48:41:64:
79:f3:02:55:41:b5:fd:6b:60:ef:cc:95:ad:c8:7e:
c3:09:1a:82:46:aa:12:31:a7:d0:2e:37:65:b3:cd:
cf:16:27:50:47:12:5c:58:dd:53:1d:67:06:c8:96:
66:b9:95:65:b2:17:0d:05:f2:af:b5:a7:2f:d9:b9:
46:1b:20:b7:f2:13:a7:75:87:97:00:40:b0:0a:89:
c7:ae:cc:9c:92:81:4e:18:49:cb:c5:52:d3:f5:68:
22:25:d8:27:36:91:93:fe:83:b3:30:8b:90:2e:6d:
4a:e8:5f:43:dd:0d:76:b4:a7:05:85:a2:13:27:8d:
e4:7d:76:fa:79:a3:22:cb:01:7e:36:a8:81:9b:4e:
b5:d8:7f:50:2c:02:31:cc:90:44:44:f6:f5:54:01:
3a:3f:73:93:6c:06:35:57:a5:78:cf:d9:22:01:67:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A5:95:FD:69:2E:94:0A:0D:E7:92:DF:6F:1C:E2:E8:2D:45:14:14
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a1:d5:b4:bf:5d:84:bc:6b:b1:e0:bd:37:fa:d4:06:19:d8:
b9:76:b4:69:f0:da:fb:9a:f9:cb:7a:91:ad:79:a9:e7:31:45:
47:2e:7a:fd:5c:a3:86:e4:42:4b:33:16:e5:85:85:27:34:a5:
09:37:17:6f:5b:c2:79:65:4e:70:38:64:8c:0a:32:d0:63:42:
b9:4d:f0:3c:fd:df:b5:58:0f:24:1b:b5:22:fa:ce:43:83:4c:
bd:05:74:fc:f7:57:b2:d4:d4:f8:b3:c2:6c:41:ad:30:be:2b:
1a:2e:fd:7f:80:22:5e:8d:ae:fd:fb:4c:5c:78:1b:a9:12:13:
1d:86:bf:a5:c5:e8:f4:bc:2f:63:36:35:2e:c1:a3:68:98:b0:
8f:49:99:30:a0:a0:c7:91:cf:8b:3c:36:8a:3a:f6:98:6f:03:
61:fe:cf:99:b9:31:02:ba:6d:ab:13:b3:b3:24:ad:ab:11:c4:
3b:a8:69:10:76:94:03:0b:32:de:6b:ec:61:46:6b:54:d4:25:
49:e5:ae:68:27:0a:71:a4:50:ba:df:59:da:74:a2:99:c2:72:
49:6f:8a:3d:9f:cf:1a:69:91:ae:f1:a1:e8:41:48:bb:d6:c1:
d2:c3:17:20:65:06:2c:72:46:18:66:c7:f9:6a:4f:13:53:28:
a3:7d:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:56:01 2025 by rpki-client