Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier: 8Grxkln6x+VA/RG05xm2Hq2Uf21D61LtDWROnFAmTR8=
Subject key identifier: 67:C1:3D:C6:25:1E:07:20:9F:71:68:53:CB:A9:6A:1D:6C:46:D1:66
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 019854FC7727C138C3176B2162CE1BDBC364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number: 0A74
Signing time: Tue 29 Jul 2025 07:01:28 +0000
Manifest this update: Tue 29 Jul 2025 07:01:28 +0000
Manifest next update: Wed 30 Jul 2025 07:01:28 +0000
Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: Dm90QLs7Cd9XVUk4VHwgLb/mEFP+2bml6E1DlF0FIg4=)
2: Z6jijp-NqGecwIu65j-qEMAm0nw.roa (hash: 19TQbomnm0YTugnf3c9Z0fKykpuT1EtKWHuZ0GsZG+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:77:27:c1:38:c3:17:6b:21:62:ce:1b:db:c3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: Jul 29 07:01:28 2025 GMT
Not After : Jul 30 07:01:28 2025 GMT
Subject: CN=67c13dc6251e07209f716853cba96a1d6c46d166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:a1:75:ba:36:55:92:54:2b:e6:df:a6:f5:
83:75:f2:72:c0:d1:eb:e5:2c:5a:73:c2:73:6e:39:
2c:18:74:ff:cf:a3:c4:1b:5c:f3:c0:e9:80:6b:7c:
85:ca:01:7a:31:0e:45:b7:f7:1b:89:c4:73:ab:85:
47:47:56:a3:0b:37:63:7d:46:84:a9:c2:64:14:07:
f1:37:d7:25:7b:d0:8d:86:5f:58:b2:f4:28:f4:e0:
13:3f:ba:75:ac:5c:84:eb:70:8b:d6:f0:9e:a2:fc:
bf:80:17:e2:7a:c2:e3:66:19:7c:ab:90:8a:09:31:
fc:61:58:36:95:cd:3d:78:96:36:bb:60:d3:7c:2c:
aa:19:c5:94:e6:31:51:6e:c5:3b:d2:92:ed:21:d9:
b8:b2:e7:7f:d8:28:73:45:94:67:80:d6:24:8f:bb:
7c:95:c3:bd:4d:b4:23:40:8d:3a:96:32:ba:9c:8e:
fb:21:01:5f:30:68:bd:06:e5:51:f7:8b:70:96:f9:
bd:4c:db:c8:ea:6f:b1:ae:d6:e9:4b:9a:e6:8c:ad:
7d:34:bf:23:ad:5f:db:86:50:5a:6f:4b:f7:f4:46:
59:2c:bc:e8:1e:aa:5a:67:20:5e:f9:90:d4:e4:07:
29:35:1f:ce:ab:e9:43:12:2c:21:4c:ac:00:fa:f0:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C1:3D:C6:25:1E:07:20:9F:71:68:53:CB:A9:6A:1D:6C:46:D1:66
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:21:32:a8:cc:02:d8:73:3d:09:a5:fd:49:16:67:96:8c:89:
ba:ac:25:f1:99:e4:83:55:7e:bc:bb:da:fb:5e:7d:1a:3f:ff:
c4:c7:a9:c2:3c:10:f6:e5:ab:51:b9:56:61:33:a4:ce:c0:40:
f8:2c:a9:96:90:13:23:b9:a3:19:eb:30:03:71:0d:b3:47:55:
a7:fa:af:1c:00:5f:22:2b:84:ae:0a:88:06:7d:2e:7a:70:18:
aa:3a:27:1b:73:99:8d:26:92:15:2e:bf:29:ec:e2:4c:eb:10:
f5:f1:a7:9e:57:69:6b:32:e2:bf:c9:33:e9:be:72:22:ba:0d:
ec:bf:d7:f2:fb:b3:ab:37:cc:bc:80:f1:f3:05:75:62:9f:50:
0e:8b:46:f4:69:28:5c:7e:16:8f:b2:1a:f0:95:aa:bd:63:b9:
0c:11:cc:08:60:92:eb:4e:39:62:42:d0:fe:63:19:fe:52:99:
ea:c3:53:b6:bf:24:52:4d:b9:4f:7d:cc:59:10:13:26:eb:54:
3a:6f:09:2e:7e:6e:14:5f:55:c5:c1:99:52:e6:2e:36:3f:70:
71:05:78:22:9b:49:e7:73:bf:2d:72:26:00:68:d4:9c:a3:cb:
3c:8c:8d:30:51:5c:5b:6f:94:59:17:7a:f3:93:4c:bd:39:56:
f2:c9:d4:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU/HcnwTjDF2shYs4b28NkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZDMwYjc3NGIyODBjMzdlMWM1ZWQ1ZDhhNjljYjlhZjY0
OGIwNjUwHhcNMjUwNzI5MDcwMTI4WhcNMjUwNzMwMDcwMTI4WjAzMTEwLwYDVQQD
Eyg2N2MxM2RjNjI1MWUwNzIwOWY3MTY4NTNjYmE5NmExZDZjNDZkMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWWhdbo2VZJUK+bfpvWDdfJywNHr
5Sxac8JzbjksGHT/z6PEG1zzwOmAa3yFygF6MQ5Ft/cbicRzq4VHR1ajCzdjfUaE
qcJkFAfxN9cle9CNhl9YsvQo9OATP7p1rFyE63CL1vCeovy/gBfiesLjZhl8q5CK
CTH8YVg2lc09eJY2u2DTfCyqGcWU5jFRbsU70pLtIdm4sud/2ChzRZRngNYkj7t8
lcO9TbQjQI06ljK6nI77IQFfMGi9BuVR94twlvm9TNvI6m+xrtbpS5rmjK19NL8j
rV/bhlBab0v39EZZLLzoHqpaZyBe+ZDU5AcpNR/Oq+lDEiwhTKwA+vCTnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfBPcYlHgcgn3FoU8upah1sRtFmMB8GA1UdIwQY
MBaAFNHTC3dLKAw34cXtXYppy5r2SLBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGRNTGQwc29ERGZoeGUxZGltbkxtdlpJc0dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iMDY5ZjktZjE0Ni00MjQ3LWJhY2Mt
YmU2MzA0YzI1MmM3LzEvMGRNTGQwc29ERGZoeGUxZGltbkxtdlpJc0dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9iMDY5ZjktZjE0Ni00MjQ3LWJhY2MtYmU2MzA0YzI1MmM3
LzEvMGRNTGQwc29ERGZoeGUxZGltbkxtdlpJc0dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyEyqMwC
2HM9CaX9SRZnloyJuqwl8Znkg1V+vLva+159Gj//xMepwjwQ9uWrUblWYTOkzsBA
+CyplpATI7mjGeswA3ENs0dVp/qvHABfIiuErgqIBn0uenAYqjonG3OZjSaSFS6/
KeziTOsQ9fGnnldpazLiv8kz6b5yIroN7L/X8vuzqzfMvIDx8wV1Yp9QDotG9Gko
XH4Wj7Ia8JWqvWO5DBHMCGCS6045YkLQ/mMZ/lKZ6sNTtr8kUk25T33MWRATJutU
Om8JLn5uFF9VxcGZUuYuNj9wcQV4IptJ53O/LXImAGjUnKPLPIyNMFFcW2+UWRd6
85NMvTlW8snUIA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 10:50:45 2025 by rpki-client