
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: 1ErodD2wnzYkSYMkU7YV9y7gXzn5do0OkVM+Uu8UFkY=
Subject key identifier: 68:92:7F:BD:1E:D9:AF:59:FB:7A:69:4D:12:CF:18:95:45:D5:9C:38
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 01984852A11110C9CA293405586DF84FCB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 0CD4
Signing time: Sat 26 Jul 2025 20:00:31 +0000
Manifest this update: Sat 26 Jul 2025 20:00:31 +0000
Manifest next update: Sun 27 Jul 2025 20:00:31 +0000
Files and hashes: 1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=)
2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: KNArr2lIhiVoKHv7iEMQe5XeMyyKYObVgFDVC9PWB6w=)
3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:a1:11:10:c9:ca:29:34:05:58:6d:f8:4f:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Jul 26 20:00:31 2025 GMT
Not After : Jul 27 20:00:31 2025 GMT
Subject: CN=68927fbd1ed9af59fb7a694d12cf189545d59c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:4e:4d:19:d7:26:47:25:db:b1:ae:b9:ea:
39:66:10:ed:11:d7:87:20:b5:41:ef:f5:0f:4b:2b:
3c:df:25:9e:ec:46:2a:eb:9a:09:4f:41:03:b3:e5:
70:bf:a2:a2:fc:30:f3:2a:46:7c:cb:e3:92:0d:8d:
06:b7:b7:f6:10:3d:d1:8a:d7:0c:af:75:5e:7b:84:
45:35:70:bc:5b:e4:60:70:d7:c8:77:b3:0d:b0:29:
7a:39:92:9b:ee:31:38:d5:72:ef:d8:72:47:7a:b1:
55:51:25:89:85:cc:d1:03:6a:14:14:d0:31:6c:3d:
60:d2:23:de:c4:be:68:80:4c:2d:1d:5c:b6:ae:b4:
ce:6c:f3:aa:e2:f4:eb:ac:74:14:f0:e4:10:40:45:
5d:39:82:2f:8d:3f:94:7b:44:e6:5e:93:48:1a:ba:
79:d3:67:1c:89:fc:8f:e4:32:da:38:0e:ee:bc:26:
40:87:a7:e7:30:ff:bd:74:df:c8:bb:69:9b:bd:56:
de:72:b3:61:e9:07:e9:68:78:81:a2:07:51:8d:27:
e7:14:e6:1c:f8:1e:ff:7d:a9:1e:2e:0c:c3:97:da:
11:d8:2a:a3:93:7b:9f:e2:22:d4:e1:20:15:31:3d:
a9:9b:5e:ec:d6:a3:c2:88:e4:ab:b7:06:ce:f5:da:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:92:7F:BD:1E:D9:AF:59:FB:7A:69:4D:12:CF:18:95:45:D5:9C:38
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a3:69:a0:78:cd:ea:60:e0:9b:bc:5c:52:3c:95:df:82:8e:
5c:22:3b:00:d7:dc:8e:4d:b2:36:a9:6c:ac:06:3e:8a:98:81:
2c:04:84:d1:1c:d9:f6:cf:a6:e3:5a:e3:47:48:be:85:62:bd:
18:90:0d:fa:50:55:99:0d:80:6d:a8:41:3f:d9:2b:44:6d:92:
7d:af:62:f0:d7:9c:b8:1e:6e:22:43:9f:c8:fa:a8:e4:ff:f4:
56:46:2f:32:a3:69:99:99:04:c4:0e:11:3e:a3:21:77:fc:61:
e9:4f:83:9a:59:43:12:01:29:5f:de:79:96:05:41:4f:7d:c9:
f4:61:cf:a8:1c:bf:85:c2:09:aa:5c:50:66:5d:c1:d6:d5:c7:
a8:fe:02:30:b0:08:63:49:a6:d8:e1:8f:09:c5:71:87:9f:21:
99:1e:6e:f1:8b:e1:42:94:ec:7f:ec:06:a8:fe:70:11:0b:6b:
14:a5:08:b5:a4:0b:59:eb:b6:70:60:60:1a:a8:ec:b7:3b:71:
2e:86:5c:e7:47:0d:6d:c5:fc:db:7b:cb:e0:6f:3c:6d:9a:f1:
77:db:4f:75:01:a0:01:9f:83:78:c4:f1:57:c0:8d:62:46:f6:
83:42:33:5f:fc:00:28:fd:fb:50:be:fe:09:71:c1:e4:b2:89:
6c:47:bb:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUqEREMnKKTQFWG34T8syMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3
MDcwMmUwHhcNMjUwNzI2MjAwMDMxWhcNMjUwNzI3MjAwMDMxWjAzMTEwLwYDVQQD
Eyg2ODkyN2ZiZDFlZDlhZjU5ZmI3YTY5NGQxMmNmMTg5NTQ1ZDU5YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDZOTRnXJkcl27Guueo5ZhDtEdeH
ILVB7/UPSys83yWe7EYq65oJT0EDs+Vwv6Ki/DDzKkZ8y+OSDY0Gt7f2ED3RitcM
r3Vee4RFNXC8W+RgcNfId7MNsCl6OZKb7jE41XLv2HJHerFVUSWJhczRA2oUFNAx
bD1g0iPexL5ogEwtHVy2rrTObPOq4vTrrHQU8OQQQEVdOYIvjT+Ue0TmXpNIGrp5
02ccifyP5DLaOA7uvCZAh6fnMP+9dN/Iu2mbvVbecrNh6QfpaHiBogdRjSfnFOYc
+B7/fakeLgzDl9oR2Cqjk3uf4iLU4SAVMT2pm17s1qPCiOSrtwbO9dostwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiSf70e2a9Z+3ppTRLPGJVF1Zw4MB8GA1UdIwQY
MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt
MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl
LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6NpoHjN
6mDgm7xcUjyV34KOXCI7ANfcjk2yNqlsrAY+ipiBLASE0RzZ9s+m41rjR0i+hWK9
GJAN+lBVmQ2AbahBP9krRG2Sfa9i8NecuB5uIkOfyPqo5P/0VkYvMqNpmZkExA4R
PqMhd/xh6U+DmllDEgEpX955lgVBT33J9GHPqBy/hcIJqlxQZl3B1tXHqP4CMLAI
Y0mm2OGPCcVxh58hmR5u8YvhQpTsf+wGqP5wEQtrFKUItaQLWeu2cGBgGqjstztx
LoZc50cNbcX823vL4G88bZrxd9tPdQGgAZ+DeMTxV8CNYkb2g0IzX/wAKP37UL7+
CXHB5LKJbEe7wg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:02:06 2025 by rpki-client