Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: RwBQYGQ7ICRopnAAHY0QvQUyc02TSskpeSMsPfysZIk=
Subject key identifier: 43:87:0A:A2:9C:1A:38:37:54:4E:78:DD:00:CF:D2:E1:A5:FD:01:BE
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 019846646EF38C7F0E7C8E090C45A6E0FD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 0594
Signing time: Sat 26 Jul 2025 11:00:43 +0000
Manifest this update: Sat 26 Jul 2025 11:00:43 +0000
Manifest next update: Sun 27 Jul 2025 11:00:43 +0000
Files and hashes: 1: 0i_jhQqN2iNg5AEP50J1N6ocU14.roa (hash: dte6GhHBF0dhj/nHMGGQvO/MzVf6vGP1TT8x/x47jYs=)
2: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: 1Bd8ob83jhMXlTnK4vfaihLYnE/yjIZ2lC5CJxJl8ZY=)
3: wH2BXhQbp4RbWEqazf0ETM0OAOI.roa (hash: WPj1rnPevOFK6Wz2Mo2etzdEIyu2IX1IvghxSjU5v1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:6e:f3:8c:7f:0e:7c:8e:09:0c:45:a6:e0:fd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Jul 26 11:00:43 2025 GMT
Not After : Jul 27 11:00:43 2025 GMT
Subject: CN=43870aa29c1a3837544e78dd00cfd2e1a5fd01be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:85:9c:27:15:fa:00:2c:1a:11:ac:fa:d5:
20:41:89:06:17:23:fe:ee:8b:ca:23:71:16:af:fc:
f6:b4:5b:1f:81:0b:e1:5e:a4:64:ec:28:23:2d:36:
93:93:6e:5b:23:b6:d1:23:63:4f:3e:58:c9:6b:a8:
11:b5:0d:d0:bd:35:fc:88:bd:21:e7:3a:ec:9f:bf:
a3:5d:82:ef:71:40:16:80:88:73:d8:56:a5:8d:74:
f8:8f:8c:31:d8:5a:54:1d:4d:4e:f3:b7:9c:54:92:
ee:3c:4a:ee:6d:b2:12:63:a3:02:16:54:52:c7:7a:
1b:7e:3e:f9:0e:94:5a:72:f8:b0:b8:94:0a:46:08:
ad:61:81:21:c0:23:24:73:3e:8a:e8:1b:c6:7f:e2:
ae:e2:84:d3:fa:9a:98:99:8d:27:7d:79:f5:a1:b0:
27:4a:a3:9c:27:5e:00:f0:21:4e:56:2b:99:3e:03:
6f:ea:1d:ee:9c:21:85:2f:50:ad:c7:86:96:0c:da:
a3:c6:20:de:af:22:53:c2:73:33:ea:34:57:62:f4:
0b:90:53:81:13:a8:ce:84:a9:8b:57:9f:a3:a4:1e:
df:8d:40:24:6c:e1:8f:80:0e:e9:70:69:09:71:3f:
bc:a3:7b:53:c7:62:22:4c:d0:9f:62:89:3d:6e:45:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:87:0A:A2:9C:1A:38:37:54:4E:78:DD:00:CF:D2:E1:A5:FD:01:BE
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:08:bf:d1:b0:9f:e6:64:b8:67:eb:21:a7:ad:7d:0a:42:
3c:b6:77:18:d7:cb:f7:c0:24:a0:75:09:6d:bb:d9:8b:b3:da:
e4:6d:44:3f:76:1a:29:90:11:15:25:0e:6c:74:25:97:c3:95:
98:5b:a0:e4:34:a2:ed:cf:86:24:20:9a:7a:d6:5e:66:7c:53:
69:fb:de:ec:36:01:28:a1:24:14:36:00:3a:27:61:4f:b4:d3:
4c:f6:9e:0b:60:7d:af:4c:66:86:a8:b2:24:8c:5c:61:3e:14:
ff:07:44:d6:df:36:b5:d9:c1:e9:96:e2:2a:da:b3:6d:39:89:
35:1c:f1:b2:1d:b8:12:18:4e:e3:2e:90:e1:7e:ee:b2:00:d6:
20:c2:3f:dd:28:fb:7a:c2:ea:7f:49:e1:69:ea:f1:b8:01:77:
6b:bf:d9:76:1d:8c:79:ae:53:0c:02:1d:2c:13:a3:bf:3f:52:
c6:fc:3c:52:68:33:41:ca:70:e3:0d:77:78:76:e3:26:7d:05:
8d:1e:ed:9d:84:d8:a9:33:0c:91:0a:27:d8:bb:d1:3a:ca:93:
ad:c1:69:a8:79:bc:be:a3:b0:bc:0c:d0:46:ae:9b:07:14:a9:
90:b5:f4:f2:f2:2d:b6:9f:1d:49:9d:ad:4b:10:67:cf:2d:76:
37:64:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:07:18 2025 by rpki-client