Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: 5vV46+9A3wCTKucy6CUVCchNKoWCab6HKV987xhtqKk=
Subject key identifier: F3:BB:AD:8D:DC:FE:32:AB:3B:2B:54:FC:EE:89:E6:53:19:08:C2:F7
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019931921DC47A7C812A9856B25D58824CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1684
Signing time: Wed 10 Sep 2025 03:01:23 +0000
Manifest this update: Wed 10 Sep 2025 03:01:23 +0000
Manifest next update: Thu 11 Sep 2025 03:01:23 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: 1RgNOSoicxWITNwvffGTriEvx+nICa2QWr97ResQKQk=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:92:1d:c4:7a:7c:81:2a:98:56:b2:5d:58:82:4c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Sep 10 03:01:23 2025 GMT
Not After : Sep 11 03:01:23 2025 GMT
Subject: CN=f3bbad8ddcfe32ab3b2b54fcee89e6531908c2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:61:a1:73:92:10:49:ce:57:36:17:95:cb:
5a:02:89:d6:49:93:be:cb:3f:77:f8:eb:78:d4:f9:
0f:83:9a:b9:e8:1f:3c:e6:32:1c:47:d4:a5:49:25:
ad:56:ad:c5:fc:d9:ed:11:49:6b:30:8a:98:89:ca:
16:06:26:1c:76:e9:a9:60:e8:bb:58:19:00:ca:ec:
f4:3b:09:f0:c0:d8:c7:7f:29:b9:d7:9e:a7:80:0e:
b6:8d:01:dc:80:c2:69:d3:a3:ca:8f:13:3b:75:d5:
e4:68:2c:f6:93:e3:ba:df:64:6a:8c:f9:06:d9:46:
04:1d:96:34:4e:99:94:28:a5:80:7d:b1:e0:ed:31:
8c:92:a1:3f:0f:48:56:51:1e:7f:a6:11:9a:a4:94:
6a:3e:e0:b9:87:b0:56:62:65:3b:43:df:c7:43:6c:
0d:46:30:f6:82:f3:a3:02:ae:8b:15:ca:35:d6:ad:
1f:be:52:d3:0c:9f:ed:5e:9c:62:77:d4:2b:58:36:
ef:0b:cf:87:5c:70:e2:0e:1b:7d:a4:36:85:f8:2b:
9a:f4:4d:fc:7d:c5:05:e7:89:83:bb:fd:f6:10:19:
a5:e0:19:8c:cd:54:e9:ac:8a:f7:76:49:d0:cb:25:
bd:8f:1b:8d:0e:7f:b5:dc:eb:5e:e8:cb:42:23:fb:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:AD:8D:DC:FE:32:AB:3B:2B:54:FC:EE:89:E6:53:19:08:C2:F7
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:12:86:be:d3:6d:f5:9b:98:0b:2a:26:cb:43:e6:4c:e1:f2:
dd:98:29:a1:42:7b:b2:b6:5f:3a:72:90:4a:9c:06:32:3d:d0:
7b:7c:cd:79:10:cb:62:34:6a:91:ad:95:67:22:9f:79:a6:a6:
fb:46:d7:85:9e:3b:1a:94:a2:ee:01:89:44:f1:33:0d:9a:0f:
1d:e2:63:f6:91:da:73:29:55:38:a4:2d:ee:8c:4b:34:35:25:
f9:1e:40:51:72:20:5e:71:6c:04:8f:e6:4e:a6:0d:86:1d:a7:
43:b4:ff:5f:6c:a0:47:0b:69:d5:cd:89:61:d6:ad:40:d3:06:
52:5a:09:a5:6f:bc:8a:f3:4b:70:9d:a5:46:dc:7c:b6:8f:8f:
12:9a:95:81:12:de:c8:8e:27:8b:2d:0b:38:fd:5e:25:f7:58:
d5:46:fd:e7:f3:59:fa:5b:75:9b:b4:b4:f9:45:03:a8:f2:72:
07:67:07:96:31:3f:89:ec:a8:e7:53:09:05:2a:fc:b3:14:3a:
5c:3c:40:22:09:d5:1d:f2:5b:7a:fc:26:73:1d:77:a3:af:02:
35:bc:d2:b5:4e:c9:fd:7a:be:67:12:de:b3:94:b3:da:9d:b7:
ee:bd:92:ba:56:bf:94:b6:a0:19:64:61:5f:be:59:6c:7d:0d:
1a:8d:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:14:56 2025 by rpki-client