Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: 9aRzT048kSHJ21T/ILCNo0WXL0/+1Zph0Z1d4Q/mn+U=
Subject key identifier: 32:48:ED:CE:E1:1F:09:0F:95:5E:B7:9D:F8:5E:AF:E2:3B:8B:C5:36
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019A22F753E616F16974F2017AA4DC02E6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1701
Signing time: Mon 27 Oct 2025 00:00:25 +0000
Manifest this update: Mon 27 Oct 2025 00:00:25 +0000
Manifest next update: Tue 28 Oct 2025 00:00:25 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: kR+SEr3afWLD4qm4y9VoN62bbGcaYokQVFqWozUWbOk=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:53:e6:16:f1:69:74:f2:01:7a:a4:dc:02:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Oct 27 00:00:25 2025 GMT
Not After : Oct 28 00:00:25 2025 GMT
Subject: CN=3248edcee11f090f955eb79df85eafe23b8bc536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:11:8e:38:21:8d:af:a4:e4:29:5c:8b:6f:
d6:a1:40:70:f0:b1:c6:de:8c:65:7f:c3:f1:88:c7:
59:3c:1a:78:39:2f:3a:d9:d9:10:8b:a3:fc:fc:81:
54:2a:02:93:fb:33:0a:69:a9:91:b8:75:60:db:fb:
bd:3d:35:da:2c:fe:f4:8d:28:9e:4a:d8:66:5f:a9:
86:bd:b8:51:98:fa:70:18:6d:c8:76:7b:cc:f4:71:
9e:ae:c4:d6:e0:6a:6e:1c:47:cd:4d:8e:38:b9:dc:
e2:8f:d6:e6:ce:ab:5e:d6:4a:b3:97:7d:9e:8b:b1:
ce:bc:d6:3b:1f:c0:61:8a:b0:22:40:fa:32:6e:a6:
62:e6:8a:e6:f0:ec:cb:05:7b:1b:1a:9b:97:18:d8:
5b:0a:08:d4:08:c8:e6:12:85:d7:6d:92:a4:e9:09:
32:6e:30:f1:11:27:39:0c:a6:bb:bc:ef:67:e6:fa:
fa:89:2e:03:76:aa:9d:77:a1:e9:43:57:78:61:e0:
84:e6:13:22:0b:d7:e5:7a:4b:da:b1:e0:2c:4c:aa:
73:4c:9a:0f:6d:25:b7:b5:42:98:8a:9c:7c:61:4d:
53:97:96:cd:5e:e0:34:7a:06:68:68:5c:b6:fb:a8:
0a:4a:a4:69:6f:9b:24:a0:77:8b:22:5b:3d:77:35:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:48:ED:CE:E1:1F:09:0F:95:5E:B7:9D:F8:5E:AF:E2:3B:8B:C5:36
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4b:c3:2a:a4:89:6c:66:a0:ed:f0:e7:82:de:58:35:66:f5:
fe:3c:9c:71:91:0c:e1:8b:bb:84:f5:72:92:11:fc:d2:10:df:
2b:be:8b:b3:8a:97:81:45:d2:a3:89:17:68:be:b9:0d:c8:17:
85:e6:5a:49:7d:5f:fb:7f:14:47:55:85:25:c9:32:76:77:1b:
b9:fa:d4:53:8c:dd:59:52:70:e6:fb:8f:13:e6:72:e4:b0:a2:
f8:2d:96:58:e7:4a:40:fb:69:97:40:02:21:06:34:f9:bd:a3:
39:04:c0:d1:8f:5a:b5:e4:c1:64:ae:3e:fb:75:66:e5:01:3a:
d8:31:fe:50:42:6d:c3:ba:b4:8a:3e:18:f1:b1:dd:9b:ab:33:
dc:0e:e7:89:b7:e0:d3:7a:0c:dc:22:0a:b8:0e:ef:81:76:25:
88:25:2f:37:62:d6:3b:32:81:fc:da:e8:64:ea:34:1e:09:70:
b7:3f:61:7e:50:6f:77:e4:a9:ef:99:8d:45:0c:ea:a2:18:ac:
3f:fb:e0:7d:89:ed:c1:96:e4:fa:5c:c4:19:a2:f4:59:12:ff:
ab:66:d5:f2:de:9c:ec:74:56:ed:12:53:5c:e2:82:cd:b6:26:
34:b7:94:ca:b4:fb:50:91:61:da:dc:a4:13:ec:e8:eb:b7:4f:
87:07:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:38:41 2025 by rpki-client