Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
File: 0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json)
Hash identifier: HAT+5QE9lkMBDuhtB4YR9fx0EKUOdu88RinDpWEOf5I=
Subject key identifier: 08:13:82:3D:3F:2D:AD:C6:CB:91:AB:77:E7:8E:2D:7F:EA:0B:0F:F1
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Certificate issuer: /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial: 0199307F341DDF01E7594155AABE699F69EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
Manifest number: 0C85
Signing time: Tue 09 Sep 2025 22:01:06 +0000
Manifest this update: Tue 09 Sep 2025 22:01:06 +0000
Manifest next update: Wed 10 Sep 2025 22:01:06 +0000
Files and hashes: 1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: KiIoi1vxwNrerAJAiRNRJ2mNS/dY2AmXlK4cIdu7CEI=)
2: 289E-Jj1-_NHnfIspmJ6dDyJHMo.roa (hash: WdW5apU9mzQj50OlelJWc6bz8hGD+pm8qBunEBj3yw4=)
3: Cs1qBn4VjrBIRHmPJXLiE1xFxCY.roa (hash: MWgCuKpBS+l+AyVioTFlRoxqt43GEYXQ/PHcMYuFOog=)
4: h6nXa6s8OWHMrQG1DSMZKlfJDE8.roa (hash: oPs+na6jf/GLFYpEpQKvloInu3ZuLoam22sOPdiiyEs=)
5: iW93Iii_wpRaBJx4UitIZE8Hirs.roa (hash: nFhRjV7MRzVZ4mQI/ZjUoZj1OD4mh/1+uDWJfZv9Rc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7f:34:1d:df:01:e7:59:41:55:aa:be:69:9f:69:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Validity
Not Before: Sep 9 22:01:06 2025 GMT
Not After : Sep 10 22:01:06 2025 GMT
Subject: CN=0813823d3f2dadc6cb91ab77e78e2d7fea0b0ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:40:e7:21:b6:52:dd:32:91:ba:a3:a2:b1:
6a:84:c7:2e:48:33:0f:a4:fb:7f:97:da:8f:7b:c6:
d5:3d:a8:c7:c4:e9:56:2a:33:04:13:2c:01:8f:ca:
b8:a2:4d:58:62:ce:e4:66:2e:00:ad:ff:4b:86:aa:
fb:d5:6a:b6:03:ce:e9:8c:49:45:f1:39:dc:28:eb:
67:95:e2:9f:8c:90:b1:82:44:ae:94:df:1e:67:4b:
0c:d3:bf:5b:71:73:07:2f:53:3a:5e:9e:cb:ff:be:
08:7e:34:97:9b:d6:ba:c7:2c:c4:c9:5c:77:84:dd:
48:bb:dc:f9:58:aa:a7:b9:09:63:03:af:ca:f1:ba:
11:ed:59:dd:c0:40:50:57:a0:4b:67:22:39:35:14:
6c:2f:96:5e:ab:b1:aa:8e:ef:e5:a8:ec:41:e0:c7:
54:f3:2c:3b:1c:51:77:ac:e4:73:01:5b:af:11:02:
e5:b8:15:27:4e:ae:6e:e5:62:01:a9:36:3f:de:c8:
bc:7f:8f:fc:28:14:db:d8:62:77:12:d5:18:b3:00:
81:31:35:13:b9:6e:ea:95:fa:4a:8c:ac:e9:34:a0:
49:7f:b2:b1:d4:c5:d5:d8:31:5c:56:18:ac:c9:7f:
4b:66:ff:cc:dd:9c:d2:8f:1c:23:0c:b3:61:59:f9:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:13:82:3D:3F:2D:AD:C6:CB:91:AB:77:E7:8E:2D:7F:EA:0B:0F:F1
X509v3 Authority Key Identifier:
keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fa:23:94:e9:06:06:06:3d:39:a4:12:bc:b2:c1:10:f9:16:
e2:6e:c8:dd:41:64:34:e3:3e:2c:b5:47:9b:b3:95:90:50:89:
19:2a:83:33:bf:5e:88:25:42:6d:27:02:97:38:bc:0a:42:a4:
12:2f:78:51:07:58:e9:15:a5:6d:84:7f:87:c3:50:97:77:ba:
1a:44:2b:23:a6:8c:10:22:f6:37:1d:1b:33:75:75:9f:e1:01:
62:d1:31:fe:85:d8:d3:0c:86:ef:42:35:45:34:b3:e5:41:d8:
81:f6:75:52:09:67:3f:ec:9c:52:a3:f7:a3:b2:3f:65:fa:fb:
9c:b1:dd:ad:58:1c:b2:ab:24:f4:21:b0:7b:ca:b0:12:9f:e3:
7a:29:0c:6a:b7:e4:18:ee:3e:fe:59:51:14:0c:b8:b9:0f:2f:
27:d3:dc:e3:1f:30:3b:3e:4c:bf:10:2b:da:85:78:8f:26:92:
5d:75:78:e8:c2:2d:9c:00:2b:73:26:9c:d8:f3:ef:b8:ba:b8:
5a:27:9f:c3:c8:43:72:5f:0a:80:ea:45:41:f9:c9:fc:b1:7b:
ca:ac:a7:a4:a0:a7:9c:f0:33:d3:ad:17:50:d1:a0:f7:19:3f:
33:02:c8:ef:6e:41:af:41:d0:d5:0e:9e:67:fe:d1:d6:21:d7:
b0:1a:1c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwfzQd3wHnWUFVqr5pn2nqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZmQzNDM2ZDdhMTlhNzM0M2ZhODAwZDg3YTAxYWYxODNk
YTMxOGIwHhcNMjUwOTA5MjIwMTA2WhcNMjUwOTEwMjIwMTA2WjAzMTEwLwYDVQQD
EygwODEzODIzZDNmMmRhZGM2Y2I5MWFiNzdlNzhlMmQ3ZmVhMGIwZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVZA5yG2Ut0ykbqjorFqhMcuSDMP
pPt/l9qPe8bVPajHxOlWKjMEEywBj8q4ok1YYs7kZi4Arf9Lhqr71Wq2A87pjElF
8TncKOtnleKfjJCxgkSulN8eZ0sM079bcXMHL1M6Xp7L/74IfjSXm9a6xyzEyVx3
hN1Iu9z5WKqnuQljA6/K8boR7VndwEBQV6BLZyI5NRRsL5Zeq7Gqju/lqOxB4MdU
8yw7HFF3rORzAVuvEQLluBUnTq5u5WIBqTY/3si8f4/8KBTb2GJ3EtUYswCBMTUT
uW7qlfpKjKzpNKBJf7Kx1MXV2DFcVhisyX9LZv/M3ZzSjxwjDLNhWfmvZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgTgj0/La3Gy5Grd+eOLX/qCw/xMB8GA1UdIwQY
MBaAFNH9NDbXoZpzQ/qADYegGvGD2jGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMt
MzlhNjZjYmUxZTRkLzEvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMtMzlhNjZjYmUxZTRk
LzEvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfojlOkG
BgY9OaQSvLLBEPkW4m7I3UFkNOM+LLVHm7OVkFCJGSqDM79eiCVCbScClzi8CkKk
Ei94UQdY6RWlbYR/h8NQl3e6GkQrI6aMECL2Nx0bM3V1n+EBYtEx/oXY0wyG70I1
RTSz5UHYgfZ1UglnP+ycUqP3o7I/Zfr7nLHdrVgcsqsk9CGwe8qwEp/jeikMarfk
GO4+/llRFAy4uQ8vJ9Pc4x8wOz5MvxAr2oV4jyaSXXV46MItnAArcyac2PPvuLq4
Wiefw8hDcl8KgOpFQfnJ/LF7yqynpKCnnPAz060XUNGg9xk/MwLI725Br0HQ1Q6e
Z/7R1iHXsBocVQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:48:58 2025 by rpki-client