Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: ggYqHNQ5lXlKQlYUc2iuWR2mWepr3UnKyZJ1S9Fgi8U=
Subject key identifier: 02:58:64:D9:51:ED:0B:8B:ED:18:92:93:EC:09:24:DE:9D:66:46:0A
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01976BBD0439D3D9BF619F4BD09EA1A75A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1599
Signing time: Sat 14 Jun 2025 00:00:38 +0000
Manifest this update: Sat 14 Jun 2025 00:00:38 +0000
Manifest next update: Sun 15 Jun 2025 00:00:38 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: puh6SCocN25pkUGEH9F4J6ywME1ANbYnnYTGCMVTHKs=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:04:39:d3:d9:bf:61:9f:4b:d0:9e:a1:a7:5a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jun 14 00:00:38 2025 GMT
Not After : Jun 15 00:00:38 2025 GMT
Subject: CN=025864d951ed0b8bed189293ec0924de9d66460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:aa:31:91:7d:74:c1:4b:13:10:e2:a8:0f:
43:a6:b5:0a:7a:cf:a7:9e:57:e5:7a:d6:3e:f5:ad:
60:8b:3a:b3:9a:f4:54:ff:83:bf:cf:c2:6d:ee:5a:
27:17:11:fa:ec:fc:5d:cc:93:9d:cc:29:dc:80:eb:
58:a3:b2:8f:56:db:2a:0d:f0:60:e9:b1:95:ef:cf:
ed:b7:93:f9:6d:d8:0b:52:18:25:47:b5:99:fd:a0:
da:4c:ac:b8:1d:fe:3c:47:39:eb:29:2c:24:c2:e0:
0e:11:6f:31:17:de:51:d9:e1:4e:70:92:05:5c:02:
04:84:26:dc:40:e8:31:c9:ed:21:41:05:74:2f:8d:
21:df:04:a7:4c:f4:6c:c3:92:61:ad:c9:6b:c5:3b:
01:6b:86:20:67:a5:67:ca:bc:b0:5b:e6:4d:31:d0:
4b:21:b8:53:ca:f1:de:fb:3f:9d:23:1e:19:d7:02:
4c:78:72:31:19:ef:16:aa:0b:9b:0a:ea:ef:ea:51:
61:ae:06:0f:bd:a5:89:a9:da:bd:c3:17:b0:cf:e8:
65:19:48:89:05:59:f9:ef:fc:53:ea:31:48:b5:a8:
81:f0:38:fb:ab:2a:85:11:56:9a:a0:97:d5:c2:99:
90:ae:83:fb:ba:ba:91:1d:e5:b4:98:d7:fa:2c:5b:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:58:64:D9:51:ED:0B:8B:ED:18:92:93:EC:09:24:DE:9D:66:46:0A
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9d:cc:ac:fe:68:11:c4:6e:a3:48:fd:b5:8c:41:01:e5:2c:
59:55:f8:84:43:41:a5:1a:e3:36:37:30:fe:80:89:ba:25:59:
0a:99:23:f6:9c:1d:82:16:cf:cb:8f:d8:5f:79:e9:df:03:b4:
ec:8b:09:20:bc:96:a7:fe:dc:85:d3:b4:d9:2a:f4:86:b4:e6:
48:e0:64:9b:43:f1:ae:54:06:0b:e7:f2:48:d6:2f:78:92:36:
5a:7c:b2:68:30:ac:34:93:69:47:c7:38:af:d0:26:96:ce:8f:
6b:df:3f:7d:b2:7d:dc:bd:99:0d:a9:66:9c:a6:70:4e:df:93:
40:53:5b:34:c3:04:52:1e:79:aa:57:06:8e:0b:9d:13:80:2b:
d4:6f:56:33:a6:26:15:da:9b:53:22:b5:f2:84:45:be:a5:20:
2f:65:e9:8d:5a:9e:33:7c:d8:b3:32:04:0b:f1:ba:93:d3:dc:
40:49:40:8b:79:60:de:e3:34:c3:bf:09:0f:4c:36:75:8c:58:
51:b2:8e:86:f6:96:a9:e9:06:1b:53:89:03:10:da:ab:65:a3:
a8:cb:d5:42:70:4f:a7:10:44:27:91:59:d3:21:de:5c:7f:48:
a2:1c:a1:82:d6:32:b3:0c:35:ee:b4:ca:5f:82:29:a6:b8:5b:
ec:9d:f7:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvQQ509m/YZ9L0J6hp1oiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjIyZmRlYzhmYWRmY2E1OGU3NTc1YzI5ZjEwZTczYWU3
NzU3MTUwHhcNMjUwNjE0MDAwMDM4WhcNMjUwNjE1MDAwMDM4WjAzMTEwLwYDVQQD
EygwMjU4NjRkOTUxZWQwYjhiZWQxODkyOTNlYzA5MjRkZTlkNjY0NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwKqMZF9dMFLExDiqA9DprUKes+n
nlfletY+9a1gizqzmvRU/4O/z8Jt7lonFxH67PxdzJOdzCncgOtYo7KPVtsqDfBg
6bGV78/tt5P5bdgLUhglR7WZ/aDaTKy4Hf48RznrKSwkwuAOEW8xF95R2eFOcJIF
XAIEhCbcQOgxye0hQQV0L40h3wSnTPRsw5JhrclrxTsBa4YgZ6VnyrywW+ZNMdBL
IbhTyvHe+z+dIx4Z1wJMeHIxGe8WqgubCurv6lFhrgYPvaWJqdq9wxewz+hlGUiJ
BVn57/xT6jFItaiB8Dj7qyqFEVaaoJfVwpmQroP7urqRHeW0mNf6LFsweQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJYZNlR7QuL7RiSk+wJJN6dZkYKMB8GA1UdIwQY
MBaAFNJiL97I+t/KWOdXXCnxDnOud1cVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWIt
ZjA1YWEyMjlkNjM4LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWItZjA1YWEyMjlkNjM4
LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC53MrP5o
EcRuo0j9tYxBAeUsWVX4hENBpRrjNjcw/oCJuiVZCpkj9pwdghbPy4/YX3np3wO0
7IsJILyWp/7chdO02Sr0hrTmSOBkm0PxrlQGC+fySNYveJI2WnyyaDCsNJNpR8c4
r9Amls6Pa98/fbJ93L2ZDalmnKZwTt+TQFNbNMMEUh55qlcGjgudE4Ar1G9WM6Ym
FdqbUyK18oRFvqUgL2XpjVqeM3zYszIEC/G6k9PcQElAi3lg3uM0w78JD0w2dYxY
UbKOhvaWqekGG1OJAxDaq2WjqMvVQnBPpxBEJ5FZ0yHeXH9IohyhgtYysww17rTK
X4Ipprhb7J33pg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:07:23 2025 by rpki-client