Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: 5l0596+3paXcSh3iFdsd5nFA2e3ABN4xNhUITJdA/Co=
Subject key identifier: 72:00:B0:E0:1D:88:69:39:BE:B0:24:E6:DB:57:40:3C:1E:70:EF:91
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019A533F3A5248ABD5A3ECF8F4C7210B019F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 171A
Signing time: Wed 05 Nov 2025 09:00:43 +0000
Manifest this update: Wed 05 Nov 2025 09:00:43 +0000
Manifest next update: Thu 06 Nov 2025 09:00:43 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: 02hM7usYqj/QiRHHtyeZlvF6vK3D8yneKhCR8W0tDUc=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:3a:52:48:ab:d5:a3:ec:f8:f4:c7:21:0b:01:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Nov 5 09:00:43 2025 GMT
Not After : Nov 6 09:00:43 2025 GMT
Subject: CN=7200b0e01d886939beb024e6db57403c1e70ef91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:59:1f:37:1c:0e:31:35:9c:cd:78:26:27:
b5:5f:7b:f0:63:a7:c4:ce:ec:3d:25:16:02:d7:78:
28:9a:20:94:62:4c:53:93:af:a6:79:7d:f3:36:0d:
b1:62:bc:8f:30:4c:06:84:d9:c0:70:5d:dc:49:6a:
86:c2:94:0d:4c:a3:52:19:27:57:ef:d4:5c:ad:96:
3a:4e:ff:8c:51:66:95:3c:e9:1d:7f:2a:7d:26:31:
e2:2b:82:50:79:96:7c:45:89:49:41:f3:01:6c:b5:
e2:9a:af:37:f0:dd:b1:a6:ab:14:92:f0:10:98:72:
1d:85:a2:b4:8a:28:78:5a:69:42:25:f6:cf:32:d8:
15:2c:6f:cd:0d:0f:26:c0:42:46:9b:60:ce:51:c0:
e5:20:b4:90:58:80:c5:5a:95:42:27:12:68:3a:0b:
91:52:4f:48:06:50:47:27:4c:20:c6:fc:68:e9:28:
88:55:98:4b:66:ca:f6:ea:c6:45:20:21:60:19:62:
84:4a:70:a2:0c:c7:bd:2a:01:fc:8b:84:03:7c:b9:
ba:11:b2:64:dc:42:b4:d6:77:6a:7d:78:8d:13:49:
c6:e5:fd:62:1b:f7:12:59:7d:99:d4:6d:0a:eb:18:
fc:f3:c9:ac:70:04:f1:2e:b7:e5:dc:00:b6:47:d4:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:00:B0:E0:1D:88:69:39:BE:B0:24:E6:DB:57:40:3C:1E:70:EF:91
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2c:1c:d8:53:96:34:9f:8a:ba:54:ee:88:50:2e:d0:88:1d:
f5:2b:96:70:d7:fb:51:29:a1:16:f2:f1:c4:43:7f:a5:0a:c4:
1c:7d:eb:dc:03:5b:6a:3f:5a:df:b7:e0:22:7a:2a:f0:f8:15:
0d:1a:d3:fa:ce:48:3d:e2:c6:5d:cc:20:e6:34:7a:db:2c:d1:
98:88:1b:f8:b7:95:31:4f:3f:66:8d:14:18:23:d1:7f:f4:50:
50:e6:4b:23:27:6d:47:2b:ef:d9:81:7e:05:25:75:bc:a3:6f:
b4:a9:a7:7c:dd:c7:5c:17:38:a0:5f:83:39:90:ab:52:57:4d:
c6:be:40:26:2a:6f:f8:e8:a3:6d:f9:03:17:7a:75:31:84:66:
ea:c1:ca:ff:77:ba:27:56:b5:4f:3b:85:0c:e1:f9:f5:ef:55:
28:22:55:14:53:7b:f2:61:30:48:af:2d:21:54:4a:f1:9c:ab:
98:2f:58:41:fc:7f:f0:ef:dd:33:12:be:5a:07:00:2c:8d:55:
bd:47:76:eb:1f:23:64:05:e0:18:47:b5:a0:3b:63:11:e6:97:
4c:d3:b0:81:bc:86:69:27:68:cb:c2:2d:5c:5b:34:fc:4d:a8:
ed:7d:79:32:1b:fc:74:86:77:00:d2:2c:c3:0e:2e:d6:7d:6e:
09:3f:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:11 2025 by rpki-client