
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: 5E1LYvUQ/3IEA5x8nJptkdwqRVoeEcZaZhATZRGhIF0=
Subject key identifier: 6E:EF:FA:66:31:38:6D:54:2B:01:34:1B:BC:E9:23:B4:01:4A:06:6E
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 01987CADF1ED09F46C5C3797AFCCC4A50163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 0404
Signing time: Wed 06 Aug 2025 00:00:31 +0000
Manifest this update: Wed 06 Aug 2025 00:00:31 +0000
Manifest next update: Thu 07 Aug 2025 00:00:31 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: an4vNqME1bealkA9zkDP6J+axQA85pOUzdhqLbu0y9k=)
2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=)
3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ad:f1:ed:09:f4:6c:5c:37:97:af:cc:c4:a5:01:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Aug 6 00:00:31 2025 GMT
Not After : Aug 7 00:00:31 2025 GMT
Subject: CN=6eeffa6631386d542b01341bbce923b4014a066e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:36:47:7f:8e:40:0e:3d:97:f1:c5:12:be:91:
5f:77:05:a4:72:bc:f2:9f:b2:00:e5:2e:47:6e:6a:
7a:b2:dd:be:41:03:4b:70:ba:36:ec:45:e0:5b:91:
b5:9c:4f:70:21:06:3b:f9:7d:3f:cf:38:5b:de:2d:
f5:db:bd:61:a2:79:10:23:b3:8f:27:b4:33:54:ec:
1f:82:07:34:64:27:86:b9:89:2e:48:e5:a0:61:4e:
0b:d5:38:71:ab:07:9f:3b:97:49:b1:dc:2e:78:ab:
db:c2:fb:f0:f0:37:56:b3:20:35:27:3a:1a:32:67:
65:9a:b0:aa:7b:93:d9:f6:e0:be:89:37:3b:95:c6:
0a:1e:49:40:e9:0a:5c:e2:1e:1a:1a:db:3e:92:11:
ab:ec:e0:42:3c:70:2a:70:b1:84:2a:3a:9b:1d:14:
30:0e:4d:a9:f0:b1:ac:61:78:07:5d:91:b6:e4:f7:
f6:4d:65:4c:e7:05:ee:c5:12:fc:00:51:94:72:83:
0a:df:2b:6c:98:e7:3a:3a:4e:5a:02:b3:63:a5:30:
3a:9a:be:32:3e:99:53:59:1b:46:55:b9:9f:97:29:
d1:09:88:f0:10:83:55:42:7f:69:10:f4:a8:5f:53:
af:e7:56:06:d3:f5:e4:fd:f3:ad:e5:66:d1:53:a7:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:FA:66:31:38:6D:54:2B:01:34:1B:BC:E9:23:B4:01:4A:06:6E
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c1:ff:1a:cb:63:8f:72:86:83:d2:62:06:9e:b7:da:24:bc:
a3:fb:0b:bb:d2:f7:ed:6b:2e:9b:b8:77:e5:a4:82:3c:1c:58:
a0:6d:d3:ff:2e:f8:b9:4c:60:2f:a1:62:28:2e:58:fb:e6:e0:
cf:68:8e:dd:a7:2c:fa:a9:ce:d1:9d:40:3b:89:30:08:c8:35:
b9:dd:75:34:5a:00:91:4d:49:09:15:e8:8a:68:d1:35:8e:68:
26:06:7a:c9:fd:e6:0d:01:ce:f5:d0:59:c3:9a:49:44:d1:12:
a1:ff:6d:fc:04:6a:c1:bc:f3:10:63:61:64:9a:02:e0:51:4c:
1b:03:d9:04:d4:e2:09:32:c4:0f:07:00:37:bc:6e:d9:92:d9:
54:2f:8d:02:ec:ff:1c:f0:a9:40:7a:0f:08:75:0c:82:64:2e:
a9:ab:ef:b2:29:bd:45:b5:f0:e9:33:69:91:26:76:93:53:56:
df:21:b0:47:e5:91:92:0b:7f:f9:ff:9b:db:05:cb:26:2d:13:
31:d8:b0:71:0a:15:c8:69:83:4f:a2:de:f7:c4:05:b3:ac:42:
8b:8c:a1:c2:14:03:cb:db:ac:df:15:83:63:66:44:27:79:46:
b7:73:57:ec:a9:85:63:11:e8:cf:5a:8b:bd:93:8e:85:c9:72:
99:68:6a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rfHtCfRsXDeXr8zEpQFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmU0NTM4ZjFkZGVhNzdmNTczOTZiYjkzYjkwN2YxNTJk
ZjY5N2MwHhcNMjUwODA2MDAwMDMxWhcNMjUwODA3MDAwMDMxWjAzMTEwLwYDVQQD
Eyg2ZWVmZmE2NjMxMzg2ZDU0MmIwMTM0MWJiY2U5MjNiNDAxNGEwNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zZHf45ADj2X8cUSvpFfdwWkcrzy
n7IA5S5Hbmp6st2+QQNLcLo27EXgW5G1nE9wIQY7+X0/zzhb3i31271honkQI7OP
J7QzVOwfggc0ZCeGuYkuSOWgYU4L1ThxqwefO5dJsdwueKvbwvvw8DdWsyA1Jzoa
MmdlmrCqe5PZ9uC+iTc7lcYKHklA6Qpc4h4aGts+khGr7OBCPHAqcLGEKjqbHRQw
Dk2p8LGsYXgHXZG25Pf2TWVM5wXuxRL8AFGUcoMK3ytsmOc6Ok5aArNjpTA6mr4y
PplTWRtGVbmflynRCYjwEINVQn9pEPSoX1Ov51YG0/Xk/fOt5WbRU6cyIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7v+mYxOG1UKwE0G7zpI7QBSgZuMB8GA1UdIwQY
MBaAFNJuRTjx3ep39XOWu5O5B/FS32l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2Qt
NWRlOTlhNTJhYTM5LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2QtNWRlOTlhNTJhYTM5
LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcH/Gstj
j3KGg9JiBp632iS8o/sLu9L37Wsum7h35aSCPBxYoG3T/y74uUxgL6FiKC5Y++bg
z2iO3acs+qnO0Z1AO4kwCMg1ud11NFoAkU1JCRXoimjRNY5oJgZ6yf3mDQHO9dBZ
w5pJRNESof9t/ARqwbzzEGNhZJoC4FFMGwPZBNTiCTLEDwcAN7xu2ZLZVC+NAuz/
HPCpQHoPCHUMgmQuqavvsim9RbXw6TNpkSZ2k1NW3yGwR+WRkgt/+f+b2wXLJi0T
MdiwcQoVyGmDT6Le98QFs6xCi4yhwhQDy9us3xWDY2ZEJ3lGt3NX7KmFYxHoz1qL
vZOOhclymWhqjg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:03 2025 by rpki-client