
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: Qk3a1+nGRVK5Y2gHcL7UYxa430UTDuY0wL5Lv17j6J4=
Subject key identifier: 5E:00:B6:4E:91:A5:E8:5E:0C:F1:B1:10:5C:41:02:25:92:8A:B7:E6
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 01987DC0F6B52875B4FFEA60FEFA62B552B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 05:00:54 +0000
Manifest this update: Wed 06 Aug 2025 05:00:54 +0000
Manifest next update: Thu 07 Aug 2025 05:00:54 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: EcaM3SHvwXTl1SqfQQylI21xKAfne1iFZmjlp/C5d8w=)
2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:f6:b5:28:75:b4:ff:ea:60:fe:fa:62:b5:52:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Aug 6 05:00:54 2025 GMT
Not After : Aug 7 05:00:54 2025 GMT
Subject: CN=5e00b64e91a5e85e0cf1b1105c410225928ab7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:c1:51:89:21:94:47:1f:32:73:34:65:d9:
91:ea:1e:ae:a4:51:9c:f8:7f:3e:23:0c:92:86:e5:
0d:28:70:d6:fb:c7:88:fc:1b:b3:6e:40:34:47:11:
57:64:43:ef:3d:01:32:1d:b2:55:64:87:94:89:18:
6b:f0:dc:50:f5:a2:7d:f9:17:a9:41:85:49:c5:3e:
5a:c6:f5:44:e9:32:13:6a:0c:17:30:6c:8a:c7:cb:
16:c0:1a:23:a6:2d:c5:e3:bb:f3:b3:8f:a9:4a:7a:
5a:33:6f:a1:9d:23:87:e9:57:7b:7e:f9:15:17:f7:
6e:7e:08:a4:49:48:06:f9:73:d1:7f:53:b8:df:92:
e4:fc:9e:ab:ba:9a:ed:41:8c:ee:f5:6d:8f:d1:0d:
2f:1a:f9:43:fd:67:1d:38:01:46:72:37:61:71:8d:
a3:25:7c:9a:f2:54:f4:ce:c5:88:38:e7:9e:74:71:
d3:d1:6e:e1:a8:4f:00:12:55:9c:97:72:80:b8:60:
de:22:57:5c:0b:43:ac:0a:6a:5d:07:55:8e:b4:c4:
72:57:41:7f:78:51:45:e7:30:8a:f9:54:0b:0e:35:
72:03:80:56:7a:c3:26:ff:43:87:11:43:a0:ea:5a:
be:93:8c:78:be:83:b6:bc:84:b6:50:be:5d:4e:bf:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:00:B6:4E:91:A5:E8:5E:0C:F1:B1:10:5C:41:02:25:92:8A:B7:E6
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ce:a2:c7:39:98:1a:44:29:5c:c3:fd:49:24:3b:66:06:52:
53:51:78:3d:67:60:a5:92:55:39:e1:da:c9:0d:d3:af:17:1f:
8b:12:56:0d:13:13:4a:00:ae:39:86:7c:d5:52:f2:fd:c4:0d:
78:1a:11:d6:38:b7:18:b5:9a:fc:75:0c:20:2d:6d:7d:e0:91:
72:75:e3:1c:2a:f1:20:f4:3b:54:06:08:3b:19:d2:99:ef:a4:
cd:1c:30:54:25:82:84:20:63:90:a3:4c:65:f8:e5:c7:f0:8e:
64:42:cf:b3:b6:b7:29:03:d3:c7:39:de:56:e4:d9:a9:8f:6e:
91:31:4e:16:34:e4:3f:bb:55:ff:21:78:9f:82:63:0b:cd:66:
a8:d4:6b:9f:a2:74:79:52:82:34:03:f4:78:8e:6c:97:3b:73:
07:4b:fa:c9:dd:83:76:e3:f8:8c:6c:34:0a:bb:19:0f:f6:0e:
15:7f:54:4b:b0:2c:06:70:e7:c3:92:49:7a:25:95:eb:34:1f:
59:35:18:21:b8:31:7a:77:1a:55:3f:0b:6a:6a:fc:84:dc:ef:
3c:ba:a9:cd:bb:27:8a:94:6d:ad:40:eb:e2:e5:a6:98:5c:3f:
57:f0:b0:03:d1:d6:8f:eb:ad:7d:de:34:ec:2b:7b:93:39:da:
6f:93:15:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wPa1KHW0/+pg/vpitVK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2EzYzBiMTk2ZmRlMGJhNzRjMTQ4N2JkY2I5YzVmYTA1
MzY2NGIwHhcNMjUwODA2MDUwMDU0WhcNMjUwODA3MDUwMDU0WjAzMTEwLwYDVQQD
Eyg1ZTAwYjY0ZTkxYTVlODVlMGNmMWIxMTA1YzQxMDIyNTkyOGFiN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUXBUYkhlEcfMnM0ZdmR6h6upFGc
+H8+IwyShuUNKHDW+8eI/BuzbkA0RxFXZEPvPQEyHbJVZIeUiRhr8NxQ9aJ9+Rep
QYVJxT5axvVE6TITagwXMGyKx8sWwBojpi3F47vzs4+pSnpaM2+hnSOH6Vd7fvkV
F/dufgikSUgG+XPRf1O435Lk/J6ruprtQYzu9W2P0Q0vGvlD/WcdOAFGcjdhcY2j
JXya8lT0zsWIOOeedHHT0W7hqE8AElWcl3KAuGDeIldcC0OsCmpdB1WOtMRyV0F/
eFFF5zCK+VQLDjVyA4BWesMm/0OHEUOg6lq+k4x4voO2vIS2UL5dTr80ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4Atk6RpeheDPGxEFxBAiWSirfmMB8GA1UdIwQY
MBaAFNDKPAsZb94Lp0wUh73LnF+gU2ZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2Et
NmI2MzMzMWVmZjAyLzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2EtNmI2MzMzMWVmZjAy
LzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW86ixzmY
GkQpXMP9SSQ7ZgZSU1F4PWdgpZJVOeHayQ3TrxcfixJWDRMTSgCuOYZ81VLy/cQN
eBoR1ji3GLWa/HUMIC1tfeCRcnXjHCrxIPQ7VAYIOxnSme+kzRwwVCWChCBjkKNM
Zfjlx/COZELPs7a3KQPTxzneVuTZqY9ukTFOFjTkP7tV/yF4n4JjC81mqNRrn6J0
eVKCNAP0eI5slztzB0v6yd2DduP4jGw0CrsZD/YOFX9US7AsBnDnw5JJeiWV6zQf
WTUYIbgxencaVT8Lamr8hNzvPLqpzbsnipRtrUDr4uWmmFw/V/CwA9HWj+utfd40
7Ct7kznab5MVgQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:09:06 2025 by rpki-client