Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: 7bozNNLZmRPSZfWe3ZeXmqmCr9wLsLxIaEiBNmnzD4E=
Subject key identifier: 82:AE:69:EF:7F:CA:3E:8F:3C:51:D4:B7:22:58:9A:A0:FB:8E:BD:69
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 01988242E1648CD4ED7B4D22EA5CCE491331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 05B3
Signing time: Thu 07 Aug 2025 02:01:17 +0000
Manifest this update: Thu 07 Aug 2025 02:01:17 +0000
Manifest next update: Fri 08 Aug 2025 02:01:17 +0000
Files and hashes: 1: 0i_jhQqN2iNg5AEP50J1N6ocU14.roa (hash: dte6GhHBF0dhj/nHMGGQvO/MzVf6vGP1TT8x/x47jYs=)
2: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: R24+QKjvYU/2/k3Ulxm5N5cVcAN6hPJzk+TR2ouPdlE=)
3: wH2BXhQbp4RbWEqazf0ETM0OAOI.roa (hash: WPj1rnPevOFK6Wz2Mo2etzdEIyu2IX1IvghxSjU5v1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:e1:64:8c:d4:ed:7b:4d:22:ea:5c:ce:49:13:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Aug 7 02:01:17 2025 GMT
Not After : Aug 8 02:01:17 2025 GMT
Subject: CN=82ae69ef7fca3e8f3c51d4b722589aa0fb8ebd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:8a:3e:9d:3c:e0:51:58:37:d3:59:a9:ee:
ca:fd:81:3f:12:1a:fa:10:55:77:b8:68:be:9c:b4:
f0:07:fa:c0:f2:2a:ba:3d:e5:e1:89:65:1b:c8:6f:
c8:31:a9:de:41:7a:73:fa:4e:54:19:00:77:d2:99:
80:ea:59:78:52:b0:a4:c7:f2:69:f4:fc:b5:c1:3c:
44:46:30:ea:48:0e:13:89:15:20:89:ab:30:11:93:
ff:ee:9e:a8:f8:c8:52:bb:e5:f1:e1:41:ba:88:4b:
d5:7c:e7:8b:7c:a7:4a:f4:af:a9:7b:d3:3d:5f:86:
d1:29:18:88:88:4a:96:77:1a:c3:7e:e5:28:39:f4:
24:f6:8f:46:f6:4c:fe:be:ed:43:a9:0c:74:65:02:
e9:40:f9:7e:d0:c6:bd:26:0e:28:ff:d5:3c:02:77:
3d:e9:e0:67:b8:30:e2:03:88:33:71:c7:4b:6e:48:
d7:eb:37:92:75:b2:4f:ac:12:00:94:7a:37:4b:7b:
c7:f0:f8:59:c4:62:26:7e:35:09:8e:4b:25:01:27:
32:03:fc:0c:9f:9d:60:73:a8:c8:7f:c9:6c:da:ae:
c6:a1:e1:a9:60:5a:db:5a:db:78:91:d8:16:b6:3b:
a6:c4:e4:ec:e0:d5:aa:28:de:cb:7c:c4:79:23:43:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AE:69:EF:7F:CA:3E:8F:3C:51:D4:B7:22:58:9A:A0:FB:8E:BD:69
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:09:c6:fb:3e:78:3a:1b:56:e5:1c:e9:87:18:e4:0b:c8:
71:d9:65:9c:c7:e0:fb:88:24:3c:ba:5d:17:3e:9d:02:21:52:
40:1f:2c:dc:54:29:da:1f:12:c5:11:d5:54:8f:06:5b:8a:78:
1a:75:a7:1c:60:f9:81:12:c2:05:5c:23:ed:39:41:a0:24:ee:
3f:a1:74:e3:c1:76:13:95:3d:df:6f:38:9e:b9:96:c9:08:50:
e2:b2:f2:a0:64:19:25:b4:b8:f0:91:6d:fb:7d:55:1e:60:bb:
a2:1b:9b:1a:1c:40:ea:0f:96:7b:ec:a3:b1:47:04:3d:14:7c:
28:58:52:7c:80:72:bc:5c:23:8f:6c:36:ab:e0:89:86:34:77:
2a:3f:a2:68:0d:c5:76:a8:e5:34:e7:ed:09:43:1e:db:7f:e5:
c1:97:9f:53:44:77:f6:41:9c:b3:79:4f:c7:46:12:10:3e:58:
62:5c:25:06:48:52:40:a8:b9:06:d8:00:01:cd:66:c6:8c:fd:
e0:32:36:76:dd:b8:6d:6b:19:5d:1d:70:a9:98:7a:f9:da:bd:
cf:72:a2:e4:bc:96:1b:7e:99:7e:25:87:15:91:7d:2b:67:bb:
e0:bf:e8:b2:e1:2c:94:06:b6:20:89:55:d9:67:6d:12:1d:f5:
02:f0:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:16:44 2025 by rpki-client