Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: PRnES/C8NlYwWsS/ycL/LBXa4DOPp0lI88kPR+8zck4=
Subject key identifier: 78:38:5D:8D:7B:68:2A:87:31:DC:81:31:7F:5C:BB:64:0E:8C:91:A6
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 0198D8BD61AA2F6F8584A19254AD67349912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 21:02:26 +0000
Manifest this update: Sat 23 Aug 2025 21:02:26 +0000
Manifest next update: Sun 24 Aug 2025 21:02:26 +0000
Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=)
2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: 7JZzmPyJKnAeCN18MfbhmByBg+fwgnS4MCZbwe7tbys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:61:aa:2f:6f:85:84:a1:92:54:ad:67:34:99:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Aug 23 21:02:26 2025 GMT
Not After : Aug 24 21:02:26 2025 GMT
Subject: CN=78385d8d7b682a8731dc81317f5cbb640e8c91a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:4d:55:75:e0:6e:90:b9:a4:9b:d7:5c:d7:
9c:f3:b8:c2:a4:08:85:24:9b:2a:83:1c:aa:55:b6:
ff:b4:57:c0:18:33:22:47:b0:f3:5e:76:76:02:b5:
16:2f:b5:b6:51:24:d9:56:f1:51:98:89:d6:85:86:
bd:8c:f6:7f:ce:70:fe:13:27:e1:66:b5:2c:82:0a:
e9:29:cc:29:d3:34:96:7c:a2:01:8b:cf:ba:af:4e:
a7:c5:da:cc:de:47:71:7b:a3:cc:20:5f:11:4e:9e:
ac:f9:83:f3:bb:cc:01:1b:1f:47:59:27:0e:b7:b1:
ba:6f:d6:a3:af:36:c7:c2:c4:99:d9:8c:b4:21:f5:
6b:7f:fd:f7:e2:79:fc:1a:b5:9c:e5:bb:5a:4f:85:
30:f4:5e:cf:d4:1b:97:f9:89:4f:9e:68:3e:8b:9e:
52:28:0d:de:64:e6:63:93:ba:80:e9:4f:f5:5f:37:
cd:4f:d5:8c:8b:1a:06:24:9a:ee:7b:f0:f6:03:ed:
fe:84:53:95:0a:9f:55:f3:96:e5:d8:15:d9:8f:64:
b2:46:52:33:c1:43:f7:42:00:31:de:f2:a3:5e:3b:
e4:cd:7b:0f:4f:b9:3f:13:be:89:2e:e6:dc:28:da:
6a:9c:aa:b7:42:b7:64:24:7b:48:7c:7e:ed:58:4d:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:38:5D:8D:7B:68:2A:87:31:DC:81:31:7F:5C:BB:64:0E:8C:91:A6
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:44:86:5a:1c:5a:87:7e:e5:64:00:a9:ae:1c:54:ee:99:55:
71:c2:6e:d5:a6:98:62:59:d6:98:95:9c:19:fb:b4:05:7d:16:
34:61:26:0e:8c:28:84:5a:c1:ec:33:40:4b:0f:b0:1b:ec:52:
64:f3:0f:5f:b9:1f:7d:a6:5f:e1:10:e3:da:86:a8:f0:7b:90:
5c:a9:c7:83:72:4b:55:d6:e3:79:c2:b9:13:f6:b2:a7:e3:e4:
be:1e:1a:7f:0b:dd:71:d1:aa:92:7b:ae:88:e2:87:bb:9e:b6:
c4:f5:e0:8a:83:ed:f2:67:1d:bf:27:d5:ee:40:98:4c:a6:34:
81:19:b7:1a:32:5f:7b:1c:12:1f:40:f3:c7:8f:3d:d8:71:bf:
f7:d4:36:73:93:47:63:b1:5e:ba:26:da:13:71:aa:f6:45:c2:
4a:31:5c:97:81:ba:9f:dc:84:b8:19:18:cc:35:ed:2b:6f:fd:
be:07:2d:07:a1:64:fe:40:92:d0:50:92:e0:6d:23:24:cf:9c:
78:f3:e2:be:39:ce:ec:52:62:11:35:3f:0b:b7:28:25:30:ca:
41:e8:b5:44:f2:db:5b:e7:9a:d6:72:41:d6:54:b8:83:81:40:
6e:2f:08:70:3c:fa:2d:c4:5b:a0:d4:b6:4b:77:1e:14:e0:e9:
16:87:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:01:36 2025 by rpki-client