Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: itzxOIg+JyIdGYEc6PMSMPWfyA7KKyteWbZvkPgnkQU=
Subject key identifier: D2:CE:18:CD:06:CE:0F:EB:54:41:7D:FD:95:B9:B6:F8:86:B8:93:39
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 0197CC4C8124FC04E8FBA1AE3358362913F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 18:00:55 +0000
Manifest this update: Wed 02 Jul 2025 18:00:55 +0000
Manifest next update: Thu 03 Jul 2025 18:00:55 +0000
Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=)
2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: rWa13SH0tzUnpd/zjnR5vTKaqd/xPBaHhHyADMRl9dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:81:24:fc:04:e8:fb:a1:ae:33:58:36:29:13:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Jul 2 18:00:55 2025 GMT
Not After : Jul 3 18:00:55 2025 GMT
Subject: CN=d2ce18cd06ce0feb54417dfd95b9b6f886b89339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:8d:b7:0b:a0:93:a4:2e:cd:82:9c:9f:59:
48:0a:2f:d5:2f:1c:cd:9e:79:33:c2:df:a8:c2:bd:
c1:4f:7a:ee:e0:84:13:e7:df:7d:13:a1:80:af:67:
23:6c:6e:c9:93:23:0d:2d:a9:66:7d:24:60:04:77:
ab:76:35:0f:b9:88:a7:31:00:05:0a:01:94:35:3b:
f1:59:d2:bd:56:54:8f:02:30:e9:35:6d:76:c8:cf:
77:85:12:46:ad:8d:1a:b4:a4:8d:33:a2:dc:d6:f2:
bf:c9:92:05:67:3d:e7:ae:03:b7:11:1b:f2:f7:74:
13:78:3e:cc:67:6b:e9:85:f7:59:ff:72:a4:d1:94:
97:c5:13:cb:f2:23:b2:1e:50:d2:f5:85:9b:bb:af:
69:6c:4c:53:8a:35:21:81:5e:f7:f6:b6:b9:e1:2a:
4c:a1:d0:56:d8:8e:f1:cf:37:f3:f3:81:e9:ff:80:
e8:ce:61:3d:71:e0:75:06:91:cf:8b:72:6b:7c:a5:
59:32:30:d3:25:8e:dd:9e:b6:6e:75:5b:64:d2:82:
d9:1c:da:a8:f1:eb:03:b0:94:9d:49:19:c7:fc:3d:
0d:0c:e1:f2:d5:6e:20:1d:a9:ef:01:51:df:aa:e3:
29:fa:ea:2f:10:4e:83:2d:76:e1:58:04:19:00:2c:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CE:18:CD:06:CE:0F:EB:54:41:7D:FD:95:B9:B6:F8:86:B8:93:39
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:07:85:0e:ff:0f:b8:1c:7a:a4:d9:05:1c:8d:57:d3:c2:d5:
17:fc:ff:31:a4:17:68:0f:38:8a:e3:38:b6:08:01:fa:ff:11:
92:1c:14:20:18:88:2f:dc:e0:c0:78:89:ac:db:3b:d6:d1:08:
b7:08:db:29:c0:86:f2:ac:40:65:a0:0f:b5:0c:77:e6:68:63:
6f:14:d7:07:0f:46:9a:f6:aa:08:2f:db:d2:b7:14:cf:a0:06:
0d:1e:49:4e:c3:d7:1e:0a:a5:db:cf:7a:1a:ad:ab:3e:a9:43:
04:fa:10:28:f8:59:cc:db:d7:1a:a1:93:2e:ec:cf:06:d2:e3:
22:f7:da:89:2a:6f:d5:c4:43:d9:79:cf:ab:df:a1:08:54:72:
65:e0:1e:bf:65:76:2f:a7:19:2d:51:b9:ef:96:22:80:a8:f6:
f4:9c:33:2d:ee:a0:06:30:f1:d2:fb:3e:19:2f:8a:8f:03:44:
f1:3a:b7:cb:aa:ba:8b:47:ec:75:36:1f:d8:6b:ff:94:17:07:
68:b9:7a:69:7e:f7:0d:a8:f7:84:2b:c0:b7:1d:ad:f1:44:90:
76:d5:dc:2c:26:0c:10:2b:d9:fa:da:8d:c7:f8:25:33:af:12:
b1:3c:5a:89:87:2d:0e:70:a4:1a:a1:96:58:9d:e3:c7:68:fa:
26:36:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:19:34 2025 by rpki-client