Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: IeuqKIa1NqIC66OQezZt97YcKVtgwzOQBp+4l3w3O3s=
Subject key identifier: 76:7A:F5:65:B5:CD:7E:6D:BE:7E:EA:C5:EE:22:DB:55:78:37:18:A4
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 0198D6CD1360C4D886CDF4731F02D3D85BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 0580
Signing time: Sat 23 Aug 2025 12:00:20 +0000
Manifest this update: Sat 23 Aug 2025 12:00:20 +0000
Manifest next update: Sun 24 Aug 2025 12:00:20 +0000
Files and hashes: 1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=)
2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: H0XEE8h87vwSb8dvO0SUm3E7EuqtWf8TuEOvJJsN4vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:13:60:c4:d8:86:cd:f4:73:1f:02:d3:d8:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Aug 23 12:00:20 2025 GMT
Not After : Aug 24 12:00:20 2025 GMT
Subject: CN=767af565b5cd7e6dbe7eeac5ee22db55783718a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:19:96:3a:f5:08:49:4e:17:fe:09:d1:6a:
49:ef:94:9a:48:05:40:f0:f9:18:6c:93:71:55:ce:
5d:9d:e7:cd:cb:2a:39:07:e6:d4:f8:cd:ba:f7:9c:
cc:ce:a2:6c:3d:14:b5:1c:99:c0:2c:a3:e4:0a:d9:
2f:d6:7c:9c:b6:69:b3:a1:ce:17:6b:56:69:4c:1e:
56:a5:53:79:fb:44:df:7f:2e:22:6e:71:6c:a0:4b:
e6:d8:97:02:17:db:a0:34:f5:2d:c6:00:67:d4:64:
f1:e6:72:79:f7:39:a1:a9:0a:87:7a:11:e6:bf:0f:
bf:bc:05:a7:f5:32:4c:3b:40:a4:5b:be:e8:46:d7:
b7:83:c9:93:ea:1f:52:11:ef:28:87:80:e5:dd:5d:
7c:a7:c7:d6:e1:ed:c6:99:6b:11:30:0c:4a:f4:07:
2d:dd:c0:cd:b2:7e:5f:48:f6:33:ae:35:88:89:a1:
9a:0a:1a:33:f1:cf:3c:3c:49:6d:eb:ea:fc:7e:3a:
72:6e:d1:c7:10:bc:c5:4a:28:90:9a:70:a1:e5:35:
63:39:e7:cc:c9:7b:7b:7f:8e:f5:e4:c6:21:c3:55:
10:a7:5d:b5:f6:1a:ad:5f:35:88:cb:fb:60:6a:ba:
25:b2:c3:73:05:2e:96:06:6f:92:a5:da:b6:45:65:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7A:F5:65:B5:CD:7E:6D:BE:7E:EA:C5:EE:22:DB:55:78:37:18:A4
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2a:fa:e7:ee:e1:75:ce:8f:0f:78:ea:96:cb:9b:c7:a6:2b:
c1:f5:43:9b:3c:30:cf:ac:31:98:ae:1e:ac:2e:8a:9e:b7:49:
e9:a3:c9:e4:bd:28:72:ab:38:6d:18:82:22:e2:38:28:47:6e:
e7:be:85:2e:b4:f9:49:fa:36:67:53:fe:2b:e2:e2:12:9d:85:
78:89:9c:ba:b2:06:1a:e8:56:58:0b:cd:60:fa:11:60:e1:b2:
ef:26:4e:fc:6b:f7:49:89:68:fd:3f:26:b1:42:63:32:9f:ac:
f6:9b:e0:16:f9:7f:b8:c5:01:82:83:10:d3:53:2c:d7:b0:95:
04:6b:1b:0c:2b:54:4e:91:47:b0:0f:b2:7a:01:ef:f4:d3:d6:
bb:0e:ae:04:7d:3e:bf:7f:a0:fa:d7:ca:a3:e2:f2:4b:65:3e:
0c:59:14:e4:5b:50:03:9a:39:a0:f9:6c:22:40:9c:93:29:8d:
1d:97:91:68:f2:08:6f:72:00:99:25:ee:a1:51:5c:09:2c:47:
f7:7b:52:56:19:62:f0:10:7f:ee:97:27:e7:31:63:61:cf:7c:
32:b9:67:40:76:b0:10:0e:84:31:f0:3b:73:61:95:82:24:b3:
ab:d0:e4:dc:bd:13:63:e2:b7:31:23:68:10:75:91:27:3e:d8:
8a:15:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:31:33 2025 by rpki-client