Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: gVxTH+BVrnihdN+qnPADFKEgD+QJtWJnXaL70P7Fm7s=
Subject key identifier: 6D:5B:E0:F7:F1:6D:F5:F5:DD:3D:ED:A3:E5:40:28:E6:17:29:5D:74
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 0199FC5848292E5789C5CD430DCDD8975855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 0618
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=)
2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: 9YAyaUV0LafCvLSoWxj8HIVAC6lqIOdF8pdw2zlKSLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:48:29:2e:57:89:c5:cd:43:0d:cd:d8:97:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=6d5be0f7f16df5f5dd3deda3e54028e617295d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:e9:67:f1:c7:f2:77:45:1e:3e:0b:21:71:
9e:15:64:31:93:d4:0f:30:86:5d:5f:cd:fb:9b:7f:
7d:57:93:93:9e:1d:7c:38:33:89:63:2a:f5:26:c4:
d0:00:5d:67:fb:11:0c:5f:ce:6a:15:5e:18:3b:9d:
49:e5:b5:c0:72:41:f2:74:16:aa:66:75:77:ff:9d:
37:b5:2e:b1:13:ed:fa:21:61:5e:eb:07:7d:e6:57:
73:eb:36:31:0a:25:e1:32:3b:2f:2d:17:b2:48:20:
87:26:9d:50:57:21:d6:5d:a2:29:6d:0e:c0:46:cf:
f6:a7:08:4c:d3:67:13:f8:16:17:d7:62:33:f7:2b:
a7:8d:33:db:51:bb:5d:24:99:95:8a:4e:55:00:64:
b4:08:bf:03:ba:ce:71:61:70:eb:43:e5:a5:11:ba:
2b:e6:cb:f2:6a:6a:6b:1e:17:34:ad:53:d4:08:11:
c7:a5:1a:c1:99:08:79:1b:50:6c:22:89:d5:3c:3c:
cc:90:48:d8:1a:89:d0:90:fd:57:c5:f1:c5:9f:d7:
85:06:ad:36:b4:fb:87:93:fc:83:ee:50:1c:eb:c1:
2c:d7:5f:31:56:c5:f4:6e:96:c4:a3:19:dd:9e:b1:
c1:cb:4d:f7:3e:c4:f2:7d:bf:c2:91:24:f2:10:87:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5B:E0:F7:F1:6D:F5:F5:DD:3D:ED:A3:E5:40:28:E6:17:29:5D:74
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:aa:ac:f5:2f:9b:66:d5:63:aa:ff:05:cd:17:c5:2a:13:92:
4e:b9:10:2f:3f:e4:22:37:a2:14:8f:c7:d0:c3:13:1c:f1:da:
6a:9d:4e:4c:2b:41:8c:ee:7d:fa:c6:1b:19:58:34:08:13:e7:
3b:bf:39:bb:93:28:e4:ff:21:2e:85:4a:db:00:98:ae:70:6e:
bc:25:8f:d4:57:06:83:db:a8:7d:b1:86:e9:61:8f:ea:fd:ab:
78:bb:e8:98:bd:bc:fd:3f:7d:b9:c1:85:4f:2a:c5:81:4c:3a:
d1:dd:04:c0:71:76:a8:9c:36:82:33:8e:81:65:0a:cf:18:0e:
a4:8e:14:2d:5b:60:f0:0f:09:e9:f4:45:98:6a:a9:5f:84:35:
5a:91:4a:8b:8e:30:c3:a0:5e:84:bc:e8:90:68:69:08:09:dc:
bd:0b:0e:51:ee:08:b1:2c:aa:ef:21:51:0c:8f:e5:bf:ce:06:
35:84:80:62:06:e4:bc:bd:6b:00:4a:09:a6:0e:b0:48:b3:a7:
bd:9d:17:31:93:3f:66:47:ff:3a:fb:ed:d9:cd:37:61:1d:fe:
62:c5:35:17:96:9e:87:c8:f6:fd:b4:ab:df:3d:46:8a:92:84:
3c:a2:8e:db:cc:36:a6:70:ed:90:6c:ce:73:0f:fd:2a:78:ed:
d0:4f:c1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:15 2025 by rpki-client