Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: l7+S/9D63rtlEjVX2r+kTkChJ7EXfLi2Xirl+58LdAc=
Subject key identifier: C2:43:B2:9D:A2:0B:EF:4F:EA:65:42:0E:B1:B8:C1:E5:34:73:90:8A
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 0198421976E41C71878E3B42EF1B9DFA7229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 15FD
Signing time: Fri 25 Jul 2025 15:00:21 +0000
Manifest this update: Fri 25 Jul 2025 15:00:21 +0000
Manifest next update: Sat 26 Jul 2025 15:00:21 +0000
Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=)
2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: Gc5dpHN7is77Kk2CGbOxffcmeKPQcYnO56qTVOsvFi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:19:76:e4:1c:71:87:8e:3b:42:ef:1b:9d:fa:72:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Jul 25 15:00:21 2025 GMT
Not After : Jul 26 15:00:21 2025 GMT
Subject: CN=c243b29da20bef4fea65420eb1b8c1e53473908a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:29:eb:58:64:ed:e0:36:56:f6:92:c1:da:
0f:25:61:29:04:9a:d1:91:30:f8:c5:4c:70:7c:da:
63:02:24:22:f6:36:21:66:ff:d6:44:01:70:ee:dd:
ff:9d:48:b8:98:9f:ae:69:62:97:c2:64:c2:97:cc:
10:f3:a0:da:67:f6:7f:74:16:1b:3c:91:1e:05:78:
74:fa:24:ff:8a:cf:ad:46:ea:5f:7e:e9:f8:04:f0:
ec:d8:59:48:c6:df:92:23:b1:74:0c:1b:b8:2a:e9:
9f:78:74:30:2a:88:23:59:f4:e0:c1:cd:40:4b:be:
64:b6:86:83:cd:68:18:34:c0:47:10:33:dd:a1:f5:
0c:81:26:2c:df:cd:6b:9c:2e:24:78:2c:b0:41:7c:
5e:a9:0c:8c:38:29:75:7a:b0:46:0f:1e:91:34:75:
e2:97:e6:2b:40:31:a7:fa:95:df:41:c5:fd:db:08:
c3:e5:80:b5:11:d5:8e:0d:f9:9d:d8:43:22:2e:64:
f3:a7:7c:fa:1b:37:e2:b9:f4:17:4d:65:1f:13:46:
54:d3:25:ba:7b:e2:cf:fa:cb:5f:e9:06:d0:88:00:
27:c9:16:f2:59:dc:57:dc:b7:a2:c6:43:45:9c:0a:
6a:9c:19:91:1e:cb:a9:55:96:72:12:24:e0:bf:a1:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:43:B2:9D:A2:0B:EF:4F:EA:65:42:0E:B1:B8:C1:E5:34:73:90:8A
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4a:65:a7:36:bf:25:78:bc:70:57:2f:0b:5a:4f:67:c0:2e:
52:d2:6e:5d:d1:24:db:94:81:33:d6:c1:51:55:71:b1:02:88:
bd:b8:c4:20:8b:be:ac:b8:42:94:ed:94:b0:cf:63:7f:0a:0a:
a1:d7:a9:8c:f5:5f:ab:f6:84:78:64:3c:b3:d1:35:ac:98:30:
42:30:bd:f7:0e:f2:fc:be:44:a9:7f:0f:e4:79:0d:18:d7:aa:
a0:df:cd:99:7b:4a:ac:4c:c7:42:56:0d:04:05:d6:f1:28:bf:
c4:ee:2d:53:6d:b4:ef:03:ce:7f:96:97:12:20:89:28:14:2e:
43:0c:7a:ac:01:01:74:d0:1e:b1:d5:55:57:62:f7:50:f7:2f:
61:4f:c2:82:46:10:a8:4b:39:a3:8c:a5:62:73:63:0d:e7:5a:
19:a8:97:b9:61:7e:7c:a1:de:e0:7a:20:26:63:71:d5:49:1b:
fa:b5:9d:7d:33:db:85:66:84:fb:27:54:b3:3f:fa:a3:2f:83:
59:84:66:8c:18:db:b5:6b:62:20:e0:7e:4d:a1:47:54:3d:1c:
01:05:31:4a:15:82:c4:ee:a6:fd:de:63:ea:89:27:05:41:80:
5c:9e:6d:6f:b4:1c:a6:b8:1c:00:c6:10:7c:6c:e6:13:0c:4a:
1a:58:76:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhCGXbkHHGHjjtC7xud+nIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNzNhM2YyMWExOTQ0NDIxYjRkZGJhN2VjYmM4MzYwY2Nh
NWU2ZmMwHhcNMjUwNzI1MTUwMDIxWhcNMjUwNzI2MTUwMDIxWjAzMTEwLwYDVQQD
EyhjMjQzYjI5ZGEyMGJlZjRmZWE2NTQyMGViMWI4YzFlNTM0NzM5MDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3Qp61hk7eA2VvaSwdoPJWEpBJrR
kTD4xUxwfNpjAiQi9jYhZv/WRAFw7t3/nUi4mJ+uaWKXwmTCl8wQ86DaZ/Z/dBYb
PJEeBXh0+iT/is+tRupffun4BPDs2FlIxt+SI7F0DBu4KumfeHQwKogjWfTgwc1A
S75ktoaDzWgYNMBHEDPdofUMgSYs381rnC4keCywQXxeqQyMOCl1erBGDx6RNHXi
l+YrQDGn+pXfQcX92wjD5YC1EdWODfmd2EMiLmTzp3z6GzfiufQXTWUfE0ZU0yW6
e+LP+stf6QbQiAAnyRbyWdxX3LeixkNFnApqnBmRHsupVZZyEiTgv6FFVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJDsp2iC+9P6mVCDrG4weU0c5CKMB8GA1UdIwQY
MBaAFL9zo/IaGURCG03bp+y8g2DMpeb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEt
MDAwNDQ3NTdmZThhLzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEtMDAwNDQ3NTdmZThh
LzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0plpza/
JXi8cFcvC1pPZ8AuUtJuXdEk25SBM9bBUVVxsQKIvbjEIIu+rLhClO2UsM9jfwoK
odepjPVfq/aEeGQ8s9E1rJgwQjC99w7y/L5EqX8P5HkNGNeqoN/NmXtKrEzHQlYN
BAXW8Si/xO4tU2207wPOf5aXEiCJKBQuQwx6rAEBdNAesdVVV2L3UPcvYU/CgkYQ
qEs5o4ylYnNjDedaGaiXuWF+fKHe4HogJmNx1Ukb+rWdfTPbhWaE+ydUsz/6oy+D
WYRmjBjbtWtiIOB+TaFHVD0cAQUxShWCxO6m/d5j6oknBUGAXJ5tb7QcprgcAMYQ
fGzmEwxKGlh2Sg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:40:33 2025 by rpki-client