Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: Q1BsZWfT6ARSib7DJYbCIQrhkU75XaIqJWIMh7KLjFg=
Subject key identifier: B5:D0:FE:35:88:2C:F3:BA:B3:C9:1B:65:22:F5:72:8C:91:11:8E:61
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 01992DB50285EA52639F599F1A0AD8F77E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 09:01:01 +0000
Manifest this update: Tue 09 Sep 2025 09:01:01 +0000
Manifest next update: Wed 10 Sep 2025 09:01:01 +0000
Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=)
2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: cFPUGu14o1c/ax/fDXKvhin17hA2jK+mdMaGLAQssdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:02:85:ea:52:63:9f:59:9f:1a:0a:d8:f7:7e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Sep 9 09:01:01 2025 GMT
Not After : Sep 10 09:01:01 2025 GMT
Subject: CN=b5d0fe35882cf3bab3c91b6522f5728c91118e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:db:46:79:dc:d7:1e:b8:04:8c:16:12:ec:
85:23:5e:17:d7:e7:46:f5:47:0b:82:27:13:77:e6:
05:e4:43:91:f1:52:c6:44:fd:e9:8d:64:a8:f5:53:
63:fd:ec:57:af:3a:9f:36:77:24:d5:ae:8f:9a:fe:
49:95:e5:35:55:1f:9e:a2:cd:6a:c4:c6:73:b3:38:
15:d8:e1:ed:1c:42:1d:6b:c2:ee:3d:a3:97:89:bd:
ce:f7:71:86:fd:7c:6f:b6:3f:b7:93:32:85:61:57:
21:d0:11:e7:c4:1b:55:31:e8:73:c2:fa:fa:cc:23:
16:88:fb:53:14:91:20:55:8c:19:4e:6f:c1:6f:9a:
00:f9:92:6c:0f:e9:0d:84:2e:7e:cc:ea:97:53:93:
c1:7c:6f:79:e6:ac:93:de:5c:36:e1:cd:07:b6:36:
c5:24:a3:06:16:bb:88:f3:75:64:47:ec:d9:66:04:
c1:2c:69:64:eb:ea:8a:53:34:7b:41:11:8a:cc:51:
f1:cd:d2:28:21:0d:0c:d0:1b:78:23:df:27:54:a3:
8e:7a:34:3e:7a:b3:5a:22:dd:c2:66:6a:0d:40:58:
cc:8e:84:e5:62:3d:87:6d:52:97:b3:bc:70:45:cb:
f8:63:81:8c:2b:be:bc:b9:e3:42:77:53:5d:67:92:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D0:FE:35:88:2C:F3:BA:B3:C9:1B:65:22:F5:72:8C:91:11:8E:61
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:de:b6:d9:91:e3:fe:41:67:80:6d:64:b2:70:0f:f4:53:80:
54:23:79:27:af:80:ab:40:e4:5f:9e:90:35:5f:34:ee:85:38:
a5:e6:3f:a0:41:f1:f6:ae:3e:c8:4a:e2:99:ac:35:f3:d8:ce:
2d:00:5b:6f:97:c9:fa:df:d7:61:56:f6:5d:0e:c0:88:63:3d:
50:dd:a0:87:b0:85:95:73:2a:31:2b:a8:97:f5:7c:87:3c:dc:
19:44:fd:32:6a:30:3f:7d:66:16:95:92:23:db:f0:c2:81:16:
1e:79:07:fd:a3:68:22:5a:e2:2d:c7:42:ab:ae:27:97:a9:2c:
17:19:ca:6a:54:f2:0d:28:a3:0a:77:91:44:cd:8c:38:44:1d:
35:22:02:73:21:6c:ef:eb:2d:13:70:05:bc:be:9b:76:85:5a:
57:dd:e9:30:29:9e:e3:19:3c:2a:00:bd:db:a9:6c:62:f4:bf:
44:23:82:b9:15:64:d0:af:c2:d8:0a:5f:e8:58:c5:4b:46:bc:
d3:cb:74:93:04:24:60:85:49:fa:ea:cb:59:1a:eb:f7:45:54:
ec:b6:af:7f:bd:9b:a7:2e:06:0c:8e:f5:05:56:da:92:94:9d:
c6:73:99:5f:20:9e:a6:8d:ea:98:30:04:55:b5:02:04:8c:63:
62:00:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:44:07 2025 by rpki-client