Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: r/CQp6jHHZJKBaGKDpenozpw0zyU8q/cyRmH2tmX96w=
Subject key identifier: D1:E2:28:F1:FC:BC:7C:62:3B:09:99:FF:F6:4E:AE:C7:E3:E1:B0:C4
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 019752A29C3D552DFDE8ED54C2650D7B08C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 03:01:17 +0000
Manifest this update: Mon 09 Jun 2025 03:01:17 +0000
Manifest next update: Tue 10 Jun 2025 03:01:17 +0000
Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=)
2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: uOqc0evAIsKfUTo0yaXIGASpZ7yrWAcTs22D7+6kkmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:9c:3d:55:2d:fd:e8:ed:54:c2:65:0d:7b:08:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Jun 9 03:01:17 2025 GMT
Not After : Jun 10 03:01:17 2025 GMT
Subject: CN=d1e228f1fcbc7c623b0999fff64eaec7e3e1b0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:4c:c9:61:86:22:75:e6:54:5e:32:fb:65:
82:ab:bf:31:08:4d:90:4e:cd:fb:ef:8a:00:99:82:
a0:e3:79:d2:15:c0:e5:68:ec:7e:ac:2e:1f:c4:23:
e0:25:05:f1:91:b9:73:08:94:8a:c4:b8:ff:21:0a:
2f:71:12:38:89:99:b0:b4:d4:fa:9a:e5:3d:25:b7:
60:a4:aa:e8:dd:75:4a:49:af:78:e7:1f:bc:e5:71:
70:5c:03:8f:be:aa:25:e0:63:63:eb:fd:f0:52:7c:
e5:1a:72:dc:45:35:e0:63:04:f2:ad:2b:2b:dc:e4:
1f:c4:26:1b:2c:2f:6d:12:5e:24:e4:9d:43:70:ae:
25:80:a1:f5:7d:2c:41:eb:7e:f5:37:aa:52:9e:8c:
ba:e9:d6:ac:cb:54:ea:ea:2a:f5:0b:ed:26:94:e4:
f5:0a:ec:bd:1c:26:f7:29:ea:aa:fb:e5:e2:35:d2:
51:4b:d7:2d:e4:5e:44:9a:bf:3d:5a:00:02:bf:db:
0b:6b:3d:29:36:8d:50:a7:41:a0:5a:4c:52:90:41:
f0:66:c5:42:3a:a9:08:37:27:b0:cd:10:a6:73:9e:
c0:eb:e1:96:01:bc:ff:35:6c:b1:47:c4:68:40:ba:
0d:c5:b2:66:81:3c:fe:a8:e9:72:3a:02:63:3d:14:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E2:28:F1:FC:BC:7C:62:3B:09:99:FF:F6:4E:AE:C7:E3:E1:B0:C4
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:58:0a:7d:88:a3:28:02:d6:21:37:0a:40:ff:ef:97:0f:71:
cc:41:1c:a0:a9:76:bc:7c:98:77:61:3f:3e:67:5b:34:15:53:
9c:06:c5:a8:e8:3b:b7:b2:28:28:c6:0f:9f:c9:51:ce:b0:1d:
6b:4c:6c:ba:6d:ac:fb:0b:6f:b4:ff:36:ee:54:40:7d:38:8b:
01:f7:07:01:a5:e1:29:8f:bd:99:eb:37:c6:db:02:43:b8:d2:
33:25:3d:12:8f:32:7e:c7:2a:ba:ee:a0:c7:00:43:51:dd:bc:
8d:77:86:c0:b6:65:64:47:36:91:cf:97:5d:a8:a9:74:c5:17:
43:71:b0:37:e8:1c:e4:22:90:35:7c:8f:d2:8d:27:1d:8b:7a:
70:64:c4:89:e1:a9:1f:fe:74:27:a9:c6:d9:c5:e6:a2:cc:6f:
93:25:3d:71:44:90:dc:b1:f2:9f:fe:26:a9:76:53:3b:52:77:
40:ab:ea:27:92:74:72:e2:89:62:a6:e4:5f:00:5f:ae:d5:a1:
f1:b5:c2:8e:e8:1a:0b:27:bd:ef:7d:1a:50:39:e1:10:a7:40:
f1:da:7e:93:79:b1:25:c1:ec:77:72:ed:2d:3e:48:42:5a:34:
59:10:a2:32:a5:8a:ea:25:de:4b:2d:54:62:2e:7d:27:bd:e8:
97:23:c8:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSopw9VS396O1UwmUNewjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNzNhM2YyMWExOTQ0NDIxYjRkZGJhN2VjYmM4MzYwY2Nh
NWU2ZmMwHhcNMjUwNjA5MDMwMTE3WhcNMjUwNjEwMDMwMTE3WjAzMTEwLwYDVQQD
EyhkMWUyMjhmMWZjYmM3YzYyM2IwOTk5ZmZmNjRlYWVjN2UzZTFiMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13FMyWGGInXmVF4y+2WCq78xCE2Q
Ts3774oAmYKg43nSFcDlaOx+rC4fxCPgJQXxkblzCJSKxLj/IQovcRI4iZmwtNT6
muU9JbdgpKro3XVKSa945x+85XFwXAOPvqol4GNj6/3wUnzlGnLcRTXgYwTyrSsr
3OQfxCYbLC9tEl4k5J1DcK4lgKH1fSxB6371N6pSnoy66dasy1Tq6ir1C+0mlOT1
Cuy9HCb3Keqq++XiNdJRS9ct5F5Emr89WgACv9sLaz0pNo1Qp0GgWkxSkEHwZsVC
OqkINyewzRCmc57A6+GWAbz/NWyxR8RoQLoNxbJmgTz+qOlyOgJjPRSuKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHiKPH8vHxiOwmZ//ZOrsfj4bDEMB8GA1UdIwQY
MBaAFL9zo/IaGURCG03bp+y8g2DMpeb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEt
MDAwNDQ3NTdmZThhLzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEtMDAwNDQ3NTdmZThh
LzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVgKfYij
KALWITcKQP/vlw9xzEEcoKl2vHyYd2E/PmdbNBVTnAbFqOg7t7IoKMYPn8lRzrAd
a0xsum2s+wtvtP827lRAfTiLAfcHAaXhKY+9mes3xtsCQ7jSMyU9Eo8yfscquu6g
xwBDUd28jXeGwLZlZEc2kc+XXaipdMUXQ3GwN+gc5CKQNXyP0o0nHYt6cGTEieGp
H/50J6nG2cXmosxvkyU9cUSQ3LHyn/4mqXZTO1J3QKvqJ5J0cuKJYqbkXwBfrtWh
8bXCjugaCye9730aUDnhEKdA8dp+k3mxJcHsd3LtLT5IQlo0WRCiMqWK6iXeSy1U
Yi59J73olyPIZw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:53:39 2025 by rpki-client