Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: XVqiP1XxUKSRBjJGrlGe+T5AqjGrVDsUyPdIklsPEdg=
Subject key identifier: 70:02:C1:E9:58:BF:96:CB:D1:3A:7A:A5:D2:B7:66:52:91:53:FE:19
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 019931915005E535038FAB9CBC11CE670B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 05AF
Signing time: Wed 10 Sep 2025 03:00:30 +0000
Manifest this update: Wed 10 Sep 2025 03:00:30 +0000
Manifest next update: Thu 11 Sep 2025 03:00:30 +0000
Files and hashes: 1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=)
2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: CdDA3HY4aiIM0Uq2uIbtT3OyC0ccbIpymNFrbSbso50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:50:05:e5:35:03:8f:ab:9c:bc:11:ce:67:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Sep 10 03:00:30 2025 GMT
Not After : Sep 11 03:00:30 2025 GMT
Subject: CN=7002c1e958bf96cbd13a7aa5d2b766529153fe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:96:1d:1b:5a:8e:c7:f6:a9:7c:84:d3:e0:
0c:48:1a:a2:b2:47:e6:52:8d:c1:b4:0e:fd:80:f9:
d8:05:ef:89:1b:c0:13:22:39:36:36:c8:cd:17:ae:
db:ce:72:2d:7e:18:34:42:f3:56:4e:ca:98:6e:51:
f8:ad:67:08:e0:1c:73:2e:f9:ab:84:cb:9b:ab:0e:
4c:f3:71:ec:e9:aa:fd:90:2b:d1:cc:e6:14:1a:89:
a5:77:e1:13:94:04:68:5f:e6:18:b6:f2:15:79:47:
ea:60:fa:13:8b:8e:68:dd:51:04:75:1f:70:6c:36:
10:3e:57:10:05:8c:00:94:87:9e:74:d3:2a:35:3d:
e1:0a:f9:af:c2:42:b4:64:c4:8c:bc:bc:ae:28:95:
7c:fd:67:ef:e1:82:42:77:69:88:3d:89:a2:c9:45:
bd:a0:69:b2:8b:99:95:ac:ba:98:2f:db:bc:55:ad:
7e:fd:0f:90:3b:19:0b:11:81:d1:db:70:56:a7:f2:
dd:3e:eb:0f:80:6a:88:d7:1b:e1:06:5d:4d:00:dd:
fa:69:1e:8a:9f:f2:85:7b:90:bd:2f:38:dc:03:19:
67:0d:6e:4f:4b:59:a4:64:8c:83:da:c0:27:ce:b0:
b3:00:42:d4:cf:59:1b:d3:66:4d:04:73:0f:8d:49:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:02:C1:E9:58:BF:96:CB:D1:3A:7A:A5:D2:B7:66:52:91:53:FE:19
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:53:73:cd:07:d8:e6:bb:fe:35:d3:1a:9d:dc:c8:84:e9:6a:
ac:02:2e:48:8c:35:47:07:b0:86:be:5f:65:46:1c:c8:74:f6:
50:7d:bd:ec:35:ce:b7:7a:c8:41:dd:b6:1f:2f:36:58:c5:28:
19:35:6f:e5:a2:f4:aa:9e:1f:e3:51:1a:5b:e4:f8:3f:35:88:
2a:9a:56:fc:cf:8a:e0:4e:1a:5e:f0:c0:f3:bd:cf:0d:7d:f1:
ca:46:aa:11:e0:3b:d9:f7:7b:c4:5c:b6:bb:b6:f5:18:e1:69:
67:23:c4:05:e4:9b:29:1a:73:f3:3a:6c:50:a4:c6:7c:b7:c4:
fb:d8:61:24:59:32:8a:76:67:26:d3:2c:37:b4:1e:98:38:59:
e8:af:c1:66:6b:09:c8:f0:07:78:e9:aa:08:f0:52:94:90:8c:
c4:09:c4:c8:a7:62:1e:3e:2c:56:85:71:c1:a4:93:b5:4e:16:
1e:35:bd:e5:8d:54:1b:ac:56:2c:62:22:46:63:01:9f:43:9e:
8e:56:64:1f:2c:6c:65:a9:26:1c:2c:e5:22:10:94:9b:9a:3e:
81:cd:0a:46:76:23:c0:35:3a:ea:da:81:5f:30:b6:d9:75:da:
f7:7f:b1:2e:4e:48:89:e1:bc:47:a7:42:28:5d:a7:c7:a4:af:
0d:85:6f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:23:49 2025 by rpki-client