Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier: TQS+61+WmGy8qAQCb9+fZbr+5PDOYw1sH3Ezplk3Tkk=
Subject key identifier: CD:C8:4E:A2:ED:C0:D7:59:65:14:8C:18:F9:AB:F1:43:14:1C:67:CE
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial: 019923D6460F97F86CE11B78059809E68110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number: 0DE7
Signing time: Sun 07 Sep 2025 11:01:09 +0000
Manifest this update: Sun 07 Sep 2025 11:01:09 +0000
Manifest next update: Mon 08 Sep 2025 11:01:09 +0000
Files and hashes: 1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=)
2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: 26hVpU+Nft5XeI7QKF0EBMZhE0LEypbTb7ScMeCy+7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:46:0f:97:f8:6c:e1:1b:78:05:98:09:e6:81:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Validity
Not Before: Sep 7 11:01:09 2025 GMT
Not After : Sep 8 11:01:09 2025 GMT
Subject: CN=cdc84ea2edc0d75965148c18f9abf143141c67ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:18:68:91:13:38:ec:07:26:6a:9f:9a:2e:
b4:4b:81:20:35:5f:a7:1c:84:ad:0f:9d:8c:2b:96:
01:63:42:e9:31:d9:0b:18:d0:a4:08:38:7d:05:16:
b8:0a:27:6f:3e:f1:7b:78:a4:1f:57:3f:17:55:63:
81:d1:a5:f2:74:96:b0:47:53:3e:46:5a:47:46:ce:
d1:8c:67:8b:da:a5:97:cd:5b:84:c5:54:30:11:fa:
18:41:9f:0f:8d:56:03:21:8c:36:70:5b:c9:30:d0:
52:c6:c8:7f:93:3d:d6:b3:f6:d8:34:29:cd:fb:48:
08:98:f0:47:07:30:25:0e:7f:7f:86:16:ef:00:66:
48:a5:91:46:76:63:e9:01:e6:3c:26:f8:7f:c1:ae:
8e:8b:e8:cb:93:c0:e7:50:76:dd:19:af:e6:6b:72:
96:b3:4a:02:5c:70:ff:7e:42:0d:ab:26:10:b8:80:
81:2e:f1:35:9a:49:61:94:10:8a:63:5b:8f:77:21:
c1:9e:d7:8b:bb:80:a4:85:e8:ec:56:b8:3d:9c:f2:
15:d1:f2:3d:aa:32:1c:b4:37:87:91:6f:68:e7:c4:
27:40:9f:c5:c5:ac:7f:6d:2d:c4:be:ed:9a:ba:60:
19:8a:ed:fa:b9:10:95:d6:d0:b4:b4:b8:60:a4:0c:
ea:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:4E:A2:ED:C0:D7:59:65:14:8C:18:F9:AB:F1:43:14:1C:67:CE
X509v3 Authority Key Identifier:
keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:33:7d:b8:68:d4:3c:cf:cd:34:8b:ba:b5:1b:29:e9:e2:d5:
ad:ad:29:6d:54:b7:3e:fd:81:7f:7f:71:dc:49:69:e3:01:a2:
79:66:ae:42:13:b0:68:a2:bb:9f:32:79:34:6e:4e:c8:c8:69:
14:16:88:71:7d:9e:70:fe:df:e1:4a:a1:e9:2d:fe:48:32:9b:
c2:6f:cc:5f:fd:c9:00:05:58:21:b7:51:01:be:19:50:76:b8:
5e:6f:ff:2f:9d:64:cf:ee:96:f2:94:b4:e7:62:83:76:a7:74:
af:f0:e6:2e:80:ac:6d:b8:86:74:42:3f:e2:a4:44:0a:38:81:
dd:95:80:57:fb:8d:61:a6:87:fe:eb:fd:5b:90:6b:e5:a1:d5:
03:1a:b6:00:bf:9d:2f:35:d4:a8:67:0e:aa:51:3d:77:29:9d:
e1:14:b4:af:8f:24:06:14:dc:32:68:66:97:ec:2c:70:82:a7:
18:fa:46:af:2f:e7:56:17:41:78:ca:9f:7c:c1:15:dd:8f:4d:
48:68:85:5c:f5:d3:c4:9f:73:4d:74:ae:47:26:59:be:43:dc:
ef:71:74:20:3c:89:4f:31:30:33:08:d9:4b:26:1c:0f:f4:f9:
5b:fe:67:9c:d6:69:71:76:66:02:18:df:42:c3:81:34:a2:bf:
18:d3:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:09 2025 by rpki-client