Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: jmPaJXNIQ7IkJg7ZeGcuV0dPOc2lHZCLyJqACEZmYN4=
Subject key identifier: 1F:AF:E8:B7:B4:38:E3:F1:9C:C0:3A:FB:F5:79:B9:CA:A2:ED:A1:D6
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 01989336DC01BF5BD832F0EC5166F98507C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 09:01:42 +0000
Manifest this update: Sun 10 Aug 2025 09:01:42 +0000
Manifest next update: Mon 11 Aug 2025 09:01:42 +0000
Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=)
2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: l6wOFH+wfRgop/mTSgdXy0rDeNhdTdgPOcWSEzphdVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:dc:01:bf:5b:d8:32:f0:ec:51:66:f9:85:07:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Aug 10 09:01:42 2025 GMT
Not After : Aug 11 09:01:42 2025 GMT
Subject: CN=1fafe8b7b438e3f19cc03afbf579b9caa2eda1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:e5:cd:44:90:26:40:d6:6f:6c:45:cf:94:
5b:58:b4:49:b8:63:f1:9b:2f:fd:e3:a3:60:fc:08:
e0:dc:25:27:00:40:ee:07:e1:d1:c8:cb:30:b6:75:
26:a7:0d:2e:7a:38:f6:db:9b:45:04:59:53:12:48:
52:cb:f4:f4:31:23:dd:0c:96:b2:79:a7:c7:63:e8:
16:69:68:64:74:f4:33:e7:4a:ad:57:1e:d2:f6:90:
d5:28:53:db:9e:bf:64:45:c2:9e:c5:6f:5f:dc:aa:
95:75:20:87:6c:6c:af:0f:c8:b6:dc:01:69:f9:90:
51:4a:9a:d0:35:30:d7:22:42:8a:9c:3a:47:4f:bb:
6d:fd:00:cf:a6:f9:16:b9:1c:f0:c5:72:bf:22:67:
7d:9c:6c:0d:3b:67:d7:c5:d6:57:f1:80:84:e9:99:
ed:b6:07:4f:18:65:ef:ab:3c:80:fc:a8:01:39:7e:
0f:ae:38:ec:22:24:9e:fb:49:05:d6:fe:e6:3c:42:
6f:2d:43:ef:7d:dd:a2:7b:18:78:42:d1:d1:ea:c9:
2f:3a:cb:5b:b6:7c:fa:ee:5b:df:69:57:d4:50:6b:
e9:e0:98:e2:db:1f:72:7e:46:4a:0c:cb:12:7b:b8:
ec:77:b2:bf:93:5a:3c:6a:54:92:31:9d:e2:77:a5:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AF:E8:B7:B4:38:E3:F1:9C:C0:3A:FB:F5:79:B9:CA:A2:ED:A1:D6
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5c:56:6f:fa:b9:73:08:f2:7d:63:37:58:57:73:63:f2:76:
ea:10:05:a5:9c:b1:27:3a:a0:22:3e:f5:7b:9e:c2:cc:5b:96:
ea:02:fc:53:f5:aa:98:66:19:be:b9:8e:39:77:50:23:59:42:
86:30:da:4c:8d:2e:02:c0:34:72:f3:9b:c3:16:a0:7a:eb:41:
75:0c:82:e8:80:a9:83:cc:49:3f:1d:38:9b:44:08:99:eb:40:
1f:72:55:23:ba:7a:9d:f0:a7:df:86:4a:fa:20:60:62:f8:12:
50:ea:cc:d2:96:65:31:f2:d3:5b:e8:71:ea:87:9d:31:f9:d8:
96:bd:4b:b6:d2:26:c3:39:a4:93:1c:d0:8f:0f:b3:f4:3d:a4:
5c:b5:71:20:ac:f6:84:b6:d4:df:1a:be:5b:2f:ea:f7:6d:84:
07:26:36:fd:21:e0:9a:5a:45:16:1b:3e:e4:86:81:72:59:58:
41:50:d5:66:47:58:43:bb:f5:dd:32:ad:c4:4a:3c:df:f7:d5:
f4:7d:38:ee:7c:34:2e:42:24:5c:31:0f:de:da:2b:70:36:5b:
74:04:ba:3a:08:41:a1:bb:92:90:95:55:58:a7:1e:85:54:e8:
27:6e:26:c4:90:83:f5:c0:98:50:45:1b:90:2e:66:c9:69:27:
ff:48:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:04:47 2025 by rpki-client