Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: 0FE78Vfwvl/aw/QfDC/Z3MAOoZPD3J2Y3dwPGLhJ6a8=
Subject key identifier: C4:A5:35:CD:CF:30:5D:8A:31:35:6C:CD:03:FC:88:7C:89:54:85:F1
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 019874505A1212DFD2D395AA8D68C9BABCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 054D
Signing time: Mon 04 Aug 2025 09:01:19 +0000
Manifest this update: Mon 04 Aug 2025 09:01:19 +0000
Manifest next update: Tue 05 Aug 2025 09:01:19 +0000
Files and hashes: 1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=)
2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: M7+ClRZcv5eQb0Vwhk/kH7ZLskAW4NlyQDt3Ov4c2RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:5a:12:12:df:d2:d3:95:aa:8d:68:c9:ba:bc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Aug 4 09:01:19 2025 GMT
Not After : Aug 5 09:01:19 2025 GMT
Subject: CN=c4a535cdcf305d8a31356ccd03fc887c895485f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:7d:af:b2:e2:19:88:8e:0a:3d:74:75:30:
9f:2c:da:4c:22:40:cd:6c:92:d4:3e:0e:87:5e:49:
2b:68:f4:b9:9f:48:46:e0:d2:51:3d:fc:6a:ff:d3:
c7:d9:87:0f:d5:22:4d:ed:19:24:db:73:98:41:6d:
bf:12:0f:66:ed:65:84:96:2c:32:3a:ec:cd:19:56:
02:0c:b1:49:0d:ea:50:fd:cd:2a:72:41:8f:1f:2d:
7f:14:f3:a9:f3:e4:7b:99:57:f5:56:86:1f:d8:82:
43:5c:60:50:08:83:e8:f2:1f:73:2e:7a:76:f1:28:
84:33:c8:28:ad:80:1b:3a:81:59:bd:56:03:23:01:
90:fd:a6:40:45:fa:b6:14:24:af:b6:b4:4f:97:e3:
29:0d:2e:41:9f:de:25:68:a0:96:6d:de:a8:18:87:
86:87:8a:5c:89:9c:2b:5a:37:83:05:2e:63:c5:d9:
87:e5:a9:64:63:ca:b8:ee:3b:56:f5:50:b3:ae:c7:
3d:2c:42:7d:05:79:70:2f:29:3e:3e:35:ff:62:d9:
2e:6d:2c:7d:c4:e2:32:e0:99:d1:1e:db:7e:b0:cd:
fa:d2:30:8d:3d:ee:fe:c1:d2:71:17:8b:44:cd:f4:
4b:e5:d4:f0:00:ee:f8:b5:3c:ec:c7:76:1e:bd:31:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:35:CD:CF:30:5D:8A:31:35:6C:CD:03:FC:88:7C:89:54:85:F1
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:29:8d:48:6e:e1:05:b6:3e:35:a2:3a:b8:b3:02:1d:27:f2:
3d:56:ca:de:76:88:a4:0f:b1:3e:3b:ea:a7:a4:f9:20:f5:61:
d1:4c:02:ff:e6:c1:3a:bf:9c:01:16:f4:15:2d:9c:fc:50:ef:
7a:4f:57:ed:61:b4:9d:bf:5e:d6:16:67:7d:79:da:9a:17:45:
63:c9:04:5d:51:ee:41:b2:e7:a3:84:f4:37:8d:47:c2:5d:d2:
d1:9d:fb:64:1a:48:a1:1c:52:9b:55:76:23:46:f8:fc:9c:bc:
ce:9b:9f:94:f3:cc:37:b5:af:f3:61:c3:9b:e7:72:c0:d8:44:
42:15:45:3b:89:d0:cc:9c:5a:32:e4:52:f3:f9:17:8e:cb:58:
af:0b:54:3b:33:44:ef:01:28:0c:b3:58:f2:68:2f:94:f3:84:
d1:d0:c2:66:25:17:e0:ac:d3:a8:e6:c4:f5:fc:37:ff:bf:83:
34:f7:a0:36:87:b0:09:56:62:d1:3c:00:1c:a7:df:44:29:b8:
c2:68:8f:10:24:22:6f:88:5e:d3:be:bb:1a:ca:82:2a:50:9a:
46:4a:af:e5:f9:44:a0:5f:06:98:51:cc:ed:54:bb:f1:36:a5:
c9:b5:21:0c:c9:36:75:aa:22:c0:12:81:fe:26:9a:d4:5a:04:
b9:0d:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:06 2025 by rpki-client