Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: kO8ainhoZpc3ZC9Krf75gWb6HWbHLE7S80b3MauyL/w=
Subject key identifier: 2C:99:2A:1B:44:8F:F1:56:4B:B4:39:4C:07:15:D5:E6:B8:7C:09:C2
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 01976DAC23116B125E35E153AADDD008761B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 04C5
Signing time: Sat 14 Jun 2025 09:01:27 +0000
Manifest this update: Sat 14 Jun 2025 09:01:27 +0000
Manifest next update: Sun 15 Jun 2025 09:01:27 +0000
Files and hashes: 1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=)
2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: 6ULqdm7z1UCXW8RGymSa7cbF2Awv8W5WaVXMYnvh25I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:23:11:6b:12:5e:35:e1:53:aa:dd:d0:08:76:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Jun 14 09:01:27 2025 GMT
Not After : Jun 15 09:01:27 2025 GMT
Subject: CN=2c992a1b448ff1564bb4394c0715d5e6b87c09c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:6e:92:7b:17:ab:f9:12:d2:b3:34:02:da:
66:f7:c4:1f:20:36:ca:e2:b0:12:c9:25:da:31:40:
9e:ca:c8:d1:b2:b0:dd:9e:1c:fd:70:6b:b3:ab:b5:
91:57:8d:50:c5:97:fe:93:b2:87:2f:1f:9c:4c:2b:
6c:1e:dc:bb:28:a8:21:5b:d8:08:ec:0f:13:8b:70:
b7:f4:ed:99:dd:56:88:e7:e6:f4:74:fd:95:ce:4c:
f8:7e:05:91:e2:98:55:b3:1f:c2:d8:23:a6:3c:70:
2e:ec:dc:5a:9f:f0:13:15:ca:60:62:f2:50:04:3c:
82:12:f7:b2:48:fe:49:ba:91:d8:6d:58:8f:e5:a1:
29:60:1e:33:57:8b:31:56:4f:04:50:56:77:c7:2e:
ce:61:8e:3a:8e:21:a3:6b:90:fa:82:3c:f8:85:4f:
6c:9d:dc:7f:88:5a:27:41:55:86:bd:85:91:aa:a3:
a3:f9:1e:b8:c5:18:59:dc:8f:ff:43:c9:91:0c:07:
71:11:9b:5d:ab:17:df:f6:26:b8:97:8d:88:b6:40:
f7:d5:d5:72:78:98:f0:52:7c:f6:f6:69:cf:de:b0:
0d:6a:68:88:f2:c8:e6:ef:31:3b:69:e4:d8:e3:e8:
76:09:1d:49:3c:9d:d3:b8:ab:82:70:eb:62:50:00:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:99:2A:1B:44:8F:F1:56:4B:B4:39:4C:07:15:D5:E6:B8:7C:09:C2
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:49:e6:a1:3f:dd:25:8e:f7:89:7a:f5:9e:a6:78:bf:ff:e6:
57:72:f1:4b:85:07:9c:4a:62:9c:66:1b:a5:b1:e1:03:8a:c6:
7a:21:a2:14:01:10:3a:f6:ab:50:1c:76:15:f2:5c:94:d2:f5:
27:84:f9:cf:58:4f:ce:8f:e0:7e:cc:e4:40:3a:9c:3f:a2:2e:
39:53:c6:4a:7f:9c:6f:97:6b:5f:82:99:8b:a4:4e:35:c4:18:
35:f8:27:07:b1:fa:2c:71:c5:b8:a9:60:02:ec:19:68:33:3f:
6a:f9:db:96:ca:4f:2f:18:7b:26:e1:75:83:a6:4a:de:1d:eb:
20:4e:2a:40:81:d2:9a:61:85:8b:ff:b6:55:bb:02:fc:b4:1a:
9b:21:eb:b7:99:8e:94:2e:0a:de:df:fb:82:22:81:1c:f0:17:
53:07:08:53:48:fc:c1:ce:9e:34:de:82:f6:94:3c:43:ec:6b:
22:4d:07:c0:53:b7:5c:75:86:aa:a6:b4:0f:c0:bf:fa:8a:5a:
d1:2c:14:c1:fe:be:0c:eb:46:31:8a:5e:0d:69:64:3e:5f:3d:
b3:d8:bd:6a:d8:73:98:cc:b5:87:7a:b5:38:2b:7b:84:91:47:
14:29:70:6b:d8:45:36:8d:8b:e0:e8:94:ef:ea:39:df:17:93:
86:e0:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:38:33 2025 by rpki-client