Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: lOaY40zLRDx+y1r5/8wZ1lGQZsZhttQG4QgC/ouGryY=
Subject key identifier: 6C:25:02:43:87:10:21:85:96:F8:66:9C:7D:EB:06:B7:4E:56:34:8E
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 01967679D01711CBB8DCD9D22B1F3198D289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 0445
Signing time: Sun 27 Apr 2025 09:00:16 +0000
Manifest this update: Sun 27 Apr 2025 09:00:16 +0000
Manifest next update: Mon 28 Apr 2025 09:00:16 +0000
Files and hashes: 1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=)
2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: F6WZv+JcuK6EdDrgj0iJSE3iyIpzxsJwdJFxuTFEihI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:d0:17:11:cb:b8:dc:d9:d2:2b:1f:31:98:d2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Apr 27 09:00:16 2025 GMT
Not After : Apr 28 09:00:16 2025 GMT
Subject: CN=6c2502438710218596f8669c7deb06b74e56348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:8d:ac:c7:2d:d1:48:da:69:00:13:a3:e2:
e8:03:18:05:e2:c1:a4:2b:46:e5:02:37:f3:72:45:
09:c3:9c:e7:0e:08:a6:2f:f4:73:2c:ea:94:2d:a9:
81:81:33:d1:22:f2:cd:9d:b3:a8:cf:6a:99:97:8d:
c8:86:21:1e:cc:58:d5:35:13:a9:ca:ae:e1:6b:26:
50:53:5d:63:9b:f7:ab:cc:ed:01:ca:1d:58:17:a4:
63:65:16:21:fc:56:af:ba:ee:b8:83:0c:39:bd:73:
f8:cf:57:e1:ad:14:8f:96:1d:38:e7:99:b7:66:b3:
a3:1c:71:ef:11:7b:48:89:6e:44:57:c1:d3:c4:44:
7d:74:09:05:b7:81:4b:fb:76:da:be:58:e1:14:75:
8a:7f:7c:ba:c0:b7:7f:f9:23:2a:11:c1:6d:17:d0:
4b:8e:60:ff:96:79:10:ba:e3:4c:30:2b:ad:ea:51:
f9:72:28:f0:e6:2f:e3:58:48:7c:01:b4:4c:dc:87:
e5:f4:58:00:09:f4:03:ec:9a:db:40:4d:9f:72:21:
ba:79:87:db:45:bd:ad:aa:0b:e2:fc:cc:62:d6:c9:
fc:30:91:0f:52:51:32:98:6d:b9:81:e5:a3:75:a1:
54:a1:6e:02:ae:31:13:99:99:b3:e4:13:3e:bc:dd:
54:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:25:02:43:87:10:21:85:96:F8:66:9C:7D:EB:06:B7:4E:56:34:8E
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:05:bb:ac:cc:11:bb:63:22:d2:89:3f:7a:a9:0d:59:78:9e:
c0:d9:24:42:ce:67:c2:3d:40:af:da:7a:c8:e3:ba:84:43:f6:
39:28:46:f0:28:af:20:ec:ce:69:d2:49:15:e9:fb:7d:24:53:
f9:5d:78:1d:4d:bb:6b:89:b1:b4:e4:25:f1:e7:6c:13:8f:96:
c5:7e:f2:1a:68:92:f5:f1:f7:07:dc:67:9a:ab:d3:24:11:02:
ec:57:d2:6b:0b:d3:2c:31:5c:d5:01:42:72:88:ac:a7:31:bf:
37:2c:5b:a5:4c:ac:66:1c:de:46:43:77:38:4d:2b:0f:fc:65:
a2:18:8f:f2:38:28:fa:d3:3b:19:cb:d7:32:59:55:cb:5e:03:
ec:7a:bf:09:2f:3e:66:54:0c:94:0e:a8:59:c9:e8:a8:2b:64:
0f:1f:03:13:7b:a2:da:da:9f:0e:6b:5f:f8:01:f2:94:4e:fb:
68:e6:65:c1:fc:7f:8f:5f:ed:b0:60:16:a5:0c:2b:db:e4:b2:
3f:d2:f2:f3:37:0b:74:a2:71:b2:6d:4f:21:ec:6a:7a:8c:93:
4a:ef:1b:e7:07:2e:2b:13:5d:16:f6:95:d9:3d:47:c4:49:c5:
21:fd:a9:f5:5c:f7:84:73:86:5a:a0:dc:57:55:0c:21:0b:80:
ed:1f:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:37:49 2025 by rpki-client