Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: lgETxzzicuZ/gfGGEtTzjC82yeQebMD7CAwX5Rv9JQ8=
Subject key identifier: 64:54:00:67:F9:33:D2:61:A5:DA:4E:41:15:12:33:90:C8:F4:B0:A7
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 0196AC8D145CF971FCB2DB54B3FB6DB71C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 0461
Signing time: Wed 07 May 2025 21:00:49 +0000
Manifest this update: Wed 07 May 2025 21:00:49 +0000
Manifest next update: Thu 08 May 2025 21:00:49 +0000
Files and hashes: 1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=)
2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: gw2uOxYdG8VROY+dLiVcG35+d+KGf3KUyiUU/8ePMd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:14:5c:f9:71:fc:b2:db:54:b3:fb:6d:b7:1c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: May 7 21:00:49 2025 GMT
Not After : May 8 21:00:49 2025 GMT
Subject: CN=64540067f933d261a5da4e4115123390c8f4b0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:6f:c2:e4:c0:78:1c:7c:67:d5:bd:97:de:
f5:73:80:0f:a4:9b:cb:88:c9:80:ea:b2:af:7f:b5:
75:f5:0a:0b:6f:2b:30:7d:e0:9e:a6:9c:39:81:81:
4c:46:2c:2d:14:1d:26:74:69:a0:4b:8f:59:8c:36:
e8:7e:40:13:73:20:c8:7f:3f:d7:87:cd:de:88:ef:
72:f5:58:8d:81:c9:d0:24:5a:54:84:55:8e:7a:4b:
b6:b8:e3:b8:1e:16:79:ec:bb:8d:e4:72:b1:c3:fc:
c5:f4:57:d9:8a:4f:63:fa:20:c3:50:17:3d:f5:c1:
46:07:10:8b:f0:e6:01:28:fd:38:e2:1f:df:cc:2d:
f4:61:8d:21:a8:17:11:a7:73:48:7d:3a:d1:de:84:
eb:7a:de:71:f3:2a:ac:ee:f7:c4:ff:24:c3:a7:f5:
95:0d:83:23:c4:fd:e0:50:b2:e5:e2:f7:47:17:11:
27:20:a8:d1:d7:09:5f:36:2c:6a:4d:e7:3d:ec:fc:
03:e9:f7:1c:ee:f3:fb:d0:e3:94:d5:4b:a5:7c:bd:
12:26:4c:4a:d9:07:80:83:ed:36:05:3e:21:60:4a:
ea:c5:ea:69:78:45:8b:40:e3:aa:55:b7:21:67:39:
d4:f9:5d:4a:7f:12:50:69:8b:10:85:0c:19:10:1f:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:54:00:67:F9:33:D2:61:A5:DA:4E:41:15:12:33:90:C8:F4:B0:A7
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e7:29:ed:fc:7b:3e:4e:06:40:33:7d:ed:31:df:e7:df:93:
c8:2a:96:2d:c8:fd:84:48:9a:f9:02:fe:58:e2:22:91:ef:e0:
19:c3:78:81:76:64:f4:3c:2b:22:d3:49:a1:9a:0b:06:aa:22:
a9:e6:df:16:b1:a4:f5:82:46:a4:f8:bf:95:34:86:d3:e5:fd:
11:5b:dd:27:1c:8b:35:b7:12:f3:d1:9c:44:e7:ee:89:23:4c:
5a:20:85:04:1f:00:d2:34:d0:a5:6f:2c:6a:0d:86:27:51:6b:
86:1c:8d:a9:33:b1:a9:7b:c0:03:3f:1d:33:8f:a2:6e:cb:a8:
f8:44:24:70:56:8e:90:32:fd:1b:29:44:5f:ac:9e:52:bd:69:
70:a2:01:cb:4a:b6:86:9d:3b:b7:94:fc:bd:d8:02:ed:34:4c:
35:00:74:45:e1:22:15:0d:12:75:22:b4:2f:3c:41:8d:7a:e2:
73:bc:e3:ff:6f:3e:34:e9:d9:72:36:e2:fe:ec:b7:6c:2f:f7:
20:c1:6f:89:0a:e2:b5:6a:dc:5b:4f:94:5c:e5:09:36:d2:a6:
dd:df:cc:41:3e:9e:88:f6:8f:22:39:35:f6:07:e1:52:08:7c:
df:41:8d:36:fb:ee:04:dd:f7:3a:f0:ea:5d:55:96:fd:af:3b:
07:92:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:42:41 2025 by rpki-client