Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: gCpOydewGPx24TXhgNYYM1G440cCOV/F62RhT+cGNYI=
Subject key identifier: 7F:D4:A3:C4:6B:C2:5A:6E:28:7E:BE:8B:ED:25:C6:37:0C:A1:52:0E
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 0197B70E6EB0FDD838704A69290C6618D3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 04EB
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=)
2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: ffAKp2+yKXxRkiYPER9oDq29CSWhKObGcsK+Af8Q56A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6e:b0:fd:d8:38:70:4a:69:29:0c:66:18:d3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=7fd4a3c46bc25a6e287ebe8bed25c6370ca1520e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:a7:49:0d:dc:8b:45:2c:64:df:e1:b3:45:
e4:a2:62:2d:cb:16:37:4d:95:ee:fe:95:28:38:87:
1c:38:6e:3a:f8:c2:86:67:dd:c3:eb:bb:27:d3:2e:
ce:86:5b:44:cc:a7:ce:0b:17:c5:9c:88:eb:01:fe:
0d:6d:3a:e5:bf:26:0d:54:51:3e:db:f5:95:31:e3:
57:9b:87:bf:05:ac:78:7b:47:b5:ed:7e:48:a2:25:
9d:7b:13:c4:ff:b1:9a:ab:2f:93:3b:0d:df:6f:2e:
57:67:07:6e:b5:65:f8:ff:81:41:26:55:73:ed:90:
47:6a:7b:84:47:3e:1a:60:f3:72:15:57:b7:30:75:
6a:75:f1:8d:59:7e:a8:95:55:15:39:59:3f:9d:32:
c1:6e:bc:5c:17:ff:6b:13:83:e6:50:4e:c7:c9:ac:
42:3e:ba:bd:12:7d:b3:d8:44:53:9e:fb:fc:be:ef:
b3:98:bf:52:76:95:f8:23:82:de:52:b7:5c:9f:c0:
8e:7a:26:8e:70:43:f8:44:9b:98:54:d0:5b:85:29:
76:83:bd:ff:80:6e:b8:40:05:67:6e:03:18:a7:ba:
d9:d7:a1:97:a0:ff:c2:87:a7:87:52:74:a7:f6:14:
36:6d:52:df:e0:c9:e4:8f:50:49:03:2d:bd:7e:20:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D4:A3:C4:6B:C2:5A:6E:28:7E:BE:8B:ED:25:C6:37:0C:A1:52:0E
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:48:d2:50:b5:aa:d4:96:e2:62:13:01:20:ce:ce:2c:1b:b4:
41:71:f0:98:6e:8e:e0:fe:3c:80:ee:ee:51:7b:df:94:86:03:
ae:d0:57:c0:56:4e:5d:b1:80:b3:06:02:a9:82:9b:2e:5c:45:
e6:9d:48:0b:8e:00:3f:5d:7e:d8:ca:5b:bb:b1:f4:35:3a:34:
60:20:1f:73:ac:6a:52:f7:f9:c8:92:4c:4a:05:ec:11:24:f1:
53:ab:ac:b9:46:ab:a1:b6:aa:38:e5:18:ab:b6:5c:56:15:f1:
d7:d0:d2:ed:94:1d:35:7f:94:0f:9e:6e:33:bd:ef:fc:05:e0:
19:dc:34:05:8e:3d:23:b8:43:88:1f:09:97:a4:17:f7:cc:79:
a7:87:35:37:bf:6e:76:bf:c5:6f:51:53:ef:d0:cf:8d:94:fc:
1d:d3:76:3f:16:2a:b5:64:a5:4e:4b:e3:ad:3b:37:87:6a:f0:
6a:fa:b1:66:3c:6c:3d:dd:ca:72:4e:a4:ec:ff:42:ed:43:57:
3e:46:ad:02:a4:1b:e7:46:eb:40:7d:0d:ab:ff:f5:7c:9b:48:
79:eb:7b:80:4a:d6:e9:0c:e1:45:d9:99:c0:35:42:2d:3a:b8:
6a:d6:73:4c:1d:b8:99:24:49:13:76:dd:6a:30:df:51:5d:64:
c7:50:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:19 2025 by rpki-client