Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: Ek0ueLg9JtswTw+iU9CD8Zo/a5shq7CSIY0xaVYhGKE=
Subject key identifier: A4:3C:4A:9F:09:2C:8A:15:DB:9E:DB:9D:4D:43:80:95:3D:42:62:7E
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 0197470BBD9B36E1B12E9F9FF78F31022E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 04B1
Signing time: Fri 06 Jun 2025 21:00:41 +0000
Manifest this update: Fri 06 Jun 2025 21:00:41 +0000
Manifest next update: Sat 07 Jun 2025 21:00:41 +0000
Files and hashes: 1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=)
2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: SSK4uhFauzoCKyEgcIDTuN/jUOg65UuJB8pIKijHRkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:bd:9b:36:e1:b1:2e:9f:9f:f7:8f:31:02:2e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Jun 6 21:00:41 2025 GMT
Not After : Jun 7 21:00:41 2025 GMT
Subject: CN=a43c4a9f092c8a15db9edb9d4d4380953d42627e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:cb:96:a8:65:89:83:f3:02:6c:fd:57:23:
cc:58:22:23:fe:b6:42:b5:76:80:16:85:bc:05:fe:
eb:e1:e8:38:7e:d4:4e:15:42:ae:cd:a3:3c:cd:68:
53:30:2b:bf:6b:2f:44:7f:ab:e9:c1:e8:1a:2f:2f:
42:d1:97:5d:b6:8b:48:2f:e3:6d:fe:83:8a:b1:54:
48:5b:fe:51:38:9a:7e:24:0d:62:b2:a5:90:9f:b5:
a7:53:ba:d7:61:78:95:02:5d:83:8d:d0:8c:c9:78:
5d:5c:5b:8c:07:af:7e:e5:8a:8a:4b:96:8e:ee:8f:
e7:8e:b3:19:b3:4b:96:5f:a1:67:7e:8b:d5:ad:37:
46:ce:74:03:df:ec:66:70:e6:c5:df:26:2e:1f:30:
8c:4f:6f:20:cd:1b:56:3c:a5:95:2f:a9:79:38:ce:
53:5b:85:5b:8d:9c:8c:a4:3e:63:7d:8d:67:23:93:
83:e8:00:bb:d2:ad:1b:2b:82:5d:43:2f:9d:5a:81:
5b:6f:5f:1f:c6:60:eb:3d:b3:29:28:d6:ba:31:8c:
87:4c:ba:af:e2:b4:e0:cc:2f:40:bc:8c:34:eb:f7:
48:4e:9e:26:17:b5:e4:b9:5a:19:50:7a:51:fa:c6:
48:69:88:41:25:ff:34:8e:a6:10:88:d5:56:81:78:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3C:4A:9F:09:2C:8A:15:DB:9E:DB:9D:4D:43:80:95:3D:42:62:7E
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b7:09:47:79:fb:da:a9:97:23:8c:02:67:e2:2e:8e:ba:26:
6e:44:00:f3:60:85:68:0b:ee:c8:86:68:c3:9b:20:b3:90:7e:
1b:50:35:1c:d3:1a:ce:1f:62:af:3b:f3:fb:74:8a:9b:bb:6f:
35:f3:bc:41:0d:42:20:1f:6f:e0:85:ee:19:5b:36:cb:41:fe:
f3:de:14:72:76:7d:dc:c0:60:b1:8f:96:9b:4e:7c:fa:af:70:
af:a8:51:22:eb:07:f5:03:26:33:20:ff:10:db:ae:71:ce:6a:
90:c1:f9:0a:85:04:9b:79:6e:5a:fd:7e:b6:78:5f:a0:f6:04:
cb:59:b3:7b:02:dd:a0:34:fa:21:c2:a8:82:27:93:6d:ca:3e:
81:c0:9e:0c:a5:bf:71:fb:52:eb:fb:41:3e:7a:d2:de:8f:22:
2d:48:07:90:9f:56:df:16:c6:63:a3:4c:fe:ff:d4:d7:7f:6b:
e4:ae:f1:1b:45:45:fd:2e:fa:30:13:9a:46:60:a4:01:0b:86:
17:55:13:3e:d1:9d:80:fb:13:14:b9:6c:12:3c:6d:74:c0:b7:
45:fb:43:42:6b:86:ad:b6:1a:33:65:c9:d0:b4:5d:8e:62:b1:
f8:c9:d3:41:03:ea:50:5a:31:6d:4b:5f:eb:43:be:78:99:66:
2d:6a:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:12:41 2025 by rpki-client