Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: 5PnNhV6VLV4nhW6ITuZmT3gNkwA4+xxnnJo0bDnjCyQ=
Subject key identifier: 08:E7:7E:EB:F2:84:9E:EB:D9:76:CD:40:5E:98:4B:A5:37:CD:B7:7A
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 01976D3DD9292147B78D207CCA5C5353886B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 10E4
Signing time: Sat 14 Jun 2025 07:00:59 +0000
Manifest this update: Sat 14 Jun 2025 07:00:59 +0000
Manifest next update: Sun 15 Jun 2025 07:00:59 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: HCcr+sH0AdOb4k5BWTfKKHMxYcCx/PLu7rDp3/TVpQY=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:d9:29:21:47:b7:8d:20:7c:ca:5c:53:53:88:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jun 14 07:00:59 2025 GMT
Not After : Jun 15 07:00:59 2025 GMT
Subject: CN=08e77eebf2849eebd976cd405e984ba537cdb77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:4b:41:9e:3a:b5:38:20:1b:5a:46:5a:9e:
48:c9:78:96:09:94:e1:8a:55:43:3e:21:3d:14:a6:
74:06:50:59:18:cd:b4:34:23:d8:44:24:08:fd:71:
81:ac:e5:ff:d4:31:1d:f1:ec:3b:82:25:5d:69:6e:
93:62:ca:55:6b:e5:08:fa:ec:e2:41:04:01:32:bb:
37:a1:05:c8:ea:59:d2:8d:99:ac:20:03:b7:85:e6:
15:8f:43:6a:8f:74:08:bd:1b:50:e7:92:95:ce:62:
6a:71:c9:5c:7a:6d:35:c4:24:ff:0e:54:90:71:00:
81:9c:5e:91:b1:01:11:39:2d:66:e7:bc:b7:69:ce:
c5:16:35:e2:fa:80:e9:87:45:46:77:70:ef:31:ad:
60:bd:9f:b2:a1:f8:5d:ca:90:1d:2b:2c:ea:b7:5f:
db:69:fc:03:31:36:cb:93:41:78:4e:f6:9e:8f:63:
50:87:96:f5:d7:cb:48:95:f7:31:71:1a:1e:15:07:
11:c4:97:af:93:a7:d2:e7:91:f9:47:86:7a:f3:ef:
f9:b0:fe:96:c1:d1:61:ec:8f:6c:69:97:21:78:22:
e6:0a:dc:62:de:ea:ed:00:56:37:6f:da:3c:f9:f1:
e0:dd:06:0d:ad:c9:ff:e3:2e:a6:56:2d:66:78:74:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:7E:EB:F2:84:9E:EB:D9:76:CD:40:5E:98:4B:A5:37:CD:B7:7A
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4d:51:3b:0e:4b:85:a3:f1:38:52:e4:8f:df:86:c8:83:4d:
b7:29:ee:25:00:5d:98:80:bd:af:e7:6a:b9:ad:27:94:1f:c9:
58:5c:f7:ba:e8:fa:fa:35:9f:fb:64:6e:40:08:eb:45:e3:d7:
37:a1:70:1d:15:c1:c0:3e:09:f4:b2:62:31:8a:db:87:1c:9a:
20:a9:71:de:85:38:35:f1:80:8c:f9:04:93:aa:95:b0:f3:51:
9a:87:66:2c:e6:dc:e0:d2:1f:48:8e:3f:6c:ec:12:51:cb:7b:
42:21:e9:04:05:16:9f:e0:47:dc:e4:9f:87:9e:ea:d5:26:7c:
20:ee:cf:15:a6:42:eb:9d:f9:4f:c5:49:a2:59:8c:73:df:98:
2c:cc:bd:6c:b0:f9:ef:18:bc:4e:fd:20:c7:c9:33:94:0f:f7:
ee:74:57:67:46:cf:82:21:8b:68:4b:7e:f9:7d:89:30:dd:b7:
68:95:5e:09:48:8e:00:8c:4c:2f:7f:2b:dd:72:bf:d4:56:99:
21:4b:6e:f4:87:ed:8c:d4:fc:be:17:5d:e0:5f:72:4d:05:d2:
2b:6d:58:be:ef:6c:fa:80:ba:cd:5a:c5:dc:12:c4:f7:ce:18:
54:a2:cb:5b:29:10:fb:f3:f5:75:15:5b:c0:bd:e0:98:66:77:
a0:d3:2b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:59 2025 by rpki-client