Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: GHAe7J5epOMnw0qpc4wq82Xo9G7RrqqSbITZhxt52+E=
Subject key identifier: F5:6A:96:CF:26:F9:5C:E6:A1:6D:CC:BC:9E:90:E9:D0:18:68:8D:CF
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 0196759E4D6D15202D8A27FE3486D3D4744C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 151B
Signing time: Sun 27 Apr 2025 05:00:30 +0000
Manifest this update: Sun 27 Apr 2025 05:00:30 +0000
Manifest next update: Mon 28 Apr 2025 05:00:30 +0000
Files and hashes: 1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: 4JBwXuPQ7FUVzmh9QmmPhtrLTuomxrdLGaQ4GUJ6M4Y=)
3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:4d:6d:15:20:2d:8a:27:fe:34:86:d3:d4:74:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Apr 27 05:00:30 2025 GMT
Not After : Apr 28 05:00:30 2025 GMT
Subject: CN=f56a96cf26f95ce6a16dccbc9e90e9d018688dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:98:8d:df:98:3d:50:16:f6:5c:8c:d3:e1:
48:56:dc:83:9a:ab:e9:eb:65:6d:02:f3:26:7e:d5:
f2:b3:cc:55:6d:1f:09:e3:06:c5:d1:69:79:33:fe:
0e:fc:8f:70:6f:3a:41:99:68:a1:78:8b:d7:5d:7a:
3c:76:2c:f1:9c:48:46:e1:91:6b:fd:dd:93:42:e3:
df:12:65:76:8b:d8:53:c7:ab:6e:e7:2b:4d:7a:92:
8e:a3:93:11:37:f5:81:cc:b6:e4:ac:6d:4d:27:3c:
fe:9e:8c:52:ff:37:90:1d:f3:69:74:3e:ae:b3:29:
19:ac:a6:b4:27:c5:f0:20:38:98:e0:3b:4a:32:e3:
0c:54:d2:05:12:9e:2e:3e:a6:6a:18:79:1a:69:e9:
da:0e:a5:f8:7f:e6:32:d0:94:88:3e:eb:a9:93:ad:
a7:13:ae:36:1f:0d:38:9e:ca:14:f9:03:75:02:35:
2f:99:b8:ff:68:ab:1e:7a:88:a3:c3:37:97:fb:88:
92:cd:06:58:a3:b8:4f:0a:82:2f:b5:02:ad:40:d4:
56:3f:3c:5c:d2:27:d8:c9:d0:99:92:2b:84:6a:02:
60:d1:43:4f:cd:98:ee:5c:2a:ef:c2:46:ce:11:4d:
8d:c3:33:d2:fb:bc:0c:7a:aa:c1:bf:f3:25:1d:88:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:96:CF:26:F9:5C:E6:A1:6D:CC:BC:9E:90:E9:D0:18:68:8D:CF
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e0:92:5d:f1:0a:3e:72:c4:2c:9c:b9:c6:2b:e8:d7:1e:17:
2e:49:e9:35:cc:01:f5:2f:39:23:27:27:a6:c0:2a:26:90:f6:
9c:39:8d:d1:87:ac:df:42:cf:df:fe:93:f3:99:42:16:40:ea:
b1:df:83:cd:6d:d8:c9:2b:c3:e9:f9:02:ad:e5:12:1d:15:d6:
f7:7b:b6:19:ac:bb:5a:f4:90:1b:1b:f8:2f:7f:a2:39:e4:af:
56:fd:b5:45:7a:96:23:e5:90:71:66:97:4f:a9:65:b1:69:84:
74:0b:10:1c:ac:ae:cc:c3:58:56:67:6c:a4:73:0c:73:76:84:
23:e0:37:d8:b1:02:fd:db:4d:43:75:1c:20:f5:02:b6:57:80:
51:0f:f2:a2:b6:a9:17:f1:17:bb:5f:46:4d:8d:be:19:36:2b:
95:92:8b:a3:64:07:9a:82:6b:77:18:81:e1:38:aa:a9:8a:87:
8a:cb:d9:d0:e6:30:f5:5c:d8:c4:19:86:dd:89:42:0b:83:96:
66:a7:d3:cb:56:90:15:61:3c:cf:cc:90:7a:91:8a:eb:80:de:
25:f4:5b:4d:f0:ea:0e:c8:b4:80:9e:a8:fd:e9:30:44:cc:fd:
4d:16:f2:1f:8b:8f:4f:f1:a3:d9:b8:87:fe:ed:4e:f0:97:54:
81:24:d6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:15:44 2025 by rpki-client