Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
File: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft (raw, json)
Hash identifier: +16DMbXAk0QX1AACi7AziZiOIow22ldQOr5KVrj83Ow=
Subject key identifier: 7E:62:A5:C9:0D:07:60:88:61:B2:3E:D6:2F:32:58:E2:A3:DB:DD:F3
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Certificate issuer: /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial: 01969303E4F16B62E6468718EC1F5B5C0716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
Manifest number: 0ADF
Signing time: Fri 02 May 2025 22:00:27 +0000
Manifest this update: Fri 02 May 2025 22:00:27 +0000
Manifest next update: Sat 03 May 2025 22:00:27 +0000
Files and hashes: 1: 0KlQdT1lu0CsM24p9yilVmugr4k.roa (hash: IYmqpSxBWUxOlCC0FW+IpqPujhd/KHXz7dmBrQJbXYA=)
2: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl (hash: +c5/gsVf7maYR72V+/v4QVdLhAS9uADuRgT2ZgWcsqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:03:e4:f1:6b:62:e6:46:87:18:ec:1f:5b:5c:07:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
Validity
Not Before: May 2 22:00:27 2025 GMT
Not After : May 3 22:00:27 2025 GMT
Subject: CN=7e62a5c90d07608861b23ed62f3258e2a3dbddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:2b:6c:66:15:3f:c6:2c:5f:dd:a5:f5:f8:
ae:58:20:ca:11:bc:64:0a:31:8b:08:42:d8:d8:69:
eb:43:6f:a3:0c:2d:30:18:d6:a8:75:fa:08:96:03:
92:44:5b:93:cb:e9:4f:03:a7:7f:82:f2:54:15:e3:
09:b6:b8:1b:85:56:76:91:54:09:34:61:7d:25:41:
dd:2a:77:11:7b:36:e1:a5:eb:33:a0:79:7b:21:99:
3f:a3:32:38:81:b2:0c:e7:1a:a1:68:e3:ee:ac:4d:
e4:3c:c4:59:92:42:38:9f:93:52:64:a6:d2:25:df:
3c:d2:e4:10:07:a1:89:e8:34:8f:f8:00:ea:21:5d:
9a:6f:25:0d:43:a3:c9:28:54:2d:de:7e:ac:a1:6c:
94:7f:40:c3:82:f6:ec:b2:32:49:f6:9a:4d:93:56:
89:8b:86:2a:f5:e3:0d:ee:f7:f4:d4:39:5e:e0:46:
3e:48:0d:e7:f3:70:58:f6:8e:c9:76:1e:4c:41:98:
1e:4b:cd:f1:51:f7:87:ac:07:c1:63:77:4a:a2:b6:
0b:63:63:21:73:65:7d:e9:0f:73:9e:01:76:d7:f8:
63:e7:ad:96:43:44:ce:d5:d7:8e:26:8f:ce:e7:5a:
db:fe:c3:3d:19:c2:1e:34:79:97:d9:6a:59:8b:58:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:A5:C9:0D:07:60:88:61:B2:3E:D6:2F:32:58:E2:A3:DB:DD:F3
X509v3 Authority Key Identifier:
keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5c:a5:08:0f:0a:b1:33:3b:ed:34:3d:56:57:05:19:e6:53:
a8:7d:5f:6c:78:73:80:fb:1c:7b:7d:f2:2e:ec:82:b9:e3:b7:
2b:6e:15:f5:ab:6e:56:f8:f2:89:e6:95:8e:77:88:29:77:97:
cd:d7:0f:ef:95:0a:89:74:be:3f:2e:1d:24:a6:03:05:a8:a5:
73:71:26:0a:61:7e:9a:cd:ca:b5:55:11:30:84:9c:ba:6c:7a:
f2:f2:f9:f9:8d:52:a8:a7:e2:b6:fb:23:0d:66:4b:60:d5:96:
6f:02:90:4a:db:94:f7:44:41:fb:bf:82:ab:f9:ce:53:87:8a:
e3:4a:3b:f0:4c:84:fa:af:f8:7a:ec:8d:ab:03:2f:62:a9:58:
56:bf:d3:01:9f:5f:c8:7a:03:c3:e3:84:2c:30:ec:03:93:80:
82:14:9d:a1:4d:f5:1f:d8:5b:14:69:40:33:2d:ce:57:59:6a:
47:9e:8a:07:48:1c:96:95:ff:52:b3:4d:e6:0d:94:a4:b2:a4:
b6:ff:2b:af:87:62:7d:17:44:3c:78:00:4d:81:97:05:81:92:
96:ea:6c:65:53:3c:bb:2c:ae:68:a3:ea:04:e0:1f:4d:92:5c:
26:5c:27:09:f1:5b:11:10:a7:7c:d5:d1:78:29:27:a2:02:19:
91:7d:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:13:11 2025 by rpki-client