Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
File: OzBfl6JvMdgAYFn7OrGerPt4NFU.mft (raw, json)
Hash identifier: f6J8XBmk5kZbjLYXHERy/S+mPevF2MMfJYgKwCBHgbc=
Subject key identifier: B5:0B:73:26:92:B1:02:E0:9A:90:53:04:A1:61:7B:F3:C4:B7:BB:6F
Authority key identifier: 3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
Certificate issuer: /CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Certificate serial: 01967F7D4CB6023FB87281D713D9A97F5967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
Manifest number: 08FE
Signing time: Tue 29 Apr 2025 03:00:40 +0000
Manifest this update: Tue 29 Apr 2025 03:00:40 +0000
Manifest next update: Wed 30 Apr 2025 03:00:40 +0000
Files and hashes: 1: 6t5f4Ujb0FAO84dMqgRAqgV1jVs.roa (hash: u7nakvY2IzZI/nPIoCHOpaknwKeAH1RDuYLRGXqd0p4=)
2: OzBfl6JvMdgAYFn7OrGerPt4NFU.crl (hash: MOBMp4Wd3TyJKHDvHofVDxJRlSg01wWLHfidv1huAvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:4c:b6:02:3f:b8:72:81:d7:13:d9:a9:7f:59:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Validity
Not Before: Apr 29 03:00:40 2025 GMT
Not After : Apr 30 03:00:40 2025 GMT
Subject: CN=b50b732692b102e09a905304a1617bf3c4b7bb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:0e:02:9e:e1:b0:ac:7c:e8:34:f7:54:5d:
87:aa:83:22:96:b1:2e:34:3b:14:c7:83:5b:de:3b:
6e:aa:29:d2:af:a9:98:7d:a0:09:bd:f0:9b:b5:52:
e3:77:ea:26:a8:2a:95:6b:48:da:77:d0:48:f4:f6:
9d:2b:9a:58:82:8b:d7:75:7f:e7:f8:de:48:9d:33:
b9:5f:bf:0f:ae:63:97:d5:bc:87:87:76:f2:e6:68:
3b:b9:3d:be:5b:2d:59:0a:72:2e:f6:3a:b0:b6:91:
1d:18:c6:9c:af:c5:c4:e8:06:cc:e6:1a:df:84:ff:
e0:e2:cd:4d:9b:1d:36:08:b7:b2:ac:38:26:21:10:
b2:07:8a:82:6f:18:e4:ae:e2:30:4c:46:1b:69:1b:
d3:c2:cc:41:3b:4c:c1:f1:87:20:e4:e7:fc:da:9b:
f6:aa:26:bf:4a:63:03:31:5f:27:ac:a3:9f:cb:37:
5f:58:6b:5a:5f:fe:97:19:76:7a:7c:7a:e6:32:e2:
38:bc:a8:47:0b:3c:f4:bc:82:a8:c8:29:0e:2d:15:
8d:a9:d9:b7:a4:a3:c5:62:01:b4:8c:21:24:a9:d7:
65:f4:a4:9e:65:63:f4:7d:52:80:6e:d0:5e:4d:7d:
8c:a3:cc:33:00:32:79:30:61:e5:66:96:7d:74:96:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:73:26:92:B1:02:E0:9A:90:53:04:A1:61:7B:F3:C4:B7:BB:6F
X509v3 Authority Key Identifier:
keyid:3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a2:39:46:b4:1d:5d:8e:84:4f:fd:e5:32:d7:5a:83:6a:35:
fa:87:08:b7:fc:8b:4a:af:76:04:ab:1f:82:2d:fa:6b:20:17:
a5:68:71:ab:f8:25:44:34:c2:b1:7f:f4:12:9a:bc:ed:bd:61:
df:c9:1b:1a:95:25:5a:1d:58:c5:9a:79:5f:5e:c1:a9:d5:b9:
67:49:7d:ba:10:bd:11:91:62:21:fe:30:86:09:0a:49:03:6b:
d5:b4:4a:ee:a1:08:99:2a:1b:a4:8a:41:44:a3:ac:f4:ea:45:
b5:84:a4:0e:c3:3e:63:7a:fc:ef:38:28:4f:8c:4d:c2:c9:20:
96:2a:a2:ac:95:94:3c:e2:e4:22:6e:4a:8a:30:57:15:61:df:
10:09:7f:54:d0:3d:5a:31:86:79:88:25:b4:08:cc:3c:44:bf:
cb:29:32:f7:e6:ff:bc:e1:e0:2b:14:7b:22:08:88:8d:d9:06:
66:11:25:a8:69:50:bc:06:e4:29:13:14:97:ff:6f:2e:38:ca:
36:64:13:38:8e:89:b6:91:12:d6:60:e6:52:f6:56:f5:f9:30:
e4:ce:bc:20:09:5a:39:d7:be:55:a4:6f:f1:5b:5a:14:4e:7a:
1a:45:7b:1a:a8:f1:e2:9f:57:9f:ee:a9:bb:48:52:66:d6:be:
2e:d7:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:44:14 2025 by rpki-client