Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: UOSWF6cW6sYWu8+/j82Ky8ywFOTNoahxkPCvjGRqxH0=
Subject key identifier: 70:DF:F9:AC:85:A5:21:1C:70:3D:0F:44:AA:E2:5D:32:87:8A:86:DF
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 0196741DE8716078DABD82A98B7CB3EB036F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 1466
Signing time: Sat 26 Apr 2025 22:00:39 +0000
Manifest this update: Sat 26 Apr 2025 22:00:39 +0000
Manifest next update: Sun 27 Apr 2025 22:00:39 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: eNvVoC0zm2azU/Kq4IjvMqf2/CzT8a4fiqm1f/5BZIk=)
2: I8hH4YeV3HM0yWrc52lfIOhYTt8.roa (hash: colmP8j9TQydvYGFc1+glmJgVJjDM5AxsV+6TerMW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:e8:71:60:78:da:bd:82:a9:8b:7c:b3:eb:03:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Apr 26 22:00:39 2025 GMT
Not After : Apr 27 22:00:39 2025 GMT
Subject: CN=70dff9ac85a5211c703d0f44aae25d32878a86df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:55:37:34:f3:77:fd:86:e1:b9:88:ff:41:
2a:71:7a:68:96:85:2a:3c:72:d1:8e:a2:f2:c9:75:
4d:7a:f3:9e:b7:08:a5:44:b7:2f:e2:22:64:df:5e:
b2:94:f3:f1:87:b6:e7:a8:ad:d3:99:35:6d:d9:d2:
a6:56:bb:25:8b:8b:e5:8e:96:ee:b2:db:3d:fb:2b:
f1:c3:33:12:56:64:3b:67:68:cd:fd:b1:e3:11:ba:
87:54:79:20:27:70:a6:a9:ab:88:c8:ac:34:e1:56:
88:42:4a:a8:72:c7:5b:e0:49:36:93:65:6e:35:e4:
8c:ac:13:62:34:49:f7:c6:75:6e:a8:b3:c9:25:70:
0c:96:2f:90:e7:6d:3e:36:18:30:22:05:e7:83:31:
e6:69:b3:02:ec:d0:a3:f5:07:f2:e5:66:40:bc:1b:
cb:91:02:cf:c3:79:ae:db:f6:22:4a:d6:da:97:54:
4f:7a:fe:ad:75:5a:fe:f7:e8:60:9f:7b:b2:56:de:
00:2b:3b:c4:d9:e2:87:b8:d7:89:e9:90:dd:79:64:
af:0d:11:de:ea:d0:ee:91:58:b8:47:27:06:1f:83:
76:18:9b:7e:09:cb:8d:5c:3e:5d:66:af:7a:a9:1f:
6d:b1:ac:b1:4e:10:4a:7e:d5:53:c6:ec:dd:29:ff:
e3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DF:F9:AC:85:A5:21:1C:70:3D:0F:44:AA:E2:5D:32:87:8A:86:DF
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:15:cd:9a:73:ad:6c:16:23:f9:e5:11:de:ac:a2:25:17:ea:
52:48:83:89:4e:41:cf:57:26:bc:3b:ad:0f:9e:3f:f0:2a:a3:
4e:9c:7a:7c:d1:54:67:4e:41:b1:ce:58:59:a9:64:ba:f1:22:
8c:bd:c6:2f:3b:92:17:e8:26:ad:6c:04:75:b7:67:d1:24:1d:
fa:f5:51:40:39:14:2f:b7:e4:f1:07:d3:0c:eb:c1:d6:f2:99:
59:f0:d6:12:9f:ef:5d:27:19:25:cc:5e:60:6e:0b:3b:c4:8e:
d1:4d:28:f1:f2:46:9b:de:27:d0:1f:f8:2e:48:41:3f:de:ed:
3b:10:2a:da:0f:ee:df:76:fb:2c:2c:9b:33:3c:68:6e:f2:4c:
19:e7:f9:fe:8a:5b:9e:d0:f8:35:31:e2:46:09:ff:f8:4c:d7:
73:eb:ae:76:70:bb:bc:7b:af:41:4a:bb:e8:ab:5d:74:b0:97:
79:44:51:ec:ef:39:7d:b6:af:f8:23:7c:e2:94:f6:04:31:94:
f3:4e:ec:ec:ab:af:a2:16:93:5d:dc:2d:f0:ab:1e:93:94:46:
55:4f:a1:94:6d:4f:d6:22:1a:55:91:0c:ec:81:4b:ff:46:88:
ae:48:62:ca:3d:67:48:77:ae:69:bc:33:41:25:4f:01:37:5f:
78:cc:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:55:40 2025 by rpki-client