Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: 5FRhwwPdK/G1KIKUhBhTKDNAhmnXR9mYMULjMQ6br0w=
Subject key identifier: 35:A5:9E:C1:9E:53:C3:44:89:FC:1F:1E:F1:DF:52:8C:B4:2D:C4:96
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 01967AC4BD4FDF2A5646D28EB81FCC82422A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 05:00:35 +0000
Manifest this update: Mon 28 Apr 2025 05:00:35 +0000
Manifest next update: Tue 29 Apr 2025 05:00:35 +0000
Files and hashes: 1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=)
2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: LTH2P8ThfeqCeX+2zKygchzSpuxBGvLc/KCyVTPKHJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:bd:4f:df:2a:56:46:d2:8e:b8:1f:cc:82:42:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Apr 28 05:00:35 2025 GMT
Not After : Apr 29 05:00:35 2025 GMT
Subject: CN=35a59ec19e53c34489fc1f1ef1df528cb42dc496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:20:8b:85:80:64:56:e0:9f:dc:60:c9:3a:
1f:72:bb:70:14:19:bf:08:1f:51:0e:86:01:0e:08:
8f:dd:ad:8a:63:8c:7e:12:bf:73:90:ee:3d:c0:ad:
d7:93:c0:b4:4f:a7:ca:2c:9d:c0:66:9b:5c:33:81:
ad:f3:e7:9e:8d:7b:9b:b4:0d:20:bd:a6:b3:7a:b6:
34:ed:ac:46:60:b7:19:cf:f4:c1:20:78:76:fc:16:
75:91:53:6b:91:65:c4:44:a5:16:4e:92:77:14:a5:
de:e0:b5:5a:12:5d:5a:9a:75:27:45:63:c3:38:b3:
37:11:a8:aa:e6:b5:ff:cd:cf:07:fd:ac:f3:4e:4e:
7f:d4:6c:34:3c:09:97:52:f5:73:83:f4:5f:95:58:
2c:ee:1c:4a:40:23:0f:af:76:93:40:73:13:9e:77:
ba:79:a2:f1:5a:0c:96:e4:9a:e3:68:55:79:a3:b1:
e4:ee:1d:01:11:a6:b1:6a:6a:22:80:b5:22:26:10:
d3:47:4d:25:f4:2c:fd:37:a3:63:f7:c1:38:90:d9:
36:eb:9c:7e:77:81:57:fd:fc:9b:54:b1:b6:ae:36:
12:9c:66:ab:f4:e6:5d:0f:eb:21:72:cb:24:0a:9a:
cb:95:0c:fc:a4:89:02:06:f1:0d:5c:b2:83:7e:97:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:9E:C1:9E:53:C3:44:89:FC:1F:1E:F1:DF:52:8C:B4:2D:C4:96
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:67:09:ed:e7:30:c9:c9:48:8a:45:65:ae:6e:8d:02:c1:25:
d4:8f:ed:37:f0:ab:2d:32:7e:75:51:db:c9:cc:51:2b:c2:4a:
80:1f:71:da:45:1e:23:92:f9:7d:f3:fa:03:9c:a4:67:90:17:
67:d8:1e:e8:e7:8d:11:66:1d:07:f9:fb:20:28:5e:4f:f5:30:
52:e5:25:fe:59:ed:69:cb:e3:6a:14:2a:d9:67:8c:53:7f:29:
85:50:ff:69:53:4c:35:dc:d5:1f:e3:93:f9:23:9e:0b:09:ec:
6e:a5:7d:91:33:d9:72:57:a1:94:c8:d9:d2:00:e2:5e:ce:3c:
bb:91:b9:df:9f:76:b3:c2:83:02:35:a7:8f:e2:bb:6b:b8:67:
41:fe:5a:80:e5:d6:99:b0:7b:2a:05:51:58:2f:16:ca:3e:b6:
d4:70:69:e2:75:43:42:f6:6d:17:a4:fc:a4:c5:3c:61:e3:08:
d8:16:fb:80:db:a3:b8:54:8b:ea:40:22:fb:a6:ee:c8:76:bc:
0b:91:b5:cd:5a:6e:82:89:e0:3e:fd:80:fe:a1:a9:9c:e9:0d:
36:a1:94:7d:82:73:ae:80:ff:91:9b:76:7c:19:e5:89:0f:6d:
47:60:8d:92:21:42:f4:de:18:b9:16:9d:58:7c:16:e9:c9:9f:
71:c6:21:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xL1P3ypWRtKOuB/MgkIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzliMjM4MmYzODUxMmU1OWVkMThlYmZhYTU5NmM5NTUy
MTI5MTAwHhcNMjUwNDI4MDUwMDM1WhcNMjUwNDI5MDUwMDM1WjAzMTEwLwYDVQQD
EygzNWE1OWVjMTllNTNjMzQ0ODlmYzFmMWVmMWRmNTI4Y2I0MmRjNDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugEgi4WAZFbgn9xgyTofcrtwFBm/
CB9RDoYBDgiP3a2KY4x+Er9zkO49wK3Xk8C0T6fKLJ3AZptcM4Gt8+eejXubtA0g
vaazerY07axGYLcZz/TBIHh2/BZ1kVNrkWXERKUWTpJ3FKXe4LVaEl1amnUnRWPD
OLM3Eaiq5rX/zc8H/azzTk5/1Gw0PAmXUvVzg/RflVgs7hxKQCMPr3aTQHMTnne6
eaLxWgyW5JrjaFV5o7Hk7h0BEaaxamoigLUiJhDTR00l9Cz9N6Nj98E4kNk265x+
d4FX/fybVLG2rjYSnGar9OZdD+shcsskCprLlQz8pIkCBvENXLKDfpchEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWlnsGeU8NEifwfHvHfUoy0LcSWMB8GA1UdIwQY
MBaAFDs5sjgvOFEuWe0Y6/qllslVISkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMt
OGI4ZDc2YjJkMjRlLzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMtOGI4ZDc2YjJkMjRl
LzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWcJ7ecw
yclIikVlrm6NAsEl1I/tN/CrLTJ+dVHbycxRK8JKgB9x2kUeI5L5ffP6A5ykZ5AX
Z9ge6OeNEWYdB/n7ICheT/UwUuUl/lntacvjahQq2WeMU38phVD/aVNMNdzVH+OT
+SOeCwnsbqV9kTPZclehlMjZ0gDiXs48u5G53592s8KDAjWnj+K7a7hnQf5agOXW
mbB7KgVRWC8Wyj621HBp4nVDQvZtF6T8pMU8YeMI2Bb7gNujuFSL6kAi+6buyHa8
C5G1zVpugongPv2A/qGpnOkNNqGUfYJzroD/kZt2fBnliQ9tR2CNkiFC9N4YuRad
WHwW6cmfccYhMg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:54:34 2025 by rpki-client