Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: W1/XtX1nM7QakLSqEo5ZiTUZYUcZR/CsHRtxJR8y4qU=
Subject key identifier: 07:6F:A8:0F:59:BE:59:75:95:D4:B9:E2:C4:3A:29:FE:68:1D:FA:3C
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 019680902EEB980AB6CB8F220DC583E58521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 04F4
Signing time: Tue 29 Apr 2025 08:00:54 +0000
Manifest this update: Tue 29 Apr 2025 08:00:54 +0000
Manifest next update: Wed 30 Apr 2025 08:00:54 +0000
Files and hashes: 1: 2bBaeD35kseI457ZAPL2x12So_w.roa (hash: oq5BcVgGKnzmBudzjO96n+tl2tyiGaHICIAPgJhlDTA=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: 0F3vTDWK7ZW/dxj6U00Rk6Ymsvgc0OtyjAjWmKB+p+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:2e:eb:98:0a:b6:cb:8f:22:0d:c5:83:e5:85:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Apr 29 08:00:54 2025 GMT
Not After : Apr 30 08:00:54 2025 GMT
Subject: CN=076fa80f59be597595d4b9e2c43a29fe681dfa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:36:77:47:07:0c:b5:00:96:80:d5:cf:81:
ea:cb:0a:1c:e3:bb:cb:e6:22:d5:67:9b:57:c7:e6:
ee:1d:6e:da:2d:8c:1c:cd:6f:2f:17:46:5b:82:fd:
2a:2f:cc:9b:64:2c:2d:40:94:0d:ab:0f:57:37:b8:
11:6b:7e:48:87:b3:2a:47:2c:fb:1a:04:ce:82:18:
23:77:5e:19:52:0c:fe:20:49:d7:85:d3:89:4a:85:
1b:23:2c:6f:79:39:92:5b:5d:cc:b8:45:2e:f0:03:
21:aa:fc:e1:4d:a4:ea:96:83:d0:38:42:95:86:56:
87:de:e2:e5:a0:4e:96:f8:f3:d2:46:92:0c:b0:48:
69:fe:1b:75:8f:ae:e5:11:1a:d9:e6:6a:dd:db:88:
e9:8c:db:cc:dc:00:01:c9:3d:74:24:69:14:cf:d6:
74:9b:fa:fb:8a:6c:84:06:68:4d:ce:46:37:39:bb:
2c:ac:1f:c3:d0:a1:c6:46:f1:b0:31:3a:55:b4:f1:
3b:f1:fc:3e:51:22:7e:49:00:68:c7:8f:aa:fe:c7:
75:8d:85:97:7d:f5:18:20:51:35:42:30:70:85:48:
a4:0c:d1:78:02:b6:e6:9e:65:3e:1e:79:37:ca:19:
2e:49:1d:89:83:5e:fd:41:80:3c:25:51:cb:f4:12:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:A8:0F:59:BE:59:75:95:D4:B9:E2:C4:3A:29:FE:68:1D:FA:3C
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:70:ac:03:1c:07:be:b5:58:79:a3:e0:64:0c:a9:c0:29:2b:
16:87:5b:11:83:c8:d3:7d:df:50:0b:1f:f1:c2:78:db:37:a5:
50:8a:8f:51:0b:dd:46:74:71:2a:05:6e:c8:48:ab:ca:b7:12:
8e:5a:51:32:8e:44:38:4f:d9:cd:a5:cb:32:f8:e2:86:10:29:
3e:d3:6e:92:cb:d9:57:86:1b:71:14:41:a8:9c:bf:16:5c:e4:
29:0d:18:9b:4e:ac:64:d8:64:2c:76:08:23:7b:f6:3b:a7:a0:
a8:6a:4b:2c:56:7a:d8:50:71:d0:dd:9c:fc:5b:86:c9:e5:b3:
12:9c:48:1a:3f:06:8d:82:b2:68:24:90:98:2a:65:40:51:93:
ff:3a:3d:3c:38:a3:0e:35:d2:0b:98:ce:3a:35:08:a5:7d:1f:
06:91:84:a5:c9:9e:d4:5c:61:1c:48:a5:a2:2b:05:63:15:7a:
4c:ad:9e:85:c9:11:8c:a4:f9:4c:d6:aa:f0:2d:9b:11:8c:1c:
aa:2d:dc:dd:46:14:47:b8:2b:4a:65:f1:2e:98:75:8e:de:01:
25:de:f8:06:92:64:36:33:a3:35:6c:15:24:cd:d2:bb:10:cf:
45:7c:f7:6c:66:5d:21:73:70:3c:49:69:a3:68:38:3a:cf:f7:
7b:23:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:35:00 2025 by rpki-client