Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: NbHO28p8aJh0mPl98A3VtvN+m6UbxWhqaZjwcg6mrFw=
Subject key identifier: 19:FE:25:6B:63:53:7F:1E:FC:25:CE:36:28:65:3B:5D:D3:B3:6D:0A
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 019771F6473325F066BE857A40C2CF578B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 0571
Signing time: Sun 15 Jun 2025 05:00:54 +0000
Manifest this update: Sun 15 Jun 2025 05:00:54 +0000
Manifest next update: Mon 16 Jun 2025 05:00:54 +0000
Files and hashes: 1: 2bBaeD35kseI457ZAPL2x12So_w.roa (hash: oq5BcVgGKnzmBudzjO96n+tl2tyiGaHICIAPgJhlDTA=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: 7F0x/jUKwrH4iE9R2fV4JyNOIapY0WblJ/4gVC4+rEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:47:33:25:f0:66:be:85:7a:40:c2:cf:57:8b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Jun 15 05:00:54 2025 GMT
Not After : Jun 16 05:00:54 2025 GMT
Subject: CN=19fe256b63537f1efc25ce3628653b5dd3b36d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:e7:4e:fe:63:52:2d:4b:3c:b4:98:eb:fd:
62:b7:6e:8f:78:ac:42:d0:f6:0b:96:30:29:49:0f:
6b:62:82:70:c4:21:8e:83:c2:b5:fc:d2:e3:e8:1d:
d0:45:7f:9e:a6:bb:30:74:f5:10:1b:46:b6:62:4a:
ea:dd:3b:9e:86:76:a4:6d:7a:b6:96:cd:df:b5:a8:
41:cc:9e:15:b0:fa:26:a3:95:a7:fe:df:43:e3:7b:
53:ea:a5:31:95:d8:26:50:7f:d1:c3:12:ae:2d:37:
15:b9:b3:5e:5a:87:c0:ba:9f:0b:2b:ff:4f:3e:1a:
67:60:6b:be:e5:df:1c:4e:31:bf:d5:99:1e:15:37:
77:48:40:b5:69:c7:24:2e:b2:b5:ea:e4:2c:49:a6:
41:a9:71:af:b8:1c:40:d2:06:6c:76:65:89:df:20:
f6:06:0b:ae:2e:2f:7d:44:bd:d6:ea:6c:d4:26:8c:
d2:74:ec:02:ca:a7:cd:39:f3:32:47:aa:e1:ed:7b:
97:62:13:41:1a:04:02:80:5f:a4:5a:43:9d:dc:50:
6a:3f:6a:6d:1d:60:14:5d:2e:14:23:a7:9f:16:9e:
36:a7:6b:40:85:d9:2c:50:7e:e6:47:99:ff:f5:f2:
35:d8:27:af:d2:3c:cf:d2:07:3a:85:4c:de:4d:25:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:25:6B:63:53:7F:1E:FC:25:CE:36:28:65:3B:5D:D3:B3:6D:0A
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1e:bb:be:a0:a6:97:7e:32:c3:03:97:5e:e1:8d:56:45:c2:
65:0c:91:1a:9f:2a:a2:df:06:e9:8f:82:51:6f:62:58:e0:96:
b8:ec:79:d5:c3:12:d5:4a:31:67:c9:01:9f:a4:ee:21:1f:b7:
6d:4d:29:8e:95:fa:4a:07:11:06:2a:2f:6b:89:82:d6:79:68:
dc:b1:f7:8d:f0:53:fc:b4:19:dc:e9:7c:f2:71:45:e9:ba:06:
8c:2e:b6:86:0d:e4:1b:db:18:48:ff:ce:be:d4:87:da:dc:16:
a4:50:20:01:5a:1c:01:be:96:62:c2:b0:94:b0:c1:f0:b1:47:
0f:09:0d:0d:68:f2:cb:91:c6:b8:9c:ca:48:72:a0:f3:c5:f7:
1a:07:5d:c1:41:13:7f:3a:91:38:cb:a7:c1:1a:2c:9e:54:14:
c2:30:74:14:7b:82:83:b2:dd:10:89:80:f9:88:1f:7e:d3:12:
4b:8a:ce:8a:25:36:f2:c5:27:f6:b9:1a:c5:2a:6e:98:c7:27:
6c:cc:4f:1d:51:cf:ac:64:04:33:f2:6e:15:fa:df:0d:54:43:
6f:bd:48:75:bc:ba:66:ec:fa:98:03:1c:f4:0a:f2:46:58:b2:
9d:76:39:37:61:ba:ef:aa:89:aa:7e:22:8f:c6:62:e0:74:18:
96:8b:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:23 2025 by rpki-client