Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
File: OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft (raw, json)
Hash identifier: 8WMIjk1BweLRasuXzzNkX4GlQT6I/2ehSozip0O+YHo=
Subject key identifier: B3:88:AE:45:F2:8B:D7:23:B2:98:D0:F3:7E:66:73:7D:7F:6C:54:2E
Authority key identifier: 3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
Certificate issuer: /CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Certificate serial: 019675677612B1278FE3126A39A93191EC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
Manifest number: 0668
Signing time: Sun 27 Apr 2025 04:00:36 +0000
Manifest this update: Sun 27 Apr 2025 04:00:36 +0000
Manifest next update: Mon 28 Apr 2025 04:00:36 +0000
Files and hashes: 1: OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl (hash: PgTJTyQeeqRFSv+ectsyvJmfXF+LD0Letz6+DjDPLZA=)
2: wWxNrzf0bGINPQsafMeSGo5rzC4.roa (hash: q18JpXRnjqqiRh7u6sYb0jCTwYi6/zUTClZxBEPPQE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:76:12:b1:27:8f:e3:12:6a:39:a9:31:91:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Validity
Not Before: Apr 27 04:00:36 2025 GMT
Not After : Apr 28 04:00:36 2025 GMT
Subject: CN=b388ae45f28bd723b298d0f37e66737d7f6c542e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:57:31:35:a5:37:ac:53:1c:79:7a:81:b9:
17:2b:ab:7b:b3:c7:91:bb:95:27:e3:91:34:59:a5:
b5:82:1b:6b:1a:1e:41:79:68:7f:48:da:bf:97:9a:
55:fa:d0:06:2c:5c:3b:95:1c:1b:d6:dc:19:33:75:
48:4c:84:c6:79:01:e6:af:6c:2d:06:78:b6:4d:f6:
ff:6c:2d:1b:4a:42:81:97:06:9e:20:99:f4:8e:0b:
a4:59:d6:4e:71:db:2d:d9:be:68:c2:1b:8c:1e:21:
2c:c9:b4:4e:03:c5:8f:58:0c:2d:21:cb:02:ce:6d:
04:ac:23:b1:23:3d:dd:bd:58:c6:97:35:e9:96:e6:
8e:b3:06:9d:cf:3e:d8:2e:4d:8f:b2:e1:bf:5b:cb:
d9:90:49:19:b5:fa:95:ce:19:04:7e:70:6e:ae:64:
4e:cb:91:66:5d:f7:ef:ee:56:06:95:24:d4:88:8f:
22:e1:00:5f:1d:62:54:0d:cb:73:c5:dc:99:90:3b:
64:04:26:2d:5c:a4:f9:a5:bb:6a:67:12:89:f8:58:
31:5f:8f:e4:bc:57:98:bb:e6:a2:61:71:88:7e:d0:
8a:ed:19:35:d1:26:b9:b8:55:63:cc:88:6f:07:a2:
e4:f8:4c:bb:91:8a:1a:b2:dc:6a:a1:c5:d5:fb:da:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:AE:45:F2:8B:D7:23:B2:98:D0:F3:7E:66:73:7D:7F:6C:54:2E
X509v3 Authority Key Identifier:
keyid:3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:14:a9:aa:ad:4a:ea:9b:2d:ca:54:1d:6f:61:f7:09:ff:4b:
4a:4b:3e:08:cd:dd:49:6b:19:ca:5c:91:9c:4b:23:3d:a2:c1:
f3:4b:da:60:f6:87:2d:7a:c1:39:83:53:7f:5b:0b:14:37:7d:
72:d4:41:2c:54:d9:6c:0e:dc:d5:e7:1c:7f:9d:69:b7:a7:94:
a3:1b:cd:66:41:60:ac:47:d1:11:e1:5e:a6:d2:8d:ec:e6:15:
d6:cb:3f:0c:04:b4:cd:0d:6b:b4:c3:26:7f:c9:0a:36:6a:ed:
9e:6c:36:2f:5f:10:bd:1a:67:7d:2f:9a:54:4b:26:92:6d:d2:
89:03:d7:40:54:c1:77:a9:07:7b:f5:c5:07:3e:c8:e4:e4:b9:
88:d9:2f:d3:67:b1:f0:15:8b:e4:53:31:f0:50:56:8a:30:a2:
25:33:7c:37:b9:0e:2b:be:3e:66:2e:6b:d2:a5:c4:87:18:c1:
d0:25:ba:58:e5:01:c3:ad:05:5c:6b:1d:be:62:ed:cd:37:e7:
72:99:fb:7d:3d:33:ae:97:de:5c:20:be:f9:38:54:48:70:7f:
32:eb:c7:8f:87:3f:ff:7f:c3:c1:d4:d3:1f:ce:ce:f8:25:22:
11:94:f0:15:4b:2f:a0:80:0f:0d:88:66:fb:31:ed:25:7e:ae:
c7:de:15:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:30:56 2025 by rpki-client