Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier: EnrWqEOA6Pn4KbTvcbbf7jkA6CIK4ufuS3on2DVSMb4=
Subject key identifier: 0A:DB:44:99:D2:62:FF:4D:0E:03:A2:95:AF:39:18:DA:A2:62:BA:A6
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 01967F7D568ACFB49A6FBC7EF3B2F3E406AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number: 0F65
Signing time: Tue 29 Apr 2025 03:00:42 +0000
Manifest this update: Tue 29 Apr 2025 03:00:42 +0000
Manifest next update: Wed 30 Apr 2025 03:00:42 +0000
Files and hashes: 1: Bo1myrpN4GYHDeA8eZrww4v2MYk.roa (hash: iX1wfmXvs8NDvW8ILAABxp5yjw4VCOGlhTOgUXPFMOo=)
2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: VI7Usz4Zg4aNKTokBDLqYQe3n3mwomHLXI84DzCe1SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:56:8a:cf:b4:9a:6f:bc:7e:f3:b2:f3:e4:06:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: Apr 29 03:00:42 2025 GMT
Not After : Apr 30 03:00:42 2025 GMT
Subject: CN=0adb4499d262ff4d0e03a295af3918daa262baa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:80:2b:f7:e2:be:86:2a:8e:49:1e:86:17:
0f:d2:8f:ba:80:0a:34:dc:a9:78:e2:59:5f:c9:99:
30:02:77:35:67:f1:9b:40:aa:6a:2d:5d:10:f4:61:
0e:2d:76:f1:cc:65:71:0d:ee:61:5f:d3:72:35:ed:
af:5a:24:74:53:cb:06:6d:3d:91:5a:c9:0c:25:fe:
3a:12:20:0f:56:16:35:4c:b3:78:17:22:88:1a:9d:
7c:ce:51:37:0c:71:6f:d4:fe:a8:d6:3e:10:08:5f:
85:2f:87:fe:55:e1:87:28:fa:b7:90:26:28:ea:a6:
88:89:30:0d:93:3b:df:33:25:51:0c:31:e3:43:37:
95:3c:2a:d3:74:cf:24:85:da:45:b6:13:4b:77:79:
ea:6d:5e:e1:91:2a:45:be:7d:d2:90:80:18:19:29:
23:9b:35:c3:87:6c:d8:11:c2:6b:fc:db:ef:3a:e7:
4a:dd:d1:0a:3b:60:07:30:91:09:63:e2:1d:05:7d:
c4:e6:da:2f:6e:25:78:a1:5a:72:1c:ab:2f:58:c8:
b1:f5:41:3a:5a:20:9d:60:2b:6f:52:73:7d:4b:43:
90:44:cf:c7:e9:d4:a9:a8:8a:27:40:13:84:a3:d7:
a7:5b:85:2a:1b:68:2a:fa:a1:01:32:63:52:9f:3c:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DB:44:99:D2:62:FF:4D:0E:03:A2:95:AF:39:18:DA:A2:62:BA:A6
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b0:a2:0f:84:68:3c:37:98:7d:af:ed:33:36:e4:70:b7:b5:
86:a2:f2:ec:b1:8c:7d:0d:fa:1f:7c:ea:2c:ad:84:10:3d:fc:
05:21:5c:ac:a3:21:d8:59:71:19:e1:db:94:fc:d6:d9:eb:57:
42:27:aa:bd:5f:97:8c:92:30:f2:62:be:dc:30:36:05:25:cd:
62:4d:fd:25:f7:2e:ad:32:98:78:11:bd:a8:45:06:31:5e:47:
90:21:6b:3a:7d:df:ff:d6:36:8e:91:9e:4c:10:46:ae:cb:e4:
bc:9a:25:83:f2:09:bd:8e:99:59:b6:38:ce:3a:c4:93:a7:cf:
12:fa:e8:a7:a9:39:c6:1a:28:6d:28:c3:7c:ce:7b:ff:6a:0f:
04:33:ca:86:bb:21:f5:a5:23:0d:a1:a7:06:a1:28:72:6d:f8:
ed:40:08:69:3d:ed:aa:94:ad:f3:be:32:d1:8f:8a:65:3e:fe:
5d:5b:3f:4f:6a:83:bc:0d:c6:e5:74:17:4a:c4:f0:c2:1e:f5:
17:3f:51:b9:65:90:c4:60:d8:3d:1b:fa:84:36:c0:38:3c:ba:
12:97:2a:47:29:23:eb:ac:65:8f:34:0c:5e:af:97:37:8c:b1:
cb:34:12:ce:04:cd:81:cc:b8:15:c5:a9:f9:42:41:9d:f2:0e:
60:51:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:54 2025 by rpki-client