Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
File: OzdnJSANjYwAzw91FK8l_zYjEPA.mft (raw, json)
Hash identifier: bXQogYjPhv/Ua2xO5YLpgt3jwaf1nkmVxKDAErVVoO8=
Subject key identifier: D8:EB:F0:2C:3E:BC:3C:D2:92:60:46:7E:55:FD:83:B2:0D:D1:35:4A
Authority key identifier: 3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
Certificate issuer: /CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Certificate serial: 019655380146EE7532C128A858FD7CA65B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 22:00:55 +0000
Manifest this update: Sun 20 Apr 2025 22:00:55 +0000
Manifest next update: Mon 21 Apr 2025 22:00:55 +0000
Files and hashes: 1: OzdnJSANjYwAzw91FK8l_zYjEPA.crl (hash: WmT0KvFi8/arkeTvNtiuVapFmPVH0aRJEHBo2SW9ys4=)
2: mY9DqP6sBYRDAuWwviu5NNB6lIA.roa (hash: Jpwfq6zWzFUKhEKM7+C1EDuHC9fqQSYeca6cvS8lEYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:01:46:ee:75:32:c1:28:a8:58:fd:7c:a6:5b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Validity
Not Before: Apr 20 22:00:55 2025 GMT
Not After : Apr 21 22:00:55 2025 GMT
Subject: CN=d8ebf02c3ebc3cd29260467e55fd83b20dd1354a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:9b:3d:0e:ea:e6:53:40:88:42:e9:b5:69:
68:78:03:ac:a4:80:2c:b5:8d:e5:c4:63:f8:e0:63:
7a:03:f6:e8:e6:89:cb:2d:92:59:5b:4b:6c:e4:60:
74:8c:7e:b9:73:91:c2:57:e8:e6:26:c9:a5:d6:02:
30:07:0b:64:5c:30:fe:53:c3:d3:c0:41:14:30:2c:
60:e1:47:22:05:3d:78:74:0b:00:5d:0b:87:88:9d:
5c:71:ab:be:bf:3e:b0:a3:bf:6a:1a:d5:bf:91:d8:
6c:8a:a2:de:62:1d:78:65:99:7d:37:e2:5e:d8:a9:
7e:f2:13:58:a4:2b:46:2e:68:b8:8c:fc:c4:10:8b:
db:0c:72:de:a7:67:21:26:1e:6f:6c:2b:89:f0:21:
33:b8:bb:45:b3:38:1d:7a:0b:e6:ba:4d:d5:62:4a:
56:df:96:77:a5:82:46:c7:be:d3:83:85:9e:2c:a3:
0f:ac:2d:8a:85:64:8c:49:e8:2d:2c:09:4f:43:73:
89:c0:78:80:f3:e7:cb:45:00:63:b6:d3:2a:3c:61:
f3:29:d2:d7:7a:0e:61:96:9d:60:4a:b1:bb:b0:ef:
b8:f1:52:57:93:e4:b2:95:e7:21:b5:28:dc:2b:9c:
e6:05:82:8a:81:c7:45:86:a8:b6:4e:63:50:17:26:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EB:F0:2C:3E:BC:3C:D2:92:60:46:7E:55:FD:83:B2:0D:D1:35:4A
X509v3 Authority Key Identifier:
keyid:3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0b:f7:5c:67:d7:df:70:16:87:e1:4c:ce:bd:f1:2d:e1:a4:
78:52:d9:10:74:28:7e:6c:af:84:f5:c1:1a:bf:8a:9b:f2:56:
ee:98:a4:8c:a6:e4:49:17:2b:cf:81:51:fb:09:5b:76:88:86:
40:ff:ae:71:04:a1:c4:a7:81:53:6c:66:ae:9a:73:41:d5:48:
93:c8:0c:75:bb:02:6d:39:08:90:50:d3:1f:84:6a:6d:b7:00:
d7:14:79:d7:5b:a8:aa:bb:34:4b:4f:86:12:a6:59:cc:d4:24:
2c:57:88:fe:96:a5:59:a9:b5:14:0e:b1:12:05:8b:a9:23:81:
b4:42:cc:73:60:be:ef:a2:41:f4:b9:f9:0d:c4:09:05:22:40:
b0:b4:f5:ed:59:ea:e5:17:d7:95:50:f6:09:e6:6b:0d:11:59:
a7:18:69:c1:91:04:a8:4d:ce:a4:d5:73:ee:12:5c:31:a0:98:
34:e7:97:2d:78:b7:dd:ff:9c:19:e6:07:bf:5d:99:5a:da:31:
c9:0f:96:2d:6a:c5:c7:4a:eb:65:2f:49:19:69:df:6c:09:8e:
55:f1:31:d8:d1:31:ff:52:93:01:b6:0b:9e:8b:1d:7a:c0:00:
d9:41:41:83:a7:0b:2a:8c:41:1d:60:19:db:96:2a:e9:e0:45:
7c:68:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:48 2025 by rpki-client