Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: W31Ku/w8GtW8dJCQFjN/Fwm3MSjeI46v81yG7ZiX5w0=
Subject key identifier: E3:A5:D0:05:DA:9E:05:6F:8F:F0:5B:19:E1:BF:DD:0B:5F:80:64:6C
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 019655A5D275DD2789F86C722A935073116E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 0106
Signing time: Mon 21 Apr 2025 00:00:52 +0000
Manifest this update: Mon 21 Apr 2025 00:00:52 +0000
Manifest next update: Tue 22 Apr 2025 00:00:52 +0000
Files and hashes: 1: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: ISlyYwQdQLYksKMz015XqdD50Lye5WmmlMaFyxHy9/Y=)
2: q9EscCe7t5gVibmBd58asAmZMUg.roa (hash: VIc3vlhk4rBIAMQ48+/9jl8SQU9fOCllGCJznJGDS5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:d2:75:dd:27:89:f8:6c:72:2a:93:50:73:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Apr 21 00:00:52 2025 GMT
Not After : Apr 22 00:00:52 2025 GMT
Subject: CN=e3a5d005da9e056f8ff05b19e1bfdd0b5f80646c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:11:56:be:38:30:f2:1a:9f:88:d7:02:78:
a1:36:6a:93:b6:d4:f3:c6:b4:04:c5:b7:7e:9f:e5:
ff:fa:e7:87:cc:15:57:59:38:aa:ff:7b:69:e7:90:
9f:a7:03:bf:35:b8:24:f3:2e:dc:e4:36:e5:e3:99:
b7:70:f8:68:84:d5:14:3b:a9:2a:c9:0e:ae:e6:73:
15:ec:6a:34:4a:38:5d:04:56:f3:e3:d1:03:a5:c2:
66:66:b5:6c:4f:4c:06:8f:f4:61:2d:35:55:77:27:
2a:82:eb:a3:67:b9:63:91:dd:52:ef:ef:f8:b8:2b:
62:f5:71:1f:26:e9:71:02:db:8d:24:73:d8:50:9b:
66:da:74:c1:f1:7d:bf:4f:a7:c9:81:af:74:a2:4f:
51:16:01:aa:3a:f1:10:c6:4c:4b:15:47:04:28:86:
98:aa:f2:29:2f:21:70:ee:88:bd:b8:64:f1:c1:bb:
3a:79:1f:2c:fb:b7:fc:e4:75:15:28:0a:71:37:29:
2d:43:e2:0a:1c:35:5e:92:7f:7c:c0:07:51:ca:28:
83:c5:68:16:4a:89:98:03:12:ad:b0:52:30:cf:c3:
c8:95:5d:34:5b:76:76:ef:73:6d:6a:97:9c:ef:e7:
84:8c:41:9d:0c:c6:25:50:12:cd:2b:65:99:ec:28:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:D0:05:DA:9E:05:6F:8F:F0:5B:19:E1:BF:DD:0B:5F:80:64:6C
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:89:28:4e:17:bf:3d:8e:8e:3e:db:5d:6c:b7:9a:61:6d:b3:
cc:ca:0b:a7:fb:4b:a4:59:12:a7:a8:d8:27:7d:18:f2:bd:4e:
6d:52:39:65:98:1b:58:00:63:63:50:5e:1a:5d:c0:71:22:16:
98:78:20:77:d8:18:f3:da:78:84:bb:f3:46:60:a5:79:62:da:
ca:ac:a0:f4:ec:9d:ba:73:fb:16:59:b2:73:39:0d:88:79:f4:
2e:6d:1b:4c:de:89:ea:65:5a:3c:4b:a5:66:c5:3c:91:25:bc:
17:81:54:3c:c0:62:b2:c8:83:97:df:99:fb:40:b9:7c:ed:5c:
52:99:58:e7:f7:06:2b:0b:a9:cb:c3:70:65:ad:39:4f:7c:08:
7c:28:14:cf:39:dc:31:ba:1e:74:f3:2e:41:53:fd:b5:7a:51:
d9:25:af:c0:5e:74:78:88:cd:c7:c5:7a:c1:1f:d8:30:0e:ea:
1d:b9:f1:3f:c1:1b:73:f4:d2:8c:e4:de:c1:0a:46:c5:49:d0:
48:da:e0:06:5f:9e:7d:ae:e0:5e:86:d4:f2:ae:e2:8e:9c:65:
e9:48:50:f6:77:d8:91:17:a5:52:f4:cc:b5:eb:c8:98:31:8b:
92:5d:b9:a9:8d:ae:60:7a:77:31:b8:da:31:1f:7d:e9:5f:d2:
ab:57:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:37 2025 by rpki-client