Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: FGrL2B9y28VUT1KRXdmyGxCxS1+U2WVPqLuFHOUUnDQ=
Subject key identifier: 26:A3:83:29:A1:28:EF:BA:AB:A5:DD:17:13:79:8F:DC:F6:E9:EB:53
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 0196534A6128851BD756B4B2157CCC1724B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 1052
Signing time: Sun 20 Apr 2025 13:01:45 +0000
Manifest this update: Sun 20 Apr 2025 13:01:45 +0000
Manifest next update: Mon 21 Apr 2025 13:01:45 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: GDwfI/3VEdPXZ/lpjqsVR9W1PEc6xyWp0Jrl3271aCI=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:61:28:85:1b:d7:56:b4:b2:15:7c:cc:17:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Apr 20 13:01:45 2025 GMT
Not After : Apr 21 13:01:45 2025 GMT
Subject: CN=26a38329a128efbaaba5dd1713798fdcf6e9eb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:30:97:f1:ed:78:47:72:86:4e:7e:88:00:6c:
2d:cb:91:2d:02:7e:71:99:70:c1:f4:86:e9:b4:93:
d0:0c:a1:2d:8b:7a:b4:05:91:bd:19:94:4d:85:24:
79:35:83:00:87:a9:56:e8:a4:0a:ba:a4:84:d2:4c:
6d:a0:95:6a:5a:a7:e0:77:c5:08:91:a0:fc:9b:fb:
0d:f6:ad:8e:2c:8e:d0:32:39:8d:bd:93:54:1b:bf:
52:59:e7:90:dd:ed:d0:46:0b:79:e6:0d:79:f5:49:
fb:7d:2a:bf:70:c4:d4:76:bc:6d:7a:41:95:1f:73:
0a:73:f7:e9:7a:13:3b:0e:c2:5f:7d:dc:6e:1e:06:
7b:a6:51:d1:19:1d:c9:b8:b5:b1:b2:ee:05:3f:9c:
92:da:80:32:d0:77:bd:4a:e3:b8:57:4e:58:e8:e3:
9e:18:19:88:10:de:0d:ce:f9:e0:7a:34:74:b7:e8:
ad:1b:1e:b9:c9:e1:fd:64:80:66:d6:1a:6e:5a:cf:
b5:1b:c6:6c:bb:7d:8e:08:c0:75:fb:27:eb:a7:21:
a2:23:d0:fb:5a:be:22:12:ea:2c:ac:8b:3e:db:44:
51:a7:d1:20:3b:f9:9f:0b:dd:dc:7c:f1:97:a2:cb:
97:1c:47:12:99:b4:02:b8:b4:ef:e1:8d:01:21:22:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:83:29:A1:28:EF:BA:AB:A5:DD:17:13:79:8F:DC:F6:E9:EB:53
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:95:fa:65:5d:8b:b6:ae:d6:17:04:c6:53:98:e9:00:ec:fc:
ec:08:f1:8e:7b:2f:ea:64:81:cb:57:1f:46:cd:07:c6:92:16:
d1:9d:e1:47:0a:38:a9:87:c4:b1:b4:c8:5e:bf:18:83:a2:e7:
97:e2:57:05:8f:5d:ad:3c:51:7c:05:19:f4:81:1c:f8:8c:4b:
42:fd:bd:d3:ef:f8:59:48:c1:17:49:9c:57:7a:67:64:0f:81:
6f:e6:61:02:4d:38:75:03:ba:f6:92:b0:82:50:c8:31:7b:38:
f1:86:c1:61:74:9a:08:18:6e:7e:17:ee:77:26:d9:9a:2e:b3:
74:03:78:a3:4f:33:fb:8f:0e:c7:cc:b5:a9:6e:41:e7:54:2c:
ec:26:38:5c:5c:2e:4c:20:4f:c8:40:30:19:e7:11:92:f4:e2:
5b:4c:54:88:e5:c5:fa:b6:39:b4:34:fe:2f:cf:4a:a9:74:c8:
28:57:1b:58:e0:35:69:66:a2:3d:d4:f7:be:db:cb:e1:bf:ef:
43:7b:2d:7f:dc:ae:1d:66:3d:01:3e:87:7a:6d:94:7b:05:15:
98:14:17:ed:01:bc:dc:55:48:65:7d:1e:f2:6f:4d:bd:52:7c:
08:76:ab:93:15:ae:ac:93:3f:4c:a5:30:13:53:a8:a4:56:f5:
9c:54:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:22:46 2025 by rpki-client