Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: JXk3SZD5BFBO1EeNgtYyCFIj+PBXaSmSazZ39qkIkNw=
Subject key identifier: 72:54:D0:21:0B:07:B5:EF:47:1A:17:9F:BE:C5:B0:5B:E9:9C:64:E6
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 01974E5856E19838CA73C699473626AF9E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 10D4
Signing time: Sun 08 Jun 2025 07:01:41 +0000
Manifest this update: Sun 08 Jun 2025 07:01:41 +0000
Manifest next update: Mon 09 Jun 2025 07:01:41 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: NBdAFe5rI+H9pey4TXE94CiwzjnXtAkepsl0qH7ahrs=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:56:e1:98:38:ca:73:c6:99:47:36:26:af:9e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jun 8 07:01:41 2025 GMT
Not After : Jun 9 07:01:41 2025 GMT
Subject: CN=7254d0210b07b5ef471a179fbec5b05be99c64e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:e0:c6:e1:84:a5:89:19:12:e2:c5:3f:c3:
3c:6d:9b:96:ac:09:83:74:37:83:81:a6:5a:ac:b4:
74:87:a0:61:f2:df:b7:97:3b:31:a8:e4:46:28:6c:
00:33:2a:a0:d4:6f:ef:07:cb:dd:3e:87:fc:ff:a0:
61:b5:ec:0f:14:09:f0:ac:3d:f9:ae:6d:9a:99:5e:
ed:2c:a9:81:ee:be:20:73:83:80:c7:b5:b6:46:f7:
3e:31:63:d8:00:77:9e:fe:16:2a:fc:5f:12:f0:dc:
e0:c5:a4:7d:0e:ce:f5:b6:81:07:17:e5:1f:e5:2b:
e4:09:c1:1e:eb:af:5d:cf:e0:ff:ad:bc:4f:35:c3:
fe:e7:11:db:42:8c:f2:7a:b2:fc:56:3c:11:12:a1:
ae:87:6d:82:96:ff:0a:7a:2e:59:07:81:06:02:ba:
59:c3:50:79:c9:df:b7:74:35:75:22:05:85:79:2d:
b4:1b:c3:73:d5:87:fa:54:a6:1f:b8:fd:1b:17:c5:
1c:6a:75:a6:d8:4a:c8:60:fe:aa:be:94:ac:2f:b4:
b4:c8:d1:1c:97:a9:71:71:58:98:aa:38:f6:b7:67:
c2:3a:bb:11:30:0f:99:eb:e8:ed:98:73:fb:70:49:
e1:af:1f:67:54:4c:fe:8e:c4:c0:70:a3:03:21:4c:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:54:D0:21:0B:07:B5:EF:47:1A:17:9F:BE:C5:B0:5B:E9:9C:64:E6
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bb:7e:3f:5d:e6:63:66:f7:45:f7:ea:1c:09:3d:c4:32:86:
1e:85:65:9e:f0:b3:72:3c:21:5d:23:7a:48:0f:cd:fa:b4:a3:
d0:dc:92:d1:63:8a:bd:58:ca:9b:b8:07:bc:e1:b6:df:f2:eb:
88:6f:d6:80:ba:d5:d0:75:e0:e9:d8:d4:05:b7:b7:9b:69:e1:
0f:d5:5d:1e:a4:32:de:d0:6a:44:e5:50:00:ef:d9:4d:ba:91:
c9:17:41:08:a6:eb:3c:cc:e0:03:4d:19:1b:f6:95:2b:bc:25:
58:45:e5:35:20:8a:a5:08:09:c2:24:1d:bc:11:2f:19:27:3a:
12:71:77:7e:a2:77:6f:e9:3f:97:57:5f:f3:41:6e:da:06:ea:
c8:fa:5b:77:e0:da:98:16:cb:42:a9:b2:f5:d7:b0:69:d8:ec:
5a:e2:49:4d:88:ec:0b:ee:93:fd:d3:23:a1:33:65:01:82:e0:
4f:04:16:84:56:d7:36:89:00:2c:eb:c6:ea:18:46:4f:39:13:
57:47:d4:76:48:e0:19:42:db:20:de:54:4a:5d:23:e7:31:b9:
55:a1:09:b5:59:b3:c7:ea:07:a0:23:df:76:a4:87:08:ba:d2:
04:6f:33:85:d7:90:f6:64:6c:8c:64:ce:40:d5:ac:e6:8c:a8:
cc:c5:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:45:36 2025 by rpki-client