Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: XcH0UzTA2GHsHogFl0QyE1e+fDUFmxnrxZhid+4Kmyc=
Subject key identifier: A9:30:75:C3:2D:01:E6:8B:41:DB:A8:DD:9F:70:55:BB:FB:1E:30:CD
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 0195903CD51CED19D622C1955DF3CCE76D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 0FED
Signing time: Thu 13 Mar 2025 16:01:00 +0000
Manifest this update: Thu 13 Mar 2025 16:01:00 +0000
Manifest next update: Fri 14 Mar 2025 16:01:00 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: tustBbHV7Xu+09AYPQcahrYgJhE9Pm+PqrQIbVIqBJQ=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:d5:1c:ed:19:d6:22:c1:95:5d:f3:cc:e7:6d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Mar 13 16:01:00 2025 GMT
Not After : Mar 14 16:01:00 2025 GMT
Subject: CN=a93075c32d01e68b41dba8dd9f7055bbfb1e30cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:5a:fa:6b:52:85:fa:44:2f:cc:10:8e:f9:
39:60:8b:87:68:b2:69:0b:f2:8f:2c:33:c6:4f:3b:
95:ec:f7:52:6f:90:c4:01:14:8c:ae:3b:53:26:04:
d8:3e:ba:dd:72:a0:92:48:44:1e:26:5c:0d:9e:9c:
9a:0d:38:c1:42:d7:68:1b:2d:01:59:ea:56:26:5d:
13:67:0d:8a:e8:68:31:bb:b9:30:3d:1d:02:70:c6:
92:6c:84:2c:db:9f:a4:e8:30:c2:97:7f:3d:d9:a2:
d6:a9:1f:35:81:df:25:e9:9c:52:1e:bf:8d:6f:57:
55:7c:c7:43:ec:81:bb:42:6b:7f:73:01:a7:da:0f:
aa:8f:b7:55:89:f0:35:e3:a5:2b:4e:8a:16:7a:1e:
38:ce:aa:7e:9c:0d:60:85:b4:e4:8f:96:ee:39:d2:
63:7c:79:40:89:6f:e9:f3:7b:d7:bb:d7:ac:6a:f8:
fe:e2:2b:e8:a5:08:af:96:53:8b:c1:ad:94:38:a4:
45:1e:1b:a6:c9:81:ad:ec:5d:b1:a5:1c:ca:1b:30:
a3:32:eb:76:b2:0a:96:c0:3b:a6:c8:87:b7:0d:f7:
e0:3f:2d:d7:e0:91:df:b2:3f:bc:11:1b:36:09:7b:
f2:9c:98:01:21:fc:e7:7a:0e:fd:23:dd:b3:82:d5:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:30:75:C3:2D:01:E6:8B:41:DB:A8:DD:9F:70:55:BB:FB:1E:30:CD
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ac:f9:81:df:2b:cf:e2:d9:c4:bc:07:76:ce:57:bd:dd:2b:
f4:6a:99:25:84:db:1b:26:3e:e2:9b:f0:c5:ca:97:8f:86:e8:
62:cb:a8:2b:c8:e3:2a:4c:31:e3:35:ec:9c:8e:6b:d1:c6:7e:
29:53:25:d8:c0:d9:2b:26:32:86:b1:0e:66:21:01:cc:2c:69:
50:42:64:e3:c2:6c:77:c7:7d:85:cb:b6:c1:10:31:2c:b9:f9:
1c:ef:68:de:79:35:9b:75:60:f2:56:de:b8:b4:d0:b6:58:47:
b2:91:5e:b5:9f:a8:81:be:11:4a:be:16:63:4f:55:3c:8c:d9:
c5:f9:37:81:48:b4:82:14:79:70:9e:8b:2b:4c:ed:06:94:ee:
03:e3:32:63:0e:3e:25:d9:ad:e4:92:66:ce:0d:ee:00:3f:2b:
8d:c1:12:6f:c5:01:29:bf:29:06:d6:a4:4c:7e:c1:24:38:c6:
6a:80:02:d7:5d:e7:ec:99:36:2e:96:d2:fc:43:44:06:64:20:
0e:b6:1a:ba:29:21:a1:4d:fc:67:0a:61:9e:64:9a:8e:93:0f:
ca:d8:10:47:4d:5f:65:94:7d:50:2d:98:9d:44:a7:55:c7:47:
01:65:4d:5e:38:43:3c:6e:af:96:0f:5f:c0:5e:65:33:94:a8:
68:8f:7a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:20 2025 by rpki-client