Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: zrIOUSpZGdiiiWRqF6EC2gpi0XC+fz63nKs0fl0WJoU=
Subject key identifier: 8E:A8:3A:49:93:6F:17:7C:37:11:14:82:6D:FB:6B:BC:A8:2F:E3:0D
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 019613FCE6FB76DC4C132A635E00E40DBDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 0F1A
Signing time: Tue 08 Apr 2025 06:01:03 +0000
Manifest this update: Tue 08 Apr 2025 06:01:03 +0000
Manifest next update: Wed 09 Apr 2025 06:01:03 +0000
Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: 4i3/ORyNcV5NphyyPYT4gZ13QJh7U35J/qFpup35Tk8=)
2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:fc:e6:fb:76:dc:4c:13:2a:63:5e:00:e4:0d:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Apr 8 06:01:03 2025 GMT
Not After : Apr 9 06:01:03 2025 GMT
Subject: CN=8ea83a49936f177c371114826dfb6bbca82fe30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:3b:55:24:1a:fe:c3:bf:10:ba:96:04:b9:
c9:f1:b5:99:d9:1b:07:2c:e0:c5:80:1f:ae:ee:75:
c7:03:32:51:84:ca:18:69:d2:f5:b6:0c:88:5a:fe:
ae:1a:91:43:9b:9a:31:f5:58:50:f5:8d:a5:82:5e:
bd:8c:a8:3a:3c:58:83:24:c4:ae:f5:0a:6b:b2:6c:
b7:27:44:06:fe:de:d8:e8:db:75:2e:31:ca:87:41:
f4:0b:18:f0:40:b0:51:17:03:67:fc:1b:72:a2:3e:
99:e5:8a:ad:b1:63:2d:b0:64:df:ee:ad:62:b0:10:
1c:c5:2f:47:97:42:9e:46:7b:22:56:1d:2d:57:8f:
ba:d5:47:22:0a:39:63:80:f0:d0:cb:65:1e:97:0b:
cb:9e:ce:7c:bf:a7:8e:05:46:f0:8d:4a:9e:0d:32:
db:24:cb:33:3b:ae:ba:8c:c2:89:86:2b:51:31:31:
31:ab:79:d4:19:64:34:cf:8d:66:b0:bb:7d:38:01:
dd:61:2a:83:9a:ae:85:bd:4c:4a:b7:f3:ba:a5:22:
96:2e:80:54:10:47:61:b8:2f:b4:c4:e0:21:cf:d9:
4a:1b:ff:7d:de:86:a3:20:39:19:4a:22:78:da:6a:
87:5e:62:5f:80:14:60:2b:c9:4c:b2:af:48:55:c0:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:3A:49:93:6F:17:7C:37:11:14:82:6D:FB:6B:BC:A8:2F:E3:0D
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:eb:39:53:a0:59:9f:d3:ad:f6:ec:e9:4a:75:e1:48:b5:
b0:83:93:43:a7:2f:5a:69:eb:2e:95:e1:73:94:b6:d8:c7:e7:
8c:ec:a6:45:b5:23:12:8f:ec:8a:44:11:c1:aa:2a:5d:a9:c1:
61:93:48:a3:0e:14:18:95:96:21:c3:c8:ab:15:04:35:b4:f5:
6d:e3:fb:c2:1c:ee:55:02:81:59:f6:34:41:49:d0:a8:88:d5:
c5:ae:78:9d:d3:4d:ca:07:7b:c5:fb:ad:8d:67:70:73:92:54:
7b:22:eb:17:76:c4:c0:e4:1a:3c:dd:0e:04:38:51:0d:c6:d7:
6f:6e:14:2d:80:81:75:d5:8e:42:e2:05:3d:2e:2d:44:a8:7c:
b8:23:7c:91:3d:07:79:64:ed:4e:07:27:6a:17:91:4b:f7:27:
54:50:45:36:8a:38:05:f8:d2:56:b5:11:74:76:85:95:21:96:
cf:d5:8c:a5:2a:b4:a0:55:ed:95:5e:46:a9:66:39:70:21:79:
13:04:37:d2:2e:48:f6:76:4c:0d:96:0c:b5:39:a0:e0:0c:44:
92:c2:d7:53:b0:bd:c5:2e:71:ec:60:37:d0:8f:10:c7:e7:e8:
55:e8:95:99:c6:83:72:08:67:47:1e:0f:e4:bc:66:fd:9c:a9:
10:a6:59:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:34 2025 by rpki-client