Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: 5VjUhDq9CquwkcxbUppCs5WD8Qo2675Si+EXuveUbrQ=
Subject key identifier: EC:14:22:8A:2D:E2:E8:23:84:64:D8:0F:94:08:0B:8D:FB:23:1F:19
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 0196B9A35835A27713666E951A892B4C3B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 1087
Signing time: Sat 10 May 2025 10:00:12 +0000
Manifest this update: Sat 10 May 2025 10:00:12 +0000
Manifest next update: Sun 11 May 2025 10:00:12 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: AeVsV6RIpmbWLHpCE6B5JfzVC1dtI+sb7tw7XAQcTLw=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:58:35:a2:77:13:66:6e:95:1a:89:2b:4c:3b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: May 10 10:00:12 2025 GMT
Not After : May 11 10:00:12 2025 GMT
Subject: CN=ec14228a2de2e8238464d80f94080b8dfb231f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:52:25:32:d1:21:a2:ff:a5:47:4c:2f:e6:8e:
5a:52:cc:20:b7:5b:02:e6:cd:41:8c:ca:b4:44:23:
64:f5:a9:4d:6d:61:b4:71:f8:05:66:90:e8:11:36:
4c:7d:3f:ec:b3:b7:6e:f9:71:88:93:45:2a:02:2b:
6e:f1:de:26:14:8b:75:45:e2:3b:85:22:40:08:4c:
fe:af:1e:fc:ad:d8:f1:ee:44:70:8e:49:d8:e6:20:
c8:eb:c7:e9:14:30:46:c3:f4:f1:51:20:c0:62:8a:
7a:2e:39:f1:bf:be:3e:3f:ab:00:24:5a:aa:50:ad:
0c:8b:d5:1f:fb:ff:d0:08:79:e3:e4:a6:3b:4b:78:
99:e3:69:65:90:3f:49:a3:2b:fa:48:d7:5b:5b:a5:
3a:29:69:a6:24:d1:db:2f:63:e2:e7:2b:65:34:8c:
c7:b5:20:19:d3:8f:b0:35:7e:19:5d:e2:16:dc:09:
87:f7:4a:33:ed:43:05:73:b7:20:25:b7:5e:8b:3b:
9b:96:71:36:a3:00:94:4d:eb:f7:ef:65:2d:88:7e:
25:c2:77:ab:e9:f5:ab:92:bb:59:bf:11:bc:02:69:
0b:f9:6e:bb:c4:32:43:cb:5d:29:35:96:2d:94:62:
3e:06:f9:02:f7:9b:c5:b5:21:5b:4c:21:5d:a3:a8:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:14:22:8A:2D:E2:E8:23:84:64:D8:0F:94:08:0B:8D:FB:23:1F:19
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:07:47:b0:e7:85:6c:5c:d7:59:8c:ec:ca:6d:23:59:87:da:
2d:cf:b3:0a:75:c7:8b:86:70:02:9b:dd:c9:b3:29:77:53:4b:
1e:c0:48:d3:b1:f8:dc:89:b9:2e:23:f0:f6:e8:f1:ff:a4:75:
fa:cb:46:ab:d0:49:b3:ee:6d:fe:68:09:23:9b:4e:19:ae:52:
cb:d6:ea:ca:4b:a1:e3:b1:f3:d8:f1:7a:34:36:74:ad:c2:de:
0c:4c:12:5a:03:07:27:1c:39:a1:1d:a3:06:36:66:62:a7:4b:
9d:a6:cc:09:f8:af:67:92:70:e3:52:27:71:ec:80:e2:fb:5f:
a7:b5:4f:16:ca:fd:ee:9a:47:34:3e:47:4c:5f:9a:30:49:e2:
39:0a:22:63:65:e2:bf:fd:f6:1a:a3:6d:31:d0:b0:7d:98:19:
bb:b8:f0:4c:52:23:94:b6:94:49:15:b6:70:0a:36:f8:66:4d:
0d:c2:55:4f:3b:e9:7b:98:11:0a:10:4c:53:be:36:9d:b4:af:
89:e7:ad:1a:66:bb:7d:be:39:eb:86:e4:23:3a:3e:ef:e8:e9:
7c:b1:98:21:07:ad:7b:27:2c:fd:1c:fa:53:75:cc:76:9d:0f:
71:91:cc:b5:fe:34:59:56:cf:d4:b0:82:30:46:7c:1a:1d:b3:
1e:8b:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:50:31 2025 by rpki-client