Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
File: OzdnJSANjYwAzw91FK8l_zYjEPA.mft (raw, json)
Hash identifier: HU5vihyRCOqE/HJzxsSgpf05MVix1wClKAI+R9yF8N0=
Subject key identifier: D6:91:CE:65:CB:3E:AD:EA:BF:B8:15:F4:96:8C:55:27:54:68:5A:28
Authority key identifier: 3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
Certificate issuer: /CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Certificate serial: 0197B6A13483A6F76359BDA4587E885941B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: OzdnJSANjYwAzw91FK8l_zYjEPA.crl (hash: GL21v9rRFyAMHAcsi8qfKf6fL+LiwFoRfS1PDvxVRxY=)
2: mY9DqP6sBYRDAuWwviu5NNB6lIA.roa (hash: Jpwfq6zWzFUKhEKM7+C1EDuHC9fqQSYeca6cvS8lEYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:34:83:a6:f7:63:59:bd:a4:58:7e:88:59:41:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=d691ce65cb3eadeabfb815f4968c552754685a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:f2:92:aa:2a:81:74:da:78:9e:80:50:d4:
87:04:b5:93:2a:ec:d3:f5:84:15:42:b0:23:c6:6e:
8f:02:2f:95:90:bb:57:2d:16:2a:54:77:3a:83:67:
67:e4:af:32:5e:ac:4f:b1:fc:e6:0f:58:4c:a2:20:
a8:7b:eb:8c:7a:e0:50:17:3f:c0:44:9e:4f:91:de:
38:8d:61:a9:7c:2f:74:60:39:29:30:5f:14:d4:77:
40:73:cd:ff:28:2e:62:6e:b1:fe:c3:63:3f:41:b1:
e3:30:25:af:b7:2f:7c:b8:14:36:33:69:48:67:d2:
c4:9f:24:9f:6c:52:8e:34:a8:04:86:88:c1:9e:ee:
84:0b:45:81:42:93:26:35:21:58:8c:0b:be:3c:d3:
c8:8b:a6:da:ca:a4:af:7b:a1:57:57:11:78:99:a2:
1e:66:38:b6:78:bc:e1:1b:c4:ec:1f:4f:02:64:3e:
b1:02:b0:bb:4c:d5:40:3f:10:15:5d:53:c1:36:a1:
e8:40:86:e5:25:cf:7c:46:35:3d:1d:d7:4e:a0:3a:
26:76:67:c5:62:7c:52:e8:94:6c:86:6c:f0:c8:90:
b0:8a:21:65:63:66:1f:58:26:87:ea:4a:3a:09:88:
fb:ac:1a:e8:8a:4f:0c:6a:9a:30:5b:8b:6b:b2:0e:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:91:CE:65:CB:3E:AD:EA:BF:B8:15:F4:96:8C:55:27:54:68:5A:28
X509v3 Authority Key Identifier:
keyid:3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f9:4e:7c:42:84:26:16:63:b0:2c:8a:e5:f5:39:bd:dd:5c:
05:d2:78:1b:cd:ec:61:75:a3:83:54:92:ee:b0:25:51:30:4c:
7c:f9:ae:31:2b:66:ed:96:b2:d8:bd:96:5b:20:1d:2e:57:c5:
8c:f7:06:a8:fa:f3:9c:45:7f:29:57:82:26:02:db:85:a9:25:
c6:e4:6b:c6:3e:46:3d:c7:0a:c4:9e:7d:b6:c4:36:da:de:32:
34:96:f0:92:f3:97:b2:3e:8f:fe:3d:4f:62:fd:a3:e0:9f:ca:
02:01:c1:ce:50:19:a7:e4:d9:dd:fe:37:e2:ae:ae:57:8f:db:
07:a5:b5:66:55:72:ee:cc:71:ce:ad:55:8a:65:c7:34:85:a4:
71:19:c6:4a:18:3e:d6:01:ad:fc:5f:5b:13:e2:39:81:0d:a8:
b3:03:31:4f:7f:21:d4:90:72:3d:be:f8:a3:b8:c2:b4:da:1a:
c7:bb:26:72:83:5f:1c:b5:3e:f2:b5:4b:b9:2a:9e:c4:61:59:
a0:be:f5:0b:5a:2d:49:04:4c:ed:19:59:de:7f:fb:94:00:22:
c9:2f:cd:d8:dd:eb:53:ec:36:07:e5:c0:e9:dc:34:e5:48:55:
5c:aa:d9:ef:4b:60:0d:a6:ac:85:30:7a:e0:8c:7f:31:37:71:
e3:f2:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:52 2025 by rpki-client