Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: 8Wjj/TrkBlJN9eG8UBCjzlgUmZFJhywnMxENN/WgGtA=
Subject key identifier: 68:A1:1B:17:7D:6E:74:84:2F:3F:B5:76:DC:00:59:68:D8:57:58:0C
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 0196BC36C51850CFF5F9F79ACB1B4B4C80A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: 0361
Signing time: Sat 10 May 2025 22:00:27 +0000
Manifest this update: Sat 10 May 2025 22:00:27 +0000
Manifest next update: Sun 11 May 2025 22:00:27 +0000
Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: oTqYbZJn+H1RZiXcjOxxbOT7GPmGIGCFLl1ZGtzXE80=)
2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:36:c5:18:50:cf:f5:f9:f7:9a:cb:1b:4b:4c:80:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: May 10 22:00:27 2025 GMT
Not After : May 11 22:00:27 2025 GMT
Subject: CN=68a11b177d6e74842f3fb576dc005968d857580c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:64:dd:02:00:ad:5e:77:4f:72:89:1f:fa:
e4:7b:26:a9:eb:1a:c8:de:76:d5:eb:e4:60:96:bc:
af:f1:d7:e6:f2:7d:3f:ab:15:9b:7b:a3:a0:32:63:
7e:98:8d:76:06:f7:f6:fa:1f:4c:88:7a:60:7e:fe:
26:b5:42:8f:6e:30:5a:c0:6a:64:28:93:7f:22:4a:
f1:7f:00:6d:b1:34:5e:4c:83:98:d2:82:ae:fc:d0:
fc:e3:2a:a3:ac:af:ba:ab:00:9f:1b:25:c0:ba:31:
0c:00:99:ac:7e:1f:bb:17:dc:bd:92:59:52:83:d9:
53:f8:49:81:d6:90:cc:03:bd:98:d4:86:e3:48:4f:
27:c4:82:54:4f:27:65:bb:a5:52:a7:72:d1:a7:8a:
cd:f1:21:f3:e9:b0:0f:76:7a:84:42:b0:2f:a5:d1:
39:28:85:d3:d2:84:fd:24:94:98:7c:2b:5f:59:5b:
e5:25:6a:fb:f4:4c:bb:c4:bb:b6:9d:16:50:97:2c:
8b:65:03:39:48:32:2d:0e:76:5e:10:42:3c:36:0b:
6f:2b:1a:3e:64:8d:fa:95:6a:84:71:3b:15:83:ee:
6c:91:07:ac:4e:9b:ae:07:6e:27:30:40:1c:e8:d7:
a5:f3:b9:e2:6b:00:48:40:51:04:8e:0b:45:71:78:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:1B:17:7D:6E:74:84:2F:3F:B5:76:DC:00:59:68:D8:57:58:0C
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:53:19:29:ad:4e:0e:a5:e0:57:0d:ec:5d:10:9b:53:92:24:
77:14:6e:d5:9f:74:56:04:25:24:bb:1c:84:87:25:8c:e1:73:
09:b6:05:0a:fd:90:1f:55:f0:87:53:ef:cb:ca:0b:73:09:94:
6e:67:b6:e5:94:da:5f:91:36:86:3d:c0:76:de:9f:f3:b9:07:
b6:72:53:42:a1:64:dd:0d:43:cb:45:7b:26:df:c1:36:97:f4:
a8:a2:7f:5b:a4:ba:2f:c1:8c:3c:11:66:55:fa:e4:fd:a2:3f:
05:c3:c4:46:57:62:c5:c8:c5:ce:24:2c:f6:f2:74:e5:f3:a6:
9c:23:57:ff:1a:15:db:87:f4:10:61:8d:a5:25:0e:29:f6:b8:
9d:6e:14:ba:f4:e4:09:95:49:ff:e4:8b:b7:40:2e:8f:ff:7b:
f2:14:1e:c1:ac:d3:97:4e:c6:50:52:d6:7e:63:95:5a:ba:bd:
be:8f:6c:62:52:f9:48:67:19:a2:39:38:e4:0c:3f:2a:38:b7:
cb:c9:fc:2f:e4:2f:93:15:c2:25:82:12:7b:75:ff:f3:a0:6a:
6f:13:e8:41:36:f1:d6:2b:2c:d8:72:de:a0:8a:15:eb:ce:0e:
ac:7e:43:23:d5:65:3c:11:0c:43:76:17:41:80:0d:21:0b:db:
5e:f3:25:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:17:56 2025 by rpki-client