Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: 8A9o0bBLT6txq725yaa3gmJdARXitVK+stXc8tHaNiw=
Subject key identifier: B2:FF:1B:1D:AC:18:00:DF:97:22:A4:C5:96:61:3C:F7:E1:21:7E:B6
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 0196A0F728012C9B0A45E96C9FFBAE704925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 012D
Signing time: Mon 05 May 2025 15:01:14 +0000
Manifest this update: Mon 05 May 2025 15:01:14 +0000
Manifest next update: Tue 06 May 2025 15:01:14 +0000
Files and hashes: 1: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: Jsma5JLrgLwgsNDtW40Si5+mqCVqrjJ6ami+oV3q1a0=)
2: q9EscCe7t5gVibmBd58asAmZMUg.roa (hash: VIc3vlhk4rBIAMQ48+/9jl8SQU9fOCllGCJznJGDS5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f7:28:01:2c:9b:0a:45:e9:6c:9f:fb:ae:70:49:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: May 5 15:01:14 2025 GMT
Not After : May 6 15:01:14 2025 GMT
Subject: CN=b2ff1b1dac1800df9722a4c596613cf7e1217eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:31:0c:5c:01:5b:d3:e9:1d:97:b1:7d:40:
62:24:78:13:5d:38:3a:c5:1c:0f:fd:68:21:c2:73:
dc:e0:3a:0a:bf:a1:06:a8:fa:39:7b:01:4d:b2:99:
9c:c8:2a:ba:6b:f6:de:06:3e:cf:38:5e:8a:0d:ad:
1e:67:a9:40:fe:07:f0:48:1a:74:61:7a:50:e4:c1:
e9:a6:d8:d8:62:36:b6:a7:c6:32:04:96:6a:8d:ea:
e3:9f:de:7e:8c:4e:0d:ff:98:33:4a:35:00:4d:03:
af:c9:90:68:13:da:32:01:f0:c7:de:9d:57:4c:ff:
e8:05:29:57:a6:1e:74:48:0c:58:f4:76:df:72:51:
ba:c1:9e:3e:b1:7a:19:f7:9c:d7:5c:c7:0b:d9:ec:
60:a6:4e:3e:55:0b:99:b3:3d:1e:86:08:18:e5:b2:
e4:b4:32:26:26:15:79:88:78:19:97:80:47:51:9e:
af:0f:01:bd:c0:8d:49:ae:6a:8d:6d:6f:90:0f:90:
6d:ab:a9:9d:b7:92:de:76:63:c1:a8:e7:f7:77:16:
6c:50:b6:92:03:a8:9e:fe:f5:c6:2a:5e:6b:00:50:
37:2b:55:29:89:b2:f2:fb:d7:cf:cf:cd:07:80:f8:
81:f8:dc:af:54:5a:1b:f0:9c:7d:41:7c:23:dc:da:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:1B:1D:AC:18:00:DF:97:22:A4:C5:96:61:3C:F7:E1:21:7E:B6
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8c:c5:a8:d3:b2:1a:9c:dd:bf:7d:9e:6c:05:ef:a2:19:98:
77:92:7c:68:02:44:f1:99:36:1a:9d:2c:03:24:3d:f6:af:d4:
c9:0e:1a:ce:7b:c9:82:28:7f:c6:ec:37:9f:79:a2:c5:d1:dc:
93:8b:ee:75:c1:c3:68:53:00:30:b2:45:65:9a:a4:2e:ff:5c:
34:de:48:58:dc:9c:92:8c:b5:0c:f2:90:61:9c:3b:01:83:06:
0e:9d:0a:e1:31:77:3d:4c:61:ce:5a:fc:ca:08:72:fb:e9:aa:
f3:af:2d:ee:ce:17:02:3d:57:30:00:62:20:ee:b5:c4:79:d2:
69:e5:79:68:37:35:a5:d0:27:8b:07:f1:fe:71:1f:d7:85:37:
2a:b7:ae:be:dd:14:a6:c3:fc:52:8d:98:9e:b4:43:4f:39:ee:
12:49:a0:28:2f:ed:d8:5f:3f:9a:bf:37:1d:04:39:1e:6d:70:
34:e4:de:c6:4b:a2:a0:6d:0d:ff:0a:a7:da:62:0d:92:87:a2:
53:4b:2f:ed:ef:fd:62:9b:4f:8d:39:6d:94:27:06:38:0c:c1:
d1:fb:e2:33:e3:49:cb:e0:de:23:c9:c8:0a:30:07:6f:9c:ea:
40:61:dc:00:6c:b4:13:50:cb:b3:72:58:18:59:ac:5d:37:d3:
69:83:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:43:02 2025 by rpki-client