Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: +BHX8ErnY86szHk0YlOZzoWg+vAD5gVeDq91M9CQ5uE=
Subject key identifier: 68:F7:7F:35:9D:8A:D2:6B:5B:03:C9:59:62:EE:53:50:6C:25:E2:57
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 0196B9A42110EC61AAEEB80060CB871921A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 10:01:03 +0000
Manifest this update: Sat 10 May 2025 10:01:03 +0000
Manifest next update: Sun 11 May 2025 10:01:03 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: Zf9rPJSBeqJWdBJ98nDK6g27w4TVTw+jSQFGRTL8QN4=)
2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:21:10:ec:61:aa:ee:b8:00:60:cb:87:19:21:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: May 10 10:01:03 2025 GMT
Not After : May 11 10:01:03 2025 GMT
Subject: CN=68f77f359d8ad26b5b03c95962ee53506c25e257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3f:2f:c9:75:97:b2:0e:15:1d:fc:54:87:58:
40:d0:9a:a3:8b:ab:4c:49:ec:ab:1b:a4:4a:dd:d9:
bb:62:1e:d6:57:3a:59:a6:61:e4:05:e9:8f:d6:10:
b1:a6:6a:6b:58:a5:fa:29:e6:78:b5:a5:95:98:6b:
c7:15:39:c9:58:5e:ba:5b:9c:f0:32:ae:fc:8c:9c:
8d:cc:49:eb:3f:b2:ff:04:77:e1:fd:62:ca:2b:b8:
6c:0c:58:f5:99:19:2f:3e:d3:aa:ce:0a:03:40:a7:
51:b1:17:ee:4f:76:2b:81:35:31:8e:d8:c6:2d:82:
7c:44:f8:0a:f0:a3:e4:5f:82:0f:76:1d:4d:f4:d4:
b6:4c:1b:bc:05:ce:bb:dd:06:50:8c:22:38:ad:4b:
4f:ad:88:59:2b:dc:5c:5a:09:a4:1c:6c:c7:f0:8e:
90:33:e3:32:a1:13:55:33:0a:92:e6:02:dd:2c:94:
b3:c7:be:c7:76:6d:43:02:e8:5e:17:dd:55:15:b3:
6f:4e:41:7f:7d:4f:8d:52:7e:1c:5f:d4:0d:05:f3:
f8:f7:ef:60:ae:52:ad:3f:1a:77:ad:af:bb:d8:0d:
04:09:e7:c1:7f:d6:d3:cc:8e:fd:aa:ce:7d:dd:0f:
aa:af:c1:d9:ab:6d:f3:ff:33:17:03:3f:36:4f:99:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F7:7F:35:9D:8A:D2:6B:5B:03:C9:59:62:EE:53:50:6C:25:E2:57
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9e:b2:c5:1b:29:af:33:c7:b5:74:e6:33:97:a8:0e:36:6b:
b2:05:52:31:90:2c:35:d4:77:f5:aa:f1:f6:f7:da:fd:b2:0e:
5e:27:28:56:1b:eb:8b:82:a9:d1:20:c5:a4:f7:62:2d:be:19:
dd:0a:0d:d4:9d:5c:87:2e:d0:0d:ca:c0:b4:4b:ca:23:cd:e0:
7c:8c:c9:e3:80:ff:60:e9:25:b2:52:ae:8a:54:ec:db:ca:a0:
ed:ad:a0:e2:22:23:9e:ec:12:f1:95:04:28:1f:3a:18:4e:cc:
44:c4:19:8d:b4:74:fa:81:73:52:bc:d1:39:18:d4:5c:7d:8a:
e5:f7:86:a1:c8:3b:17:3b:01:78:c7:a8:4c:8c:81:26:a1:7c:
11:71:73:49:29:8d:99:63:84:16:49:4d:c6:76:8f:65:05:1e:
ce:3b:32:b8:df:fe:68:e4:1a:d7:1d:6b:3f:f1:90:e2:1f:08:
a0:8d:4f:12:06:04:52:3e:c0:2a:e6:ec:64:c3:e6:8a:c0:cd:
a6:71:82:15:cc:c4:a8:e7:18:21:46:5c:f0:7b:b9:8b:7a:99:
18:35:64:7c:c7:6d:b5:64:d7:58:62:a0:6a:e6:d8:bd:02:d5:
9d:f1:9d:78:3d:e6:f6:07:8d:2b:65:d4:05:72:58:4b:3a:79:
fb:5a:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:56:31 2025 by rpki-client