Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: ux9nEqCVyhsmn6HqkVGJVJ0SX9OH1K6ekZupdw43AW4=
Subject key identifier: BE:43:FA:D1:76:1F:15:19:8B:29:A9:D5:CB:58:9E:99:7D:7F:46:50
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 0196AB0CB31987DFBFDA2517D92D65B0A9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 14:00:58 +0000
Manifest this update: Wed 07 May 2025 14:00:58 +0000
Manifest next update: Thu 08 May 2025 14:00:58 +0000
Files and hashes: 1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=)
2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: HecnAegtkQlxaEwVfkCM2B5idx+ZCapebO0EZWFx2hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:b3:19:87:df:bf:da:25:17:d9:2d:65:b0:a9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: May 7 14:00:58 2025 GMT
Not After : May 8 14:00:58 2025 GMT
Subject: CN=be43fad1761f15198b29a9d5cb589e997d7f4650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:dc:bb:85:bb:88:30:ed:6e:09:d8:a7:78:
c7:cc:a2:e7:d1:0c:d8:a8:7f:8d:78:7a:64:73:98:
1d:c6:f3:ed:85:2d:95:59:7a:47:07:eb:ea:a4:e8:
f1:84:50:36:7d:b0:a7:81:07:06:ab:27:70:b8:42:
96:e6:bb:f9:37:c2:b1:19:2d:f8:31:56:c8:1e:05:
a6:ca:b1:c1:68:cc:82:94:a3:f5:36:1e:d8:13:3a:
10:64:91:ba:f0:f9:48:12:f8:6b:86:aa:33:3e:ef:
d2:16:16:18:2b:dd:4d:8f:c7:52:33:73:60:50:fb:
af:27:be:cd:37:8e:f8:cf:33:5b:44:4a:ff:6c:db:
c6:f6:74:53:51:65:3a:b1:17:b5:bd:7e:c9:9f:ee:
dd:55:57:8d:17:97:e3:23:cf:fa:24:76:71:cc:b8:
eb:50:5e:29:97:ea:66:4b:bc:48:62:5c:5c:b0:a0:
e9:2c:97:7f:c4:62:5d:f8:b2:88:08:98:3c:3c:18:
47:e4:08:69:ee:87:a5:65:a3:47:ef:5a:5e:61:1d:
d5:73:7b:ab:91:75:d9:38:58:9c:3b:f0:b7:d8:b8:
96:62:89:82:76:74:72:66:e1:98:e9:af:3d:ef:1c:
60:94:16:50:df:c5:f2:33:27:72:2b:53:67:33:a6:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:FA:D1:76:1F:15:19:8B:29:A9:D5:CB:58:9E:99:7D:7F:46:50
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cf:06:c9:09:c7:11:91:0a:81:17:cf:39:53:d5:91:af:0f:
af:83:3c:f4:16:0c:c9:9e:1c:23:9f:e2:46:ce:aa:40:da:92:
9d:2a:f8:07:54:70:93:ab:78:4a:5c:d4:ef:68:99:5c:d0:12:
66:36:63:12:a5:ca:ea:89:36:35:80:69:fd:15:df:b7:2a:b6:
cf:ca:b5:57:91:c0:fd:68:c6:27:c1:c0:d0:5c:41:43:28:7f:
b1:bb:ed:4a:52:80:ac:de:da:db:1d:5c:1f:a4:3c:d4:fc:65:
f6:02:6e:10:03:ae:61:d9:2d:5b:08:f2:0c:6c:ae:fb:37:99:
2a:a4:98:0a:68:21:1f:30:67:00:70:80:27:58:ca:68:2f:8b:
34:2f:5a:ed:2a:0c:e0:5e:2c:8c:8d:de:38:af:80:d0:a5:ab:
f0:92:47:14:0f:48:73:23:bc:28:fe:b5:1e:1b:96:39:b4:c3:
c5:f0:2a:b2:0e:2d:27:2b:51:4c:05:98:72:ff:cc:d5:3d:e5:
91:7c:dc:2d:9e:f6:2b:23:c3:f7:8e:5d:80:a3:08:29:8f:20:
38:c2:5e:ab:a3:f5:f5:2b:df:cc:9e:8c:06:32:1b:07:5e:58:
69:a3:e5:59:42:90:74:a0:09:8a:a8:a6:70:48:15:04:d6:00:
13:14:56:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:55:21 2025 by rpki-client