Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
File: OZETdfzEhZYSGQ6-zHrjcaAaam0.mft (raw, json)
Hash identifier: F1JdO5PV7hwK9GFi+1dkrSIOMiSXZcybe4qnLE4+GWA=
Subject key identifier: BF:22:BB:73:F3:9B:0B:25:FE:68:E6:E5:6E:24:CF:71:E9:AC:1E:E9
Authority key identifier: 39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
Certificate issuer: /CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Certificate serial: 0196BC36DE18CAAB7760654AA79F083A9146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
Manifest number: 0E5C
Signing time: Sat 10 May 2025 22:00:34 +0000
Manifest this update: Sat 10 May 2025 22:00:34 +0000
Manifest next update: Sun 11 May 2025 22:00:34 +0000
Files and hashes: 1: OZETdfzEhZYSGQ6-zHrjcaAaam0.crl (hash: lM/J2Hb/+150i89JF7H2dg2/ZyfVYFqe6hwkQ15Vtps=)
2: mV-huyQ7uf2YxiJ1JUpDypBxzhA.roa (hash: XQgQ9aC7Ey76psDYNwOwzM5lgNTkkh3rEJlv1Rte2h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:36:de:18:ca:ab:77:60:65:4a:a7:9f:08:3a:91:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Validity
Not Before: May 10 22:00:34 2025 GMT
Not After : May 11 22:00:34 2025 GMT
Subject: CN=bf22bb73f39b0b25fe68e6e56e24cf71e9ac1ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:c5:cd:e9:0e:76:94:e4:39:6d:7f:83:9d:
d3:3e:1e:91:1b:9a:fb:7a:d0:91:92:1c:76:68:69:
31:08:ef:9e:34:6d:c4:d3:b8:39:72:0a:12:14:aa:
f1:b4:87:d1:83:c5:fc:f2:42:61:9b:57:b6:08:a1:
0f:2f:d8:ee:85:a1:2d:91:bb:f1:e8:3c:16:ed:d4:
de:36:93:28:97:21:90:7a:44:3a:14:bc:e4:4d:f9:
1c:e4:6c:29:a2:1b:cf:9b:ec:0e:3d:af:ad:a8:21:
e3:0a:fa:ed:e9:7e:95:2d:cf:94:00:89:5f:ea:68:
af:51:25:d6:cf:43:f6:1b:1d:9d:ef:14:84:7f:a0:
10:22:c2:00:7e:2d:94:a8:fe:0f:08:05:29:23:51:
b5:fe:d0:fd:b4:1b:0f:38:b7:79:71:49:62:06:ac:
76:cf:79:4e:00:5c:39:77:d5:56:72:25:ba:57:67:
09:7b:60:e1:af:7d:5a:9c:94:db:f0:a8:87:5e:78:
d4:a0:f7:de:08:30:3b:08:b5:f7:96:3a:20:14:86:
ff:c8:ed:d5:2d:37:20:4e:f3:5d:5c:a3:42:15:a4:
b4:f6:e1:7a:7b:57:b6:63:fa:92:f8:c1:1d:1a:ff:
a7:6d:2e:d0:6d:73:4c:2c:35:a6:9c:69:33:4f:ec:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:BB:73:F3:9B:0B:25:FE:68:E6:E5:6E:24:CF:71:E9:AC:1E:E9
X509v3 Authority Key Identifier:
keyid:39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:52:d9:b5:f2:04:38:ed:dd:c2:b5:b1:ba:e4:8a:24:ac:c4:
0d:a6:13:8e:70:08:aa:6c:06:bc:00:3d:ad:f5:3c:65:10:62:
e1:d8:1b:06:1f:0e:93:47:fc:e1:4f:2e:0b:b5:87:a0:cf:77:
1c:60:6f:13:dd:6e:40:1b:78:27:69:14:23:5a:50:ab:70:6a:
96:cd:71:f8:ce:29:59:f9:76:80:8a:ba:d8:60:18:6b:2f:ee:
ee:eb:18:37:b0:75:04:63:70:84:ef:7e:f7:cd:95:e6:75:ec:
1f:53:8f:2f:0e:22:c2:69:ff:91:d6:38:7f:81:48:09:3f:6a:
00:bb:46:01:5d:0a:79:d0:0c:3c:fd:7a:5c:3c:6b:18:00:54:
12:29:45:e7:b2:71:d1:43:b0:76:5b:0f:e4:69:81:51:ee:ba:
57:84:01:1f:ef:b0:2d:fa:49:a2:fd:98:c0:78:0c:96:f7:bc:
1c:44:39:9b:d2:06:ac:a1:00:8a:15:91:47:c0:b8:7c:76:2a:
21:a5:2b:0a:5b:33:5a:d3:97:7a:b0:a8:e9:37:4c:0f:6a:46:
f4:51:a6:76:b2:c9:83:79:de:5b:46:e0:68:35:9d:a9:c0:48:
89:28:8c:68:5d:ce:47:39:aa:4f:d8:32:14:f3:f2:3d:6d:ae:
d7:1c:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:29:39 2025 by rpki-client