Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File: OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier: QO/KI5Xv3SYe3XWYUnfrJb25AVlTaD2W/CROXqy8sek=
Subject key identifier: 58:8F:41:21:49:32:9E:2F:7B:D8:F5:BA:12:23:9D:39:F0:86:6A:8F
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer: /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial: 01958B4D5B4FE1E45BB65EFD2A16390BE2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number: 1493
Signing time: Wed 12 Mar 2025 17:00:57 +0000
Manifest this update: Wed 12 Mar 2025 17:00:57 +0000
Manifest next update: Thu 13 Mar 2025 17:00:57 +0000
Files and hashes: 1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: 2+UtL/UqiXpyqD5kF+uf8kOIfqq+5eeLmoiIXCmivU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:5b:4f:e1:e4:5b:b6:5e:fd:2a:16:39:0b:e2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Validity
Not Before: Mar 12 17:00:57 2025 GMT
Not After : Mar 13 17:00:57 2025 GMT
Subject: CN=588f412149329e2f7bd8f5ba12239d39f0866a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:c8:1f:d4:5c:ed:ca:78:5f:4a:4b:6a:06:
6e:47:8b:9b:b6:14:35:23:f1:bb:6e:ed:04:fe:c8:
3e:43:e4:10:95:c4:08:bb:d3:2b:3b:70:91:e2:e5:
52:ce:08:c3:84:e4:d4:e0:30:77:22:5a:ae:58:9e:
f6:eb:2c:ed:60:62:1e:f9:31:4a:1e:8d:19:0d:b3:
c9:65:a0:ec:49:65:98:21:8e:23:09:e8:90:47:f1:
2f:05:03:bf:d9:54:dd:3f:84:9c:d7:70:04:6c:cf:
48:a1:61:91:30:18:66:ba:cd:04:e7:2c:0c:f9:22:
8e:01:f2:e8:d6:85:dd:ff:54:16:62:a7:9e:9f:82:
8d:6e:b3:a4:d4:00:ec:93:67:2d:eb:f0:38:c9:02:
42:43:db:3d:02:a9:16:62:c7:ba:af:4c:74:65:0c:
28:1d:3a:36:b3:39:47:1c:a1:09:c2:f8:81:e8:6a:
9a:b7:bd:ad:cd:09:09:14:1c:00:74:52:2f:35:b8:
8a:ce:af:03:2e:34:4d:a1:69:d9:6d:7c:02:e4:8b:
25:5e:f7:a0:01:80:e1:5a:54:3c:e3:12:38:f7:6e:
f7:29:12:97:69:59:4b:6f:af:8e:2a:74:53:c6:bd:
8e:4d:2b:0c:07:35:6c:ec:b6:35:6d:49:4d:8b:85:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8F:41:21:49:32:9E:2F:7B:D8:F5:BA:12:23:9D:39:F0:86:6A:8F
X509v3 Authority Key Identifier:
keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:dd:f6:d2:cc:95:33:1e:86:87:cf:20:97:1e:61:de:e9:18:
32:cf:50:f7:5a:72:f6:1f:fc:bf:1e:35:c6:ec:3b:66:a9:fc:
47:50:9a:2c:5a:e9:67:58:af:83:40:a2:b7:2f:bf:16:5e:5b:
56:52:42:4c:1e:d2:e0:f8:ec:43:6f:5c:86:11:93:bc:ce:49:
c6:4f:c1:7b:b5:99:ca:42:1f:ee:68:68:4c:c7:09:34:4f:a7:
a7:09:eb:50:cd:65:e6:7b:76:5f:f3:58:c9:a3:4d:eb:6a:de:
be:9f:d2:16:56:1c:d9:df:64:01:41:18:40:25:e2:23:ca:ca:
4c:d6:97:9c:d4:09:90:e2:d9:a6:dd:e2:28:02:82:f5:a4:05:
15:81:44:76:41:2a:cc:64:8a:9e:5a:03:13:e6:2c:f3:2c:77:
c6:dd:3e:c7:3b:22:44:bf:f9:ac:9c:b7:a9:d3:8b:c2:11:15:
05:8a:1b:1f:1f:30:f2:4f:03:b2:9a:db:46:ac:47:3b:df:c3:
2b:d8:20:d0:e7:3d:e7:35:b5:8e:0a:e0:fc:74:85:fd:d2:ea:
b5:d6:14:29:b9:11:65:48:a8:42:b6:7d:a4:51:24:c2:85:c1:
dc:4f:1c:34:4f:bd:f4:ba:65:b0:7b:29:1f:df:d6:48:3c:bb:
6f:09:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:50 2025 by rpki-client