Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier: xGc3ip+4TFqERwoikhVBRpYVuyzieUJ2/4DGDW/ddqE=
Subject key identifier: 30:72:A6:23:46:C9:15:A6:82:30:CA:1C:3D:44:CF:39:06:A1:9C:83
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 01964E59911EA27DF70ACFEA87FBE3B573D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number: 0696
Signing time: Sat 19 Apr 2025 14:00:14 +0000
Manifest this update: Sat 19 Apr 2025 14:00:14 +0000
Manifest next update: Sun 20 Apr 2025 14:00:14 +0000
Files and hashes: 1: 75LK0aL52naimh1x42NbpBoOy-w.roa (hash: +e/KEGbv2gq7/ZZoiVRRifw/ABGsD3UfOMxXZbs5gMo=)
2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: hgbd7E3msfjYwRrcz1DgMA26c4RrZWX6K4TVaZbBjD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:91:1e:a2:7d:f7:0a:cf:ea:87:fb:e3:b5:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: Apr 19 14:00:14 2025 GMT
Not After : Apr 20 14:00:14 2025 GMT
Subject: CN=3072a62346c915a68230ca1c3d44cf3906a19c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:6d:ac:80:6a:00:34:33:39:82:e1:63:8c:
08:18:ec:dd:42:c5:fd:37:c9:f2:35:f2:bd:9f:f4:
df:c6:9a:db:44:42:6c:53:a6:0c:8c:1d:74:c1:70:
5d:b0:48:c7:09:39:fe:25:08:84:20:88:06:ba:d5:
43:21:c3:89:06:d6:d8:6f:66:55:39:af:5e:86:b6:
b6:04:9c:ef:47:0c:fc:16:5f:58:8a:f6:64:b8:7e:
de:10:45:c4:d9:5b:b6:44:61:69:14:dc:15:82:6e:
13:27:67:8c:13:65:54:b9:94:44:e9:8f:fd:f4:1c:
c7:fd:1c:bf:ca:d1:d1:cf:c3:c4:7c:02:b7:ba:8b:
44:00:bf:91:59:70:45:46:ff:31:ac:03:c8:cc:6a:
27:6a:9f:fa:a0:a5:d9:47:ce:67:47:d3:41:3f:d5:
1e:92:c0:7a:0b:88:35:99:0b:eb:12:0f:3b:eb:65:
aa:b7:5d:ad:0c:fa:cc:a0:be:d9:7e:fc:a3:39:7f:
20:a7:0b:14:02:2e:37:18:94:b7:dd:0c:85:2b:44:
8a:3c:2e:7c:28:f4:cd:4c:c7:d6:cb:67:2a:31:09:
ca:cd:af:5a:9d:60:be:ea:56:0b:31:14:43:0f:50:
23:50:a4:38:bd:20:85:fc:d0:8c:5f:90:e7:6b:da:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:72:A6:23:46:C9:15:A6:82:30:CA:1C:3D:44:CF:39:06:A1:9C:83
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6f:d6:a2:65:ad:b8:d1:aa:5f:b3:6f:fe:13:61:11:0c:4b:
18:c7:5d:17:32:2c:0c:2a:eb:2a:bd:a5:dd:08:6c:90:4c:57:
d2:24:31:b6:11:1d:f0:4b:7e:1e:71:fd:6e:07:48:73:ec:e3:
69:97:ea:10:50:50:9f:db:77:28:bb:3b:90:af:56:ad:47:e2:
ec:23:2a:dc:4e:fb:80:62:89:f3:5e:66:6b:ff:46:f9:e6:2c:
b2:27:16:af:5e:d5:43:0a:11:b1:3d:54:10:c0:b1:cc:a3:a7:
f6:f6:3e:ac:1f:78:e9:4f:47:61:fe:56:8d:88:11:7b:3e:f4:
6c:ac:d1:9c:4a:50:2c:f2:cc:c3:19:49:1c:c0:a6:b6:52:33:
5e:76:65:92:df:c4:c5:de:c1:5d:48:3e:f9:0f:fc:eb:80:f4:
06:9b:65:89:54:fa:45:85:13:27:3e:70:fe:32:30:6f:f0:fa:
90:9a:e7:22:33:7b:0d:08:aa:17:6b:f9:2e:4e:c8:98:87:f1:
b8:20:80:7c:a2:95:35:ed:80:5b:d1:58:f7:07:a7:90:92:49:
03:ac:c6:43:3c:71:54:ee:40:61:c9:37:82:58:32:ab:40:aa:
bd:81:b6:e4:56:95:a2:12:29:27:21:ed:60:9e:c5:9f:3f:5b:
e1:78:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:13:18 2025 by rpki-client