Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier: 0kyR88OHR02DFC7tRFE5CHIVOvEocOhw2TPBeEQBjRs=
Subject key identifier: C0:FB:7A:6A:A8:AB:B2:07:12:91:28:93:FE:CF:23:12:EB:B2:BC:44
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 019511A287D3A75A1EDC6021B00D524BBA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number: 05F2
Signing time: Mon 17 Feb 2025 02:00:19 +0000
Manifest this update: Mon 17 Feb 2025 02:00:19 +0000
Manifest next update: Tue 18 Feb 2025 02:00:19 +0000
Files and hashes: 1: 75LK0aL52naimh1x42NbpBoOy-w.roa (hash: +e/KEGbv2gq7/ZZoiVRRifw/ABGsD3UfOMxXZbs5gMo=)
2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: fJsvXcaWRUlepatRGi/BQLvIlg9JM7NYGrK5sNXZfco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:87:d3:a7:5a:1e:dc:60:21:b0:0d:52:4b:ba:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: Feb 17 02:00:19 2025 GMT
Not After : Feb 18 02:00:19 2025 GMT
Subject: CN=c0fb7a6aa8abb20712912893fecf2312ebb2bc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:bf:3d:1b:6f:e8:37:c9:35:75:d2:e1:02:
ff:db:ae:76:90:84:55:9e:7b:ec:15:ab:f9:96:4b:
31:8d:88:65:13:56:b9:07:18:f9:4c:c3:46:56:1a:
dc:fa:56:f8:2f:9a:03:ba:d4:32:b0:eb:f7:ab:e3:
40:23:c4:d6:da:31:31:90:3b:42:f7:c9:06:fe:9e:
fa:e6:9b:3e:1c:bf:ab:01:6e:83:ad:d7:b6:5e:ee:
30:7c:d1:16:c1:c6:86:79:1a:2b:c8:8c:6d:bb:bd:
62:b7:ca:87:85:30:3c:bd:f3:58:87:bf:ad:d8:39:
e1:4b:af:0b:c2:1b:18:6b:65:a4:80:96:64:66:ae:
fd:8d:12:28:8c:b6:f2:75:05:21:4d:e7:59:2c:8f:
6a:a3:20:a7:94:02:86:e8:d4:32:11:2e:51:1f:12:
05:48:04:d1:5a:f6:4a:53:ed:b6:35:ed:4c:63:40:
f9:20:5c:f1:f6:59:8e:1c:eb:fe:16:17:31:da:5d:
f0:5d:d2:72:9a:63:34:ac:80:58:72:a7:09:bf:ac:
95:d9:64:e3:c1:52:1c:f5:17:ab:7e:13:6d:63:46:
13:19:74:4e:b5:72:6a:ee:f3:4e:ac:85:aa:4f:e0:
d2:74:74:91:54:5d:66:30:04:55:a4:ae:4d:05:8a:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FB:7A:6A:A8:AB:B2:07:12:91:28:93:FE:CF:23:12:EB:B2:BC:44
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:98:bc:d8:d5:f4:07:2a:85:bf:0b:45:83:ba:c8:38:dc:ca:
f7:02:ab:6e:cb:51:2a:ca:a7:a0:4d:a7:a4:2b:56:74:d5:7c:
88:68:a1:a2:98:85:da:d7:8c:82:0b:69:93:0f:9e:25:ec:59:
6e:6d:20:c7:23:97:c1:39:d5:11:96:5f:11:7e:c2:f1:c6:3d:
04:1f:f4:f6:69:db:24:bf:46:80:d6:f3:62:3c:70:f5:b3:d6:
d6:7f:84:9d:9e:d4:19:61:3c:50:b1:09:66:e5:05:e4:2c:00:
ca:e2:b9:05:ab:2d:ec:6c:10:76:1d:c8:cb:66:d3:e5:11:61:
0d:20:d8:38:e2:f0:2a:c7:c5:13:8b:3f:23:a5:f1:04:4b:ed:
60:95:2b:50:bb:3d:28:9a:d5:3e:6e:b7:88:aa:0f:83:74:5c:
89:af:c2:25:03:58:6b:26:a8:31:83:c0:c1:4a:f1:07:2a:3e:
be:67:d6:14:9b:2a:1e:81:28:af:d8:20:bb:9a:a8:94:e1:ce:
d8:ce:7b:61:b8:0d:90:df:76:e1:18:71:8d:55:ab:1c:fa:76:
24:1b:a3:ee:36:b3:13:6a:31:c4:41:3b:2b:17:2c:9f:e1:75:
30:8f:7e:e5:cf:e2:06:d8:9a:fd:31:8c:05:a1:c5:70:23:5f:
34:b8:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:25 2025 by rpki-client