Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: wK39MZWUkZRoI4vauvZY3K6TkNW+MSZv+1ghS3vfIsQ=
Subject key identifier: 83:27:13:16:51:F7:3C:95:D4:5E:E4:12:28:C7:BA:DE:1A:22:5E:00
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 0196165925A32B15748ED85876DD377818ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 1170
Signing time: Tue 08 Apr 2025 17:01:03 +0000
Manifest this update: Tue 08 Apr 2025 17:01:03 +0000
Manifest next update: Wed 09 Apr 2025 17:01:03 +0000
Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: kL2G4opIWZaihJk6hJc5aT7Qb1gUAnwxyfnMOJLTBws=)
2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:59:25:a3:2b:15:74:8e:d8:58:76:dd:37:78:18:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Apr 8 17:01:03 2025 GMT
Not After : Apr 9 17:01:03 2025 GMT
Subject: CN=8327131651f73c95d45ee41228c7bade1a225e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:45:96:ed:98:ac:c1:7d:f2:68:16:da:15:
be:2c:32:84:6c:55:51:94:3e:a9:64:4d:41:c7:bb:
ee:9e:86:cc:16:c6:4f:7e:f4:a0:c8:ba:c9:88:91:
d7:06:19:44:4a:e1:a8:df:fc:3c:e6:6b:2b:3d:7b:
9d:e1:18:81:de:8d:6e:fb:19:58:38:eb:ab:7f:2e:
c0:d8:ba:ad:d6:b2:ef:af:88:1c:b4:1e:93:68:5f:
40:50:77:13:33:42:57:fb:26:df:bd:02:42:1c:89:
95:b0:b4:bc:18:1d:b7:d3:f8:80:4b:7a:02:a9:47:
c0:42:e6:15:f8:7d:23:22:b7:8b:e2:1a:2a:33:6c:
7f:17:ea:f9:2f:72:55:1c:c8:dd:3a:f0:d8:4f:11:
7b:3b:f6:2f:58:da:68:41:6a:d4:8c:5f:09:e7:2c:
73:6d:4b:2b:5d:2e:39:cd:ca:d2:d1:df:37:b2:35:
5f:4d:5a:1f:41:c9:d0:a4:50:db:f5:9a:9b:a0:9f:
b3:a3:57:52:fd:e9:c3:6f:44:c3:4d:30:4c:54:aa:
d7:e8:d6:a3:0b:6b:6f:5f:fd:3a:42:9c:cf:64:3b:
69:b5:50:f5:97:8d:e4:dd:ee:2a:c0:89:56:d7:77:
9d:78:4c:5e:b8:45:38:5a:d0:94:3f:12:2d:24:63:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:27:13:16:51:F7:3C:95:D4:5E:E4:12:28:C7:BA:DE:1A:22:5E:00
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d1:b5:18:6f:39:dd:3d:3c:29:78:25:8f:96:32:96:23:cb:
bd:8c:f7:e3:37:7f:96:9c:9e:16:96:ce:8b:24:f0:ea:78:3c:
a5:50:07:91:69:c8:5f:88:28:98:9f:37:64:25:2c:3f:eb:03:
c4:04:56:68:72:39:28:ec:10:77:a3:50:82:1c:39:5c:26:d9:
0f:4c:7c:6d:ac:f0:97:f4:46:9d:9c:65:88:86:0c:7c:0f:b3:
cc:2f:9b:3b:40:96:8b:37:eb:17:32:93:00:10:09:1e:1a:28:
3d:92:1a:4e:10:97:48:25:b3:86:4f:0c:99:7e:82:c6:e0:ff:
df:55:27:1d:9b:a4:36:82:17:91:db:4c:5f:12:2d:bf:92:40:
47:1c:52:bf:75:d7:cf:86:c9:77:32:ba:b0:84:72:3f:72:ef:
9f:c9:aa:4b:db:ea:54:c5:a7:28:e2:c4:6f:8c:92:62:dc:79:
db:28:fd:62:49:26:85:56:a8:91:f7:39:9e:f7:db:a9:ff:a0:
49:c3:6c:af:3c:c2:31:76:38:2d:51:2f:8f:95:21:3e:21:a2:
59:b6:88:2c:bd:8b:38:7b:af:5c:d1:61:47:0c:a5:62:f3:28:
87:63:2d:06:23:a9:de:01:89:e5:15:00:28:fd:8e:4f:7e:da:
38:98:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:09 2025 by rpki-client