Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: XYMCBY6unlwJfLI9H++xbDe+z1yHyGxcLXTFCLkWd5s=
Subject key identifier: F7:59:A5:D8:36:0C:22:9E:A3:68:88:3E:10:DC:40:31:E4:A3:3E:83
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 01960FE94568FC556C7F14D7479D015C0C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 01D8
Signing time: Mon 07 Apr 2025 11:01:07 +0000
Manifest this update: Mon 07 Apr 2025 11:01:07 +0000
Manifest next update: Tue 08 Apr 2025 11:01:07 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: 6dgb1buS8UVgmT4sYhtV4aKaYM/9Ybit+u6K1ewZNFM=)
2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:45:68:fc:55:6c:7f:14:d7:47:9d:01:5c:0c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Apr 7 11:01:07 2025 GMT
Not After : Apr 8 11:01:07 2025 GMT
Subject: CN=f759a5d8360c229ea368883e10dc4031e4a33e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:51:22:fc:8c:40:f4:c4:64:b6:42:2e:ff:
ec:0d:bc:3a:33:f2:26:e3:11:dd:e5:3d:fb:0b:e2:
d2:05:63:21:78:f2:2e:b3:88:53:5f:18:d5:5e:66:
5f:8f:f7:1d:d6:67:f1:57:af:b0:d6:03:58:93:6f:
1f:4d:4c:a7:5f:95:76:1c:2b:a7:d5:71:f5:cb:50:
fc:f6:e6:7b:3c:2f:6c:08:3e:b6:3a:bb:ee:48:2c:
be:b3:19:5f:3e:5b:a2:bb:6b:74:24:7d:e7:6f:9e:
9a:ed:44:f5:c1:4b:70:f3:c9:e8:99:95:1e:a9:93:
33:8d:a9:41:80:b8:02:29:0e:14:c4:39:ad:94:7c:
4f:6b:f0:77:ed:46:05:c0:47:b4:2d:78:8b:7a:8b:
5f:43:16:e1:b0:bc:6a:a3:81:eb:dc:e9:3c:29:be:
7f:96:ba:8b:e1:cf:9f:9e:fc:e5:76:48:e0:eb:b8:
4e:ee:3d:a5:d8:a7:99:80:a0:1d:fd:4d:54:86:e1:
71:5b:c8:fa:da:65:5b:12:24:ce:e3:f6:29:d9:11:
06:e3:da:22:cd:c1:f8:ba:75:f6:55:2a:c1:a4:b6:
c8:fa:19:1a:47:0d:18:17:b9:40:ce:a9:ff:29:b2:
34:78:9f:6b:71:9d:06:1e:dd:6b:e5:bb:8f:49:6d:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:59:A5:D8:36:0C:22:9E:A3:68:88:3E:10:DC:40:31:E4:A3:3E:83
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:49:3e:14:f6:7f:e8:c3:34:39:3f:cf:24:cb:48:66:29:ad:
f9:aa:59:64:3a:09:34:67:34:23:ec:fe:24:6f:ba:60:f0:92:
b1:2d:bd:c4:1c:a0:2b:dc:08:4a:7d:71:e9:8d:bc:e0:fb:10:
82:3a:1b:78:3a:31:b9:a5:c3:20:fc:0b:16:18:cb:ce:95:cb:
31:30:95:b7:1f:6f:89:1e:c4:2e:36:b7:91:e7:c9:02:35:ed:
ee:b7:3b:43:52:ef:b6:29:2f:27:6e:52:e3:5d:a7:77:99:3e:
54:b1:02:e8:68:ef:e6:8a:ac:80:08:8a:4b:66:4e:d2:26:5e:
aa:57:fb:82:2c:bb:1b:82:63:d8:70:07:56:d2:eb:d1:4d:aa:
4e:4d:11:01:e9:e6:f3:9c:36:cc:7b:96:39:0a:b5:4c:37:c6:
60:96:4a:e5:b0:a8:79:20:4c:e5:43:49:62:1c:47:23:cd:71:
a6:6d:75:81:0f:fd:ee:8c:cf:30:3a:8c:c5:02:67:1e:e4:c8:
e3:a3:99:a6:90:08:bb:a8:67:2d:a2:c3:d2:b8:01:54:94:05:
67:c1:fb:71:35:18:72:0c:88:56:be:d2:54:96:a8:34:c0:c6:
26:23:18:f2:60:2e:25:54:04:7d:f8:78:a5:0a:55:a2:22:40:
93:9e:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:11:09 2025 by rpki-client