Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: yT2ObGh1wqPIPir09Ej4ailAZ7d5Vtaz+LwtGQuHkiU=
Subject key identifier: 6A:70:1F:6E:79:8B:E6:02:5F:9A:2D:5B:F4:11:79:2D:7B:74:9B:08
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019748C34FB9ECD33B5A641F15EA5DA3FF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 027A
Signing time: Sat 07 Jun 2025 05:00:48 +0000
Manifest this update: Sat 07 Jun 2025 05:00:48 +0000
Manifest next update: Sun 08 Jun 2025 05:00:48 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: Izgs3TD5MRDP5xTPr3c6+ob7i5kFfAluwlqRfTS+j8Q=)
2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:4f:b9:ec:d3:3b:5a:64:1f:15:ea:5d:a3:ff:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Jun 7 05:00:48 2025 GMT
Not After : Jun 8 05:00:48 2025 GMT
Subject: CN=6a701f6e798be6025f9a2d5bf411792d7b749b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:ce:47:d4:34:7b:18:76:4e:27:b3:90:08:
20:1f:ea:8c:f2:c6:cb:c6:5c:69:cd:d8:1a:a0:07:
a7:25:d6:00:5c:40:d7:dc:86:5f:63:08:af:01:88:
f0:61:58:29:36:6e:6f:27:7c:b6:2a:0e:2c:8a:a3:
58:8c:61:25:a4:1e:f6:05:0c:19:72:e9:ce:49:0b:
82:a8:10:11:21:04:b5:2c:35:f4:e3:35:61:42:e7:
1e:19:14:a9:e0:fb:9c:13:89:f4:9e:f9:8f:20:bc:
78:0e:c0:0a:5d:6e:18:c0:73:85:6b:28:54:80:39:
df:1c:63:45:ca:22:5c:04:0f:ff:f6:36:53:03:43:
ac:43:fe:42:73:77:f7:57:06:db:8f:d4:50:a5:75:
a2:30:15:8e:03:5c:fe:23:01:81:c4:74:94:59:ee:
d6:f9:06:fc:f1:37:45:1e:42:5e:25:3a:97:2d:d7:
75:a6:0f:4a:10:3d:ab:37:19:f0:f8:f0:c7:50:ca:
8c:42:46:e8:30:76:fb:34:cc:7b:98:0e:ab:af:7e:
0b:16:1b:04:98:32:51:85:6c:4b:3c:e5:62:04:80:
22:bd:50:ec:9c:c4:71:7a:20:29:14:95:5d:35:7a:
a5:a8:0e:5b:fb:99:7d:36:c9:88:ad:36:2e:cb:e4:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:70:1F:6E:79:8B:E6:02:5F:9A:2D:5B:F4:11:79:2D:7B:74:9B:08
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:66:19:65:6f:e1:70:8e:d5:ec:3e:f1:e7:18:0c:b6:91:3a:
48:0b:3d:f2:35:18:7e:4e:6d:79:35:d5:0e:9e:c9:78:f2:c6:
fd:2d:03:b5:2e:1f:65:0a:ce:df:38:54:5b:5c:29:39:0f:b1:
68:ec:ac:0c:e9:fd:55:b3:d4:ca:9b:ef:e2:2a:46:c5:16:cb:
47:69:b3:bc:e5:a9:84:01:4c:a4:46:6c:86:6f:48:6b:20:84:
f6:66:20:c7:98:02:d6:16:b8:e7:63:4a:ae:e1:3d:e9:01:7d:
40:a9:f5:49:5f:ed:58:58:c8:3a:2f:1c:17:dd:ed:b3:88:2c:
5c:64:e2:03:28:f7:c3:66:46:19:22:bb:d3:7f:3a:12:83:33:
29:57:49:1a:bb:d1:8f:c7:6a:e6:eb:88:54:15:7a:e6:7f:cb:
4b:db:14:62:23:0f:74:bb:c9:9d:59:38:60:74:78:22:62:db:
8a:77:ed:b7:b2:ca:37:55:95:9c:72:8b:12:4c:69:10:e8:b5:
1e:29:b4:f1:10:fd:5d:6f:98:59:fd:86:c7:35:44:b2:61:58:
4f:7a:95:93:6c:10:70:9a:c5:00:2b:b9:96:73:40:a1:af:0a:
9a:a1:49:e2:d0:5a:a2:87:e3:46:cd:c6:b9:e2:32:f7:11:90:
5b:91:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:12 2025 by rpki-client