Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: EWSBaX42dfV2HrMdJ3B4LlUOWI9NPgRcqxrcSCJ5q4o=
Subject key identifier: 35:32:E8:D1:03:68:9E:4D:48:F2:57:E9:90:3F:40:CA:AB:B1:07:98
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 019510C6E605080DBCCC46D181FFDA77A5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 03CC
Signing time: Sun 16 Feb 2025 22:00:25 +0000
Manifest this update: Sun 16 Feb 2025 22:00:25 +0000
Manifest next update: Mon 17 Feb 2025 22:00:25 +0000
Files and hashes: 1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: J/KBRieAHylyt7B7w3PgpDrL33jiMe+qlmbFnhOi5fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:e6:05:08:0d:bc:cc:46:d1:81:ff:da:77:a5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Feb 16 22:00:25 2025 GMT
Not After : Feb 17 22:00:25 2025 GMT
Subject: CN=3532e8d103689e4d48f257e9903f40caabb10798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:4d:51:92:3c:8c:8b:fe:e8:a2:52:28:54:
d1:07:27:c8:59:94:95:04:15:e0:42:f3:d4:96:a2:
af:83:37:87:0c:83:9a:cc:24:fb:73:ac:ce:a6:0e:
28:fb:60:93:12:1c:91:ce:9e:e4:c0:0d:f0:bc:39:
6d:0a:2c:c5:e3:ba:57:eb:f6:1a:a9:09:88:0b:0a:
69:49:66:c1:6c:be:34:2a:2c:39:38:54:d1:13:98:
e6:71:a1:5f:d6:bf:fd:07:9d:a1:64:e5:63:df:dd:
91:48:a5:7c:42:61:bd:20:a0:fc:e8:cb:a3:71:ad:
b1:90:9e:71:78:fc:d4:e7:c7:87:20:d8:dd:7c:bc:
29:58:8d:b3:a8:b5:1e:c6:23:ce:3a:17:09:fd:e6:
ee:0c:12:0f:52:4e:37:26:aa:f7:14:02:b8:75:ed:
2c:13:85:09:81:44:ca:0c:d8:59:1b:a7:2b:ed:c2:
5f:69:01:4f:4e:02:53:55:33:de:3f:7b:73:bb:fc:
e3:d8:92:21:02:14:0b:8f:f3:98:a9:2f:6e:90:c9:
3e:51:a9:57:b0:f9:65:91:40:18:46:ff:e7:0c:4f:
25:aa:f9:0b:c0:bd:48:bf:f5:4d:0a:04:a8:07:bd:
a3:dd:61:f5:9a:19:5d:53:42:73:26:a0:86:e1:38:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:32:E8:D1:03:68:9E:4D:48:F2:57:E9:90:3F:40:CA:AB:B1:07:98
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:96:37:c3:0e:a5:53:83:e5:7e:cd:ed:90:e5:02:33:b8:35:
78:cc:bd:bf:e1:a3:52:8d:ef:27:ae:f5:bd:8d:e8:d5:d6:0c:
70:97:86:c3:1a:9d:38:7b:22:69:33:df:a7:a4:4b:a4:13:63:
25:5c:04:af:11:41:02:7a:02:3e:30:79:6a:a8:d0:96:51:fa:
a0:83:18:3f:25:c4:3a:33:50:7e:46:cd:42:f5:95:7e:70:ed:
79:53:cf:4d:ee:14:5f:d6:47:26:be:52:dc:f2:0f:e2:ff:6f:
3b:2f:32:54:50:ea:1d:38:ff:5c:e9:c3:92:5a:34:cf:6c:8b:
a1:b4:b6:99:ee:8e:bf:45:a1:d6:48:b1:41:0e:10:02:7d:46:
99:f0:5e:18:22:60:06:3d:7b:ce:c9:ff:be:3a:62:40:3f:7b:
17:8c:e2:cf:72:e7:f3:f2:11:35:b5:6c:ea:f9:51:55:92:2e:
5f:27:50:6a:b4:76:d6:20:d3:0e:3d:c5:63:c7:8a:53:e7:87:
cc:c2:03:1b:6c:f8:25:4f:9d:8d:8d:42:01:9a:d0:60:ff:5e:
cd:cc:e2:8d:b1:b7:54:1d:5a:3b:e1:d7:81:60:37:f4:b7:fe:
d7:49:e3:c0:ac:ec:8a:ab:a7:48:a5:02:17:55:b0:ea:09:04:
66:98:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:27 2025 by rpki-client