Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: 9WVjy8EJWLS4Yn5O7uym04o0qtX5Og2A7cxDBEzEyog=
Subject key identifier: C9:1E:91:3C:EE:ED:B5:F2:2C:CA:B3:22:84:A8:BE:6F:A8:05:CA:0C
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 019512B6236A96D124571F00797DA1A75152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 116E
Signing time: Mon 17 Feb 2025 07:01:21 +0000
Manifest this update: Mon 17 Feb 2025 07:01:21 +0000
Manifest next update: Tue 18 Feb 2025 07:01:21 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: vMoCmHoDjxYvhNI23mzFRqFNtJyfNPDcHGj3Zji3+1s=)
2: nitfhwT5zdpxb50hXlk4jgWzdQE.roa (hash: Cnmglk4tBEqztiio9IkWbUek+XEbAwr0Bjp+MAHYUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:b6:23:6a:96:d1:24:57:1f:00:79:7d:a1:a7:51:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Feb 17 07:01:21 2025 GMT
Not After : Feb 18 07:01:21 2025 GMT
Subject: CN=c91e913ceeedb5f22ccab32284a8be6fa805ca0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ee:16:12:b0:21:26:ac:23:75:6e:b1:ff:dd:
01:07:ed:5e:d3:f2:38:61:cb:76:54:a2:bd:2e:cb:
9f:7e:45:7b:6e:dd:1f:83:fa:ba:37:16:e3:4e:0e:
fd:4d:59:51:66:a7:f3:92:c2:65:3d:88:55:51:c5:
56:d8:b6:42:4d:02:a8:2d:06:01:ce:d7:4e:61:c3:
9b:47:2d:3b:d6:77:a9:c6:4f:ad:f2:ec:ce:2f:f6:
9b:a5:07:7f:bc:3b:a5:22:c5:28:04:4a:ef:ff:fb:
25:ff:88:af:17:96:58:99:88:e8:1d:1a:85:a2:0e:
9c:64:15:30:39:8c:d2:a3:26:48:44:93:26:62:2a:
21:ac:6a:f2:0e:66:1e:c9:da:d0:91:a4:84:f1:15:
48:01:a7:66:02:57:29:6c:ec:d9:d4:4f:11:b8:97:
b5:0c:d8:18:64:00:bd:3e:0d:4c:88:2c:df:0c:87:
c5:b9:6c:5a:03:a2:3d:c6:54:4a:fa:84:a2:8c:64:
d9:f4:75:9b:1f:18:36:5c:37:24:ef:6b:48:c9:12:
d2:c4:ef:8a:30:cd:32:23:55:c7:ee:17:46:6f:c0:
09:d1:1b:f4:ea:f1:01:e0:7a:e2:b9:e0:fe:da:10:
18:33:3d:3c:91:23:ca:b4:29:c2:d7:0e:07:cf:b9:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1E:91:3C:EE:ED:B5:F2:2C:CA:B3:22:84:A8:BE:6F:A8:05:CA:0C
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9d:a7:85:f8:d0:9e:6b:36:cb:4e:f5:3d:35:94:47:e7:f5:
07:72:31:a4:2f:95:ef:95:98:96:e8:cb:78:e2:db:29:8b:7c:
0b:4d:0c:a7:78:90:47:66:24:96:73:f4:02:e5:3b:8a:be:41:
35:0a:59:75:4d:46:04:6c:8a:29:bf:36:0d:73:87:e7:a5:04:
69:9c:c1:c1:2b:b9:8c:f0:d6:6a:0b:bb:5f:88:ab:7b:54:bf:
76:78:87:e3:8e:35:24:69:06:d4:85:72:92:89:56:5a:60:2e:
7e:b1:00:98:7a:96:5e:06:2c:8c:de:ac:b5:d4:da:7b:48:b4:
ba:2c:8c:f0:03:7a:57:90:15:0a:b6:f4:6e:49:14:52:2f:2b:
01:b4:7b:ae:f6:e7:9e:be:f9:10:f7:0f:09:fc:db:d4:2b:b2:
3c:80:92:48:ae:b4:af:ac:13:eb:86:7d:4e:a6:33:da:9d:d1:
12:5f:88:0d:4e:19:9e:24:1c:6f:e0:85:fc:3d:eb:ba:11:99:
cf:8f:cc:87:fa:d2:21:22:6c:f7:ae:ee:7e:e1:40:ef:d0:2f:
85:ae:bf:e6:db:d1:f3:17:e9:eb:ee:86:11:9b:4c:fd:52:67:
45:71:13:36:79:48:d3:94:24:bd:3b:fd:17:20:eb:06:10:c5:
d5:2d:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:27 2025 by rpki-client