Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: kaMapNT3ATOwLGz4+kwb9RLEXcNuqma1oQVP3OkmB4E=
Subject key identifier: F2:8B:24:9B:15:92:88:FD:79:1A:09:D4:68:FD:05:5C:CE:47:F5:06
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 0197469E035B1E71990EF4D32F110F9E577D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 1292
Signing time: Fri 06 Jun 2025 19:00:49 +0000
Manifest this update: Fri 06 Jun 2025 19:00:49 +0000
Manifest next update: Sat 07 Jun 2025 19:00:49 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: yr42ffB6j7Bd/TuUWprviGUzGduRtOHsjZIlmO79eow=)
2: nitfhwT5zdpxb50hXlk4jgWzdQE.roa (hash: Cnmglk4tBEqztiio9IkWbUek+XEbAwr0Bjp+MAHYUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:03:5b:1e:71:99:0e:f4:d3:2f:11:0f:9e:57:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Jun 6 19:00:49 2025 GMT
Not After : Jun 7 19:00:49 2025 GMT
Subject: CN=f28b249b159288fd791a09d468fd055cce47f506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:f5:4e:6a:0b:ea:62:14:5f:fc:27:63:ea:
17:6d:12:66:aa:9a:b5:fd:7a:1c:bf:8c:84:9b:b6:
e2:f2:52:40:97:ac:de:8d:cd:c1:8a:f2:80:48:5f:
08:69:a0:66:a0:bf:28:5e:c4:9a:b0:61:b7:0b:19:
58:1c:3e:1a:5e:2a:27:89:a8:d9:bd:10:a2:5c:cf:
f0:fb:70:a7:22:e7:e5:31:4e:96:9d:45:c9:9d:7a:
bc:a6:af:c5:6c:36:f2:2c:9a:4f:04:a9:d9:99:d0:
8b:c6:d8:19:38:48:94:30:7e:d9:34:e2:52:28:d7:
8e:1c:80:d5:a2:64:80:0d:4e:0e:1c:6c:7e:32:7c:
1d:e8:72:39:ad:0f:55:cf:fa:0e:cf:bd:9a:82:70:
8c:26:aa:04:e5:03:cb:cb:71:b8:10:0b:09:54:a4:
a6:c1:a0:7a:f4:36:8c:dc:80:20:13:e1:c3:e0:af:
5f:3c:fb:65:ce:44:29:9d:3b:5f:c1:08:f1:d5:39:
f2:41:82:4d:4a:0f:f4:fc:3a:7a:f1:14:c6:5a:b1:
22:55:85:5d:fa:d7:82:67:be:b9:28:9d:7d:e2:f3:
5a:ab:73:10:23:62:ad:58:0f:f0:9a:e0:aa:37:d1:
d9:35:87:e7:ab:aa:6e:f1:4a:da:d3:23:cd:c9:8e:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8B:24:9B:15:92:88:FD:79:1A:09:D4:68:FD:05:5C:CE:47:F5:06
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e1:cc:27:f2:a3:e7:5e:c6:0f:fc:18:6a:94:78:e0:a8:f0:
b9:86:85:aa:e0:ea:9d:77:b6:41:87:6a:e1:28:4e:45:62:6e:
d3:c5:9a:ca:3a:93:e1:4c:49:4d:b6:28:31:08:47:03:89:27:
15:fd:a7:c6:00:0f:48:7e:f9:49:d7:f8:d0:54:bd:63:b2:84:
c5:e0:31:16:10:ff:f7:02:f9:9e:55:83:4a:08:e8:a9:ce:12:
95:97:96:b8:bc:ad:7b:2e:60:7d:0f:25:bf:55:ac:b5:a6:ea:
e0:63:22:74:21:fb:5f:1b:39:e4:a1:0d:5f:45:b8:47:dd:ac:
d1:77:da:b3:0d:4e:c0:fd:3b:4f:aa:f8:cb:62:5c:a0:65:ad:
7f:66:3d:7d:c3:0c:97:f0:ce:b0:a5:f5:6d:f5:cc:73:d5:32:
be:9b:d8:2b:f1:f1:08:23:63:3c:fa:03:51:f9:bb:f3:73:db:
91:4a:d0:f0:82:2b:86:03:a1:e3:a0:b7:99:87:48:e3:a4:63:
fd:27:4e:45:33:36:0e:18:2f:6c:ae:da:af:75:1f:d5:4a:8a:
f8:2a:f3:14:6a:d4:2c:f9:39:51:d0:33:30:68:77:8f:8e:10:
db:f9:05:c5:db:41:75:32:40:1e:13:61:49:09:94:06:59:0a:
d1:08:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:41:35 2025 by rpki-client