Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: xe7+lLFd4MdKx3JIL1JknOG5TYPCOawJcpVNcdBJNNs=
Subject key identifier: 36:87:46:6C:15:35:65:5F:4D:76:F7:EB:75:BE:10:4D:93:CD:53:73
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 01962C3CDB2DFCA3CEBD138FDFD4973B43AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 14EC
Signing time: Sat 12 Apr 2025 23:01:47 +0000
Manifest this update: Sat 12 Apr 2025 23:01:47 +0000
Manifest next update: Sun 13 Apr 2025 23:01:47 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: wJ+Y1lyON8ziFJRXf9vVidxmO33MVhcMcDEQyvZuCCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:3c:db:2d:fc:a3:ce:bd:13:8f:df:d4:97:3b:43:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Apr 12 23:01:47 2025 GMT
Not After : Apr 13 23:01:47 2025 GMT
Subject: CN=3687466c1535655f4d76f7eb75be104d93cd5373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:ce:72:6d:9b:4f:48:03:ee:d4:51:71:67:
b6:eb:24:a8:0d:7d:48:d4:75:06:fd:54:5f:33:0c:
0d:35:19:c3:55:54:5e:a5:56:eb:7e:bc:d8:88:65:
6b:a2:61:b5:40:e3:f7:63:e0:fb:dc:f6:5a:4f:45:
83:10:bf:d8:e3:66:68:5d:5f:0a:aa:15:5d:8a:89:
22:b6:36:45:11:86:d4:8c:e4:ed:b8:09:bb:26:06:
00:b2:2f:98:a8:61:00:2e:cd:58:69:ba:50:7c:40:
c8:70:b3:7e:13:f9:b9:2d:27:3d:91:03:20:b6:a1:
d0:95:36:87:fb:c7:bf:c7:af:e5:4b:e8:9e:9d:ac:
31:c1:41:af:39:0d:9e:f2:1d:b6:c9:bf:77:e5:c3:
a8:83:83:59:6b:a4:1a:84:be:b8:fa:72:d6:42:e9:
9d:17:13:64:12:35:2b:ab:16:2c:5b:b1:e7:a3:19:
c1:74:5c:2a:af:bf:6c:c3:61:ee:6e:c4:2a:25:95:
31:bb:5c:da:b2:09:81:ca:72:80:13:79:20:79:2d:
ec:d2:a9:ab:77:5c:ba:a6:be:bd:59:90:3c:8d:fb:
b5:c6:c1:7c:0c:c7:9a:9b:1a:10:b0:d3:67:b3:b8:
91:b5:ee:bb:ef:22:6d:3b:46:7a:b1:49:37:6b:45:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:46:6C:15:35:65:5F:4D:76:F7:EB:75:BE:10:4D:93:CD:53:73
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3e:da:c9:7c:48:1d:83:ca:5c:52:cb:27:d8:42:b1:60:8b:
6c:a8:62:a2:4f:94:42:a2:9f:8c:09:f2:96:56:ca:63:63:44:
78:0b:c9:22:ab:46:38:49:c5:88:d6:1e:a4:53:a0:6c:b4:c8:
d2:0f:04:9a:e8:fa:e7:51:03:8f:e8:32:30:b0:1a:a4:6c:58:
e7:a2:a5:0e:73:7e:0e:e7:13:59:99:a0:b6:87:96:fb:44:1f:
75:0e:09:0e:6a:d1:e9:d3:4c:5c:2d:5e:99:31:6a:8e:81:70:
f5:60:f9:47:3c:ed:42:e8:cb:84:35:bb:1a:58:18:c8:a8:62:
8e:22:e6:9a:f0:f3:93:96:5b:41:a8:19:42:b6:b8:4a:67:b2:
73:e2:c1:dd:93:b2:35:ff:df:4a:6e:e0:35:d1:28:2b:23:47:
f3:7e:66:22:a0:7b:41:48:4d:3d:df:98:13:1c:67:47:73:8c:
cf:d6:c3:d9:eb:f5:c8:d0:f1:ee:95:ed:f3:17:01:0f:91:a0:
ac:e2:46:4c:b1:6b:f1:94:45:6d:03:ca:f5:5f:5e:1f:de:4d:
4a:d1:e1:f1:3b:85:f4:2f:3e:3a:47:f8:9f:23:b3:94:a8:ce:
99:87:cc:91:df:10:51:d8:16:8f:01:26:fa:30:dc:07:52:4f:
77:11:5e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:56:48 2025 by rpki-client