Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: 9NpWoSTTx2Axmqddj9j52UztRU//shosGOqo9b5VBkg=
Subject key identifier: 49:41:97:5F:44:AB:45:07:D0:3F:66:48:B5:87:C6:E0:C0:61:9D:E6
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 0196A3C0B849F5ABA46CC488D3A526CF9492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 04:00:38 +0000
Manifest this update: Tue 06 May 2025 04:00:38 +0000
Manifest next update: Wed 07 May 2025 04:00:38 +0000
Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: dhS456LITyjU5GZjRcJ8l1PAWMIm4Ud/Dd4KiXKQ0Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:b8:49:f5:ab:a4:6c:c4:88:d3:a5:26:cf:94:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: May 6 04:00:38 2025 GMT
Not After : May 7 04:00:38 2025 GMT
Subject: CN=4941975f44ab4507d03f6648b587c6e0c0619de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:8b:fa:9f:8f:c9:8c:63:af:44:ba:61:c0:
3c:a3:0a:03:11:a2:76:12:3e:d9:f1:50:8e:7f:33:
bf:7f:e4:e8:39:65:67:e5:4e:f5:46:b9:56:b9:bb:
32:6c:c3:7a:71:fb:b3:38:11:c7:5b:b5:0f:02:81:
3b:65:26:11:a6:f2:16:24:0b:a4:38:6f:d9:e6:45:
83:b7:55:e6:eb:86:91:8d:57:fb:fb:3a:98:42:04:
06:3e:62:9d:76:6b:ab:b2:85:02:3c:e7:de:67:9d:
84:6c:dd:f0:7e:5b:19:63:24:10:82:ff:17:b3:ed:
3b:a5:cf:a8:da:fc:f1:df:9f:38:7d:1c:0d:a4:79:
67:8f:4f:42:bc:2b:88:5b:9c:a1:cb:23:6e:5b:7e:
82:c1:cd:09:e8:19:66:81:b4:6c:84:0c:f3:ee:89:
08:c1:e3:16:4e:14:c5:96:01:9d:d9:63:81:8a:43:
86:3d:9b:f5:be:15:03:56:6a:29:9b:db:38:64:1f:
bf:98:96:96:92:7d:61:31:fd:bf:be:e0:aa:b2:7c:
5e:8a:07:73:58:f1:81:83:d3:b7:cd:0a:e8:ca:10:
97:b9:d4:fe:6b:8d:6b:d2:f9:8f:ed:82:89:04:ea:
da:e9:5a:02:34:52:f3:24:33:1a:44:95:2a:66:90:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:41:97:5F:44:AB:45:07:D0:3F:66:48:B5:87:C6:E0:C0:61:9D:E6
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2c:a8:65:38:8e:2c:69:30:b9:47:aa:f5:4b:f2:a9:26:80:
a6:40:de:06:ca:e0:ff:95:0a:1d:4c:81:e4:e4:40:2c:aa:e6:
1d:c5:c7:24:d4:97:74:61:1a:72:ff:af:4f:6b:c8:19:bd:c8:
69:c8:63:45:7c:53:c5:d3:ba:d7:c9:95:0e:4e:36:4b:8c:cb:
f5:6c:3b:a7:46:b6:ca:04:66:1a:c9:67:fc:f0:41:71:f1:d0:
f7:8a:7f:af:ce:3d:cc:b6:ad:1c:1a:ab:73:4c:6b:84:67:80:
f3:07:62:ef:39:28:df:11:c9:72:90:b7:46:6d:3f:a6:a9:ab:
a0:36:81:d4:d1:ae:78:c5:8f:bf:6d:09:38:b0:e7:bb:a7:96:
25:2e:a2:7f:ca:e0:99:89:d2:c8:44:6e:0c:23:86:8b:b3:b1:
0d:bf:2e:9a:4a:5a:95:9c:59:35:e2:89:fd:4d:1f:2c:1f:69:
e3:1c:f6:e9:05:b4:b7:48:67:7a:61:e6:53:da:4d:87:21:86:
f1:93:f9:05:55:51:4c:8b:3e:3b:43:a4:8b:d3:94:8d:97:57:
de:92:76:a0:23:5c:e3:73:b9:f0:87:58:b7:b2:99:bd:c3:22:
97:a1:d8:91:91:84:9a:1f:f4:ef:14:7a:36:68:f4:08:5f:63:
ab:f8:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:12:27 2025 by rpki-client