Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
File: OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json)
Hash identifier: ZblJgoEc0ceamxU29U7p38fofp7zDOWpwdpKyrXwn0I=
Subject key identifier: 2D:AF:F2:4F:CE:40:C0:BC:FE:2C:BB:9F:02:C1:B2:0A:BA:C0:BA:30
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 019674550CB1B85BDFEE789E6DD6F323682F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
Manifest number: 0582
Signing time: Sat 26 Apr 2025 23:00:52 +0000
Manifest this update: Sat 26 Apr 2025 23:00:52 +0000
Manifest next update: Sun 27 Apr 2025 23:00:52 +0000
Files and hashes: 1: ECy4hcsZKRfHoRJrX40zL9VgZlM.roa (hash: TIqTReRQQT5DAw+Fnvsbl2Gazl66yiKwPvTFj1mKh8s=)
2: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: VV9oLoRXeG/yYSwflin+OSI7Qj6RcTA7q0VJYheCJm0=)
3: b-pP2DvAvhNxFYiGst38p6kSpEw.roa (hash: OWrgzbHkSLo7aQ27PmujOGuFd28cotewB1lFGD+BaKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:55:0c:b1:b8:5b:df:ee:78:9e:6d:d6:f3:23:68:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Apr 26 23:00:52 2025 GMT
Not After : Apr 27 23:00:52 2025 GMT
Subject: CN=2daff24fce40c0bcfe2cbb9f02c1b20abac0ba30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:0e:b9:47:da:41:96:26:6b:d9:37:aa:6d:
17:71:41:48:19:66:59:1d:30:4f:f2:38:3c:ec:c1:
b1:76:2d:54:ea:9e:05:a9:52:ae:b2:c2:9f:18:c3:
29:d1:47:d9:fc:75:5d:9e:43:eb:c3:20:cc:ce:e4:
6a:be:fe:a1:29:39:c5:0d:ab:43:a0:d9:72:81:47:
02:0f:64:de:f4:78:11:b4:56:f8:68:ea:e2:99:cb:
8c:32:2f:18:09:a3:5c:25:1c:08:13:57:e6:6d:ac:
7c:5a:61:11:14:8c:4e:74:47:8a:6e:52:4d:5a:3d:
08:25:7a:ef:44:dc:d0:07:d0:60:ec:ab:3a:03:a1:
be:2e:65:d6:8e:27:30:f9:49:dc:c4:ff:21:91:e6:
7f:4a:b4:49:01:ec:4e:b3:59:3f:b4:c6:42:0c:6f:
40:36:c8:c1:07:cc:0f:de:c9:e7:3b:03:14:11:67:
e7:ad:8d:6c:42:93:e7:68:07:0f:7f:b0:f0:aa:5f:
2b:ed:47:9f:bc:f2:d7:63:e6:e4:7b:b0:57:f0:50:
dd:ec:e8:66:ce:51:e6:b3:71:2a:88:6e:51:e4:84:
18:d4:8d:d5:89:11:e7:cd:99:8f:5f:a7:01:37:b1:
15:c6:e8:5a:67:70:28:05:2b:ee:1d:b3:2d:86:d8:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AF:F2:4F:CE:40:C0:BC:FE:2C:BB:9F:02:C1:B2:0A:BA:C0:BA:30
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ff:e8:37:d0:d3:ef:26:a3:e7:b5:a7:c7:3a:ef:96:97:f5:
09:ae:99:a3:90:2a:ee:83:28:f4:72:25:96:b5:d3:f2:18:23:
d2:a4:f2:73:46:c1:80:09:58:51:6a:f8:ff:e3:5b:51:16:0d:
b2:49:0d:2f:36:14:6a:d5:4e:46:33:ff:6d:45:47:d9:87:17:
16:ee:97:f9:5b:40:a0:1a:f8:15:d8:26:48:f6:09:21:ce:3d:
86:93:fc:a8:19:51:a1:ae:c7:dc:17:fe:f9:39:67:c4:e5:ed:
b4:f7:4c:74:a7:1a:0e:b1:df:2b:b8:d9:35:81:9e:63:08:fe:
e4:1e:c7:16:e7:93:26:2b:80:51:7f:7f:a8:4c:66:dd:d6:e3:
5b:c9:a3:ed:75:07:02:02:64:76:e3:87:bc:bb:28:ca:66:b5:
da:db:e5:50:d5:d0:16:e1:6b:28:93:b0:43:2d:13:2d:a5:e4:
28:0b:0e:f2:1e:27:4d:8f:1c:da:f4:de:5e:2e:93:82:ef:90:
ea:0e:b1:64:a0:0d:51:04:9a:36:bc:a4:ef:70:63:b7:61:bc:
5c:87:8f:ce:56:bc:a9:14:37:77:2a:b6:5c:93:25:f8:2a:aa:
e1:62:29:f3:b1:23:9a:14:32:60:da:51:90:f5:9e:55:1b:d1:
c3:b7:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:22:34 2025 by rpki-client