Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: 0Q56MK68OE7dmc5uoIU/QnjVcfHjbGDfln67mkLw5EM=
Subject key identifier: 74:27:A4:5F:0D:CE:68:88:5D:BC:91:82:A1:45:E9:52:5D:AF:89:9C
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 0196857F4520CCAEE43A0F486325B0047A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 122E
Signing time: Wed 30 Apr 2025 07:00:32 +0000
Manifest this update: Wed 30 Apr 2025 07:00:32 +0000
Manifest next update: Thu 01 May 2025 07:00:32 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: Ago+eruU3vV/3XkAY3jprlHYfgPEYNpGnlzZ+9QN3Qg=)
2: nitfhwT5zdpxb50hXlk4jgWzdQE.roa (hash: Cnmglk4tBEqztiio9IkWbUek+XEbAwr0Bjp+MAHYUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:45:20:cc:ae:e4:3a:0f:48:63:25:b0:04:7a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Apr 30 07:00:32 2025 GMT
Not After : May 1 07:00:32 2025 GMT
Subject: CN=7427a45f0dce68885dbc9182a145e9525daf899c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:99:fa:ff:f4:fb:8a:6f:7d:79:65:78:53:
22:25:6e:fa:50:ab:40:a0:e0:6b:66:6b:07:13:1c:
87:e8:44:cc:14:12:85:2b:51:e4:74:ee:90:69:ca:
6f:8f:95:55:6d:6d:37:d9:1b:57:1d:0c:f5:30:f1:
0c:7b:3e:fe:8e:64:77:09:13:3d:96:71:61:7c:9c:
c6:3c:b3:e1:d8:40:da:62:69:49:af:73:6e:15:0c:
46:2e:46:30:a1:aa:a8:28:a6:91:98:e7:3a:d6:0c:
74:a0:aa:e1:f1:74:9a:0b:ad:a7:e1:10:60:98:2f:
47:15:db:6f:80:68:1a:32:ae:12:7d:4f:f9:28:56:
c7:bc:19:06:3f:62:7a:33:f9:7f:c0:cd:2b:7b:06:
7a:d9:49:27:f5:23:6c:46:51:72:f7:bf:e0:c2:02:
e9:ad:cb:d2:67:4b:9f:f4:73:ea:39:a6:e4:01:ab:
7a:b1:2f:37:e4:23:91:bc:f8:de:0f:cd:05:3a:cc:
4a:f2:16:40:53:31:77:f3:4b:fc:a1:d7:ae:7c:58:
3c:58:eb:76:9f:a4:39:f5:60:3c:cb:42:5e:d1:01:
1f:63:73:bc:e8:ac:3e:0c:2e:b1:04:19:b6:0f:15:
50:f7:01:84:3d:3b:ac:31:88:5b:ab:a5:19:1c:24:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:A4:5F:0D:CE:68:88:5D:BC:91:82:A1:45:E9:52:5D:AF:89:9C
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ba:3b:dc:2a:fa:74:54:6f:3b:0f:c9:63:cc:3d:6e:09:8d:
4c:12:77:07:2a:4a:40:14:af:9b:8b:21:7d:4b:bd:c6:83:e5:
43:1d:9a:34:b9:dd:f8:e3:ac:15:80:7d:4b:91:81:d1:c0:b0:
91:3a:09:7a:0a:0a:f5:a7:2a:26:0c:bf:1c:77:da:87:54:3b:
5b:17:66:ef:63:7c:9b:05:37:72:aa:7d:e2:8b:43:fe:33:b0:
0c:cb:b2:79:f8:60:8f:d5:e8:71:41:19:04:ad:d4:03:50:3f:
46:bb:c3:13:9d:0e:5d:96:8a:ab:2d:34:57:d0:44:85:c3:d6:
bc:b4:aa:10:18:3a:96:d3:bb:94:38:71:8b:ac:5b:07:d9:0d:
f5:13:14:93:51:9f:e2:39:fd:7d:27:5b:de:69:26:87:be:50:
aa:10:0e:94:67:c7:f5:88:50:61:1a:22:11:b6:0f:98:82:32:
98:d0:11:b1:a6:ec:7c:ce:cb:c3:af:ba:14:f3:46:ad:e2:e6:
ac:b6:7f:f5:f3:d5:84:19:2f:31:62:d2:60:3a:a4:8c:72:02:
88:e4:59:6b:d9:10:68:30:a5:9c:b6:1f:52:11:de:45:13:f1:
78:c4:a2:59:03:57:30:81:ab:7d:97:53:9c:8e:7e:15:6b:7d:
ad:73:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:35:27 2025 by rpki-client