Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: FpUHDgzF8TDKZW/PfxQQ+30Bgyqz/rKhHyBvUsRq4EY=
Subject key identifier: A1:31:3E:3C:C6:58:C2:4D:F3:3A:13:03:CF:2A:F1:F1:C1:51:59:1D
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 0196B7EC52A911B226029AEC1895D4B1CE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 022F
Signing time: Sat 10 May 2025 02:00:40 +0000
Manifest this update: Sat 10 May 2025 02:00:40 +0000
Manifest next update: Sun 11 May 2025 02:00:40 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: XuhrYks/sRHE9MSQ2J2wX/XElARqcfr8e4S71FhOytg=)
2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:52:a9:11:b2:26:02:9a:ec:18:95:d4:b1:ce:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: May 10 02:00:40 2025 GMT
Not After : May 11 02:00:40 2025 GMT
Subject: CN=a1313e3cc658c24df33a1303cf2af1f1c151591d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:8e:fd:1c:2d:09:5e:9b:2f:5e:8b:17:ab:
37:12:1d:9e:4d:c1:73:6c:92:f9:5a:8d:7b:2d:55:
5e:51:e7:8d:9d:03:a3:5d:00:60:84:d1:3f:20:ea:
3e:bb:8f:4b:0a:e1:74:9a:e3:4a:db:81:a1:ab:12:
94:65:be:28:6e:5d:79:c1:f9:9d:7e:73:85:87:00:
f1:cb:e4:cd:bc:21:3c:b7:30:62:44:73:b8:08:00:
3e:13:55:6e:d1:7a:68:cd:67:c5:9f:6c:4d:99:8d:
d7:e7:3c:29:71:58:db:e9:a8:4d:70:cb:71:7e:1a:
43:ba:62:d7:cb:56:83:c2:bc:42:21:b1:7f:4c:26:
5b:8d:66:94:f2:5f:a4:47:ad:cb:0a:e0:0a:91:3a:
0b:ac:c9:73:6c:b9:57:e7:28:39:ee:99:8f:a2:ae:
1e:7d:ad:06:7d:2e:c5:63:45:81:14:26:19:c7:2e:
75:b9:31:c3:98:83:b8:51:7b:fe:3c:fd:60:d8:5b:
8c:86:f1:7b:f9:c5:97:93:c0:19:d0:78:fe:8d:54:
8d:d1:96:f9:88:9b:24:bf:9b:33:5b:3c:79:f7:a6:
38:cf:2d:34:72:cd:49:f0:2e:00:2d:37:68:7d:9b:
47:97:72:d9:d9:22:94:8a:83:6d:ff:bb:19:a9:5a:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:3E:3C:C6:58:C2:4D:F3:3A:13:03:CF:2A:F1:F1:C1:51:59:1D
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f8:bf:f0:c5:b1:5c:a8:07:6d:a9:1e:a5:e6:3d:0b:31:a5:
47:0c:09:06:23:85:d3:92:dd:49:53:f5:03:02:5d:00:f5:70:
ea:fa:d4:4a:4b:9b:54:d0:31:81:a9:73:16:06:fd:75:6e:28:
a9:d1:05:50:24:a1:a1:45:af:e5:24:38:a9:4e:32:b0:65:2d:
2f:56:c8:cb:93:27:7d:82:39:48:3f:40:ad:d4:f2:3f:77:51:
46:9c:61:5d:67:f3:b1:ac:21:01:80:40:a6:05:42:84:3b:86:
da:70:7e:7c:9a:9e:2d:f1:43:03:4a:5e:09:cd:13:16:78:75:
d7:c4:0e:6e:96:f8:af:47:3d:fd:2c:bf:7c:94:53:fd:9c:22:
e4:04:de:3c:7c:28:04:7a:30:17:03:06:a4:9d:f2:dd:a7:f1:
c8:16:99:56:44:7b:ce:f6:03:25:b0:07:ff:b9:87:58:42:be:
02:6f:d8:08:19:e0:c2:19:b4:83:6f:82:b7:0c:86:78:a7:e3:
37:07:fd:4c:44:21:b2:bf:44:8d:89:4c:19:f7:83:53:9b:86:
f2:ae:2f:a7:a5:af:c4:53:cc:1d:40:b5:f2:f6:d2:89:5c:ba:
9a:96:26:da:e8:94:2a:69:48:a2:ab:35:dc:c5:bc:92:b2:d2:
e7:ed:98:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:21:42 2025 by rpki-client