Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: xKdRh8dgbcBdGTRuCF3ghwp5I3gXzNuyoueJ7NP2DI4=
Subject key identifier: 20:39:77:43:9D:0C:3E:82:D8:69:C3:C8:48:D9:1F:80:18:22:A4:8D
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 0196C4952B733EDAF83A4C78AA81924BD3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 13:00:32 +0000
Manifest this update: Mon 12 May 2025 13:00:32 +0000
Manifest next update: Tue 13 May 2025 13:00:32 +0000
Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: iedbh8Idb4kPLHUvDVHTS/mJA2mI6DD9tPC1/BiBR90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:2b:73:3e:da:f8:3a:4c:78:aa:81:92:4b:d3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: May 12 13:00:32 2025 GMT
Not After : May 13 13:00:32 2025 GMT
Subject: CN=203977439d0c3e82d869c3c848d91f801822a48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:e6:73:be:64:61:53:1a:20:2b:fe:b6:29:
a9:6e:b3:fd:2e:05:fc:12:c9:63:7b:87:75:2e:56:
75:5d:8e:69:1d:b4:e1:3c:8b:9d:54:88:7e:c4:13:
ba:fb:68:20:0a:d4:26:c2:b6:8e:74:db:af:dd:29:
45:28:39:a3:fc:e5:e1:a7:3e:31:13:c3:7c:4e:95:
42:15:fb:ef:b4:43:16:72:7f:a0:23:8f:25:ba:a4:
1b:da:32:ad:16:40:cc:fe:ff:2d:30:9a:bf:fa:c2:
b5:7f:f0:e6:5b:94:e8:06:91:ea:45:6e:58:3f:cc:
e7:7c:93:a6:8e:f9:e3:a1:14:1d:7a:5b:58:ce:a0:
44:be:e3:d6:e9:8e:ed:ca:84:92:eb:d9:6b:2f:45:
a9:23:50:f2:4a:52:d5:5f:ed:f2:47:21:32:ff:04:
36:85:07:fd:0e:39:eb:9f:e8:3d:e7:e0:42:bc:d8:
26:34:83:68:98:42:e8:8a:50:65:d4:f6:6a:50:65:
a5:02:d1:74:db:49:68:e4:b7:09:46:4d:97:33:42:
8e:9a:7f:11:0b:d7:d6:2e:b1:87:3f:18:f2:ae:db:
32:40:5f:db:5a:4d:15:ae:36:c0:07:fe:b8:62:8f:
9b:e9:93:79:6b:a4:d7:97:79:82:c9:1b:2a:74:82:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:39:77:43:9D:0C:3E:82:D8:69:C3:C8:48:D9:1F:80:18:22:A4:8D
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e0:3e:68:86:8e:0f:46:86:6c:2e:f3:43:ae:76:e8:dc:2d:
9c:11:d4:c7:2f:7e:1b:6e:c9:5d:93:54:32:f5:03:44:db:41:
7c:17:57:fb:c1:5f:03:d8:2d:36:17:fd:f4:98:04:0c:33:94:
48:2a:e7:ce:c6:5a:88:36:5d:22:60:88:12:a9:44:2e:10:d0:
86:ca:d6:b2:e7:49:2f:04:fc:7f:83:8b:c2:a5:a3:6c:66:12:
0a:42:6b:07:76:6f:c2:56:d4:8c:a3:c3:c4:db:e4:ea:e9:29:
0f:dc:0e:a4:8e:9f:9d:c2:7b:9c:49:77:3c:3b:c4:ba:23:b7:
ae:f5:70:11:b2:71:23:91:c7:46:50:07:38:95:a9:38:82:94:
7f:a3:c5:99:87:12:44:85:d4:b6:d2:f2:83:3d:5a:56:76:21:
cd:c3:75:0f:cf:d2:9c:93:3a:c8:20:1b:36:ce:cc:63:16:28:
0c:e6:41:2c:8b:2c:9a:2c:47:bf:5b:6e:2c:86:ba:d8:d8:1a:
81:63:de:a7:a1:a5:bc:b6:7b:2d:0e:36:78:dc:8b:24:ce:fc:
7e:dc:79:ba:3d:58:79:6a:b0:8e:23:c6:61:f2:b0:ff:36:51:
ff:8b:28:7a:0d:bd:f8:15:a1:47:46:b0:2b:be:1b:3c:f9:45:
b7:00:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:41:47 2025 by rpki-client