Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: rR6rsuJGLQqWYpluiC1skbVEsuYjRHqt/BlauQbgh14=
Subject key identifier: C1:43:D5:EF:D9:5A:DA:61:C5:97:6E:63:29:9F:77:1B:FD:06:0B:5C
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 0196D2BF2439D491DF20816E10C34E4C18AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 1256
Signing time: Thu 15 May 2025 07:01:04 +0000
Manifest this update: Thu 15 May 2025 07:01:04 +0000
Manifest next update: Fri 16 May 2025 07:01:04 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: 4Siuudp6u8VaTAPzCaQL0aIjeJXm422qZPGeeGMOOL0=)
2: nitfhwT5zdpxb50hXlk4jgWzdQE.roa (hash: Cnmglk4tBEqztiio9IkWbUek+XEbAwr0Bjp+MAHYUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:bf:24:39:d4:91:df:20:81:6e:10:c3:4e:4c:18:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: May 15 07:01:04 2025 GMT
Not After : May 16 07:01:04 2025 GMT
Subject: CN=c143d5efd95ada61c5976e63299f771bfd060b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:65:16:f6:d0:1c:fd:6b:2a:29:10:b1:4b:
9a:6c:a6:99:60:59:b7:c5:82:b6:09:c0:d1:26:2e:
91:ed:00:3a:17:a7:4a:4e:d7:d2:cb:e1:03:f4:77:
b1:f9:a5:47:fd:48:29:40:b5:64:a5:66:d1:6b:e7:
e4:08:11:bf:42:e0:dd:8e:fe:08:67:6c:3a:5b:43:
57:97:5d:ab:30:9f:a6:44:a1:75:1f:49:8f:06:73:
36:92:0d:5e:56:08:f1:14:ee:86:4d:fe:e1:96:fe:
46:f0:3d:6d:7d:c6:e4:10:e0:3b:ce:01:5f:3e:a0:
62:4b:ff:2c:63:4b:07:b9:67:4a:63:96:1d:4a:1f:
81:3b:47:6a:4d:e6:32:59:ef:83:fd:b5:15:62:9b:
b0:b1:65:01:6a:c0:97:a0:f3:89:47:6b:47:e9:d5:
e7:6e:02:ae:e4:c3:5d:83:55:e6:b4:d6:32:c9:8f:
8b:87:ae:47:14:a8:4c:f8:69:91:65:3e:12:32:01:
b6:9a:a1:69:e4:33:b4:c2:9d:e7:66:5e:7c:b2:aa:
92:6a:9e:2d:33:e4:11:eb:58:c9:bf:72:82:eb:db:
eb:ce:70:91:99:ea:e6:82:58:d0:4f:1b:2f:87:e4:
94:ea:e2:2e:d0:8f:bf:91:a5:d4:d9:cf:e0:5a:c5:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:43:D5:EF:D9:5A:DA:61:C5:97:6E:63:29:9F:77:1B:FD:06:0B:5C
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:05:d3:14:9e:07:60:52:3e:72:ea:70:21:82:f7:53:5a:df:
6b:0a:08:22:82:81:05:39:30:20:5d:fa:45:c6:2c:e4:4f:22:
07:4f:70:20:90:b7:45:a9:1b:4e:5b:0a:4c:e8:42:74:d9:03:
f5:57:ba:88:17:93:a9:a8:dc:5a:76:a8:40:43:fe:1e:2c:71:
98:27:df:a4:c4:8f:2a:4b:99:22:a3:87:16:36:a6:3b:7b:8c:
e0:61:ef:70:06:f6:06:83:84:80:39:d3:a2:5b:23:d9:1a:0c:
51:77:2d:b4:7d:8a:fb:f2:a9:5b:a4:d7:95:d6:12:13:41:5c:
75:5e:d7:8f:e9:34:54:ff:2d:4e:95:9a:2b:7e:d2:86:34:0d:
fb:2f:7f:4a:46:0b:9a:d8:c7:aa:8b:35:81:35:f5:4c:ff:8e:
76:15:5f:b4:77:42:43:b0:b4:cd:5c:22:0b:42:a5:c2:9d:a0:
d6:e0:95:d1:66:fc:27:17:33:3e:51:08:e2:b7:b5:e2:3a:c1:
fe:07:4c:08:4f:48:d2:3d:4e:d9:cc:14:f4:d2:95:a6:b3:60:
15:d0:eb:60:9f:9c:58:3a:19:ac:41:5a:a2:21:af:2e:6d:9e:
38:2b:c0:1b:f8:65:7e:ca:1c:1d:6c:eb:09:07:aa:06:be:5e:
b5:28:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:11:24 2025 by rpki-client