Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: ZdOf9IR6E8WcdnUCIAE6UZQrgx9fIzBEMGMlxl6sJlc=
Subject key identifier: 8C:F6:87:EE:C7:1C:77:47:63:B5:6D:B8:9B:3A:2A:9C:0B:AD:9F:36
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 0196A2090E06696D886BBED58827A9D00C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 20:00:24 +0000
Manifest this update: Mon 05 May 2025 20:00:24 +0000
Manifest next update: Tue 06 May 2025 20:00:24 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: ILDPtODVq9wKLTvVME8xeJlvIeCDTOl5zYptFl4lZow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:0e:06:69:6d:88:6b:be:d5:88:27:a9:d0:0c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: May 5 20:00:24 2025 GMT
Not After : May 6 20:00:24 2025 GMT
Subject: CN=8cf687eec71c774763b56db89b3a2a9c0bad9f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:2a:b9:76:9a:a2:43:5c:72:d1:01:0f:07:
0b:29:5c:72:84:53:ec:07:eb:dd:76:7e:e2:8d:ab:
da:f6:d5:b2:c4:6d:97:e9:fc:1e:47:15:3f:23:cf:
d5:22:6a:5a:36:d2:a9:81:f4:9c:ca:b7:73:1f:b2:
2a:fe:81:a4:c8:3e:7c:1a:f3:55:d5:df:a5:2f:2f:
0f:58:38:a3:dd:8f:ee:57:a7:35:be:84:7e:e8:2f:
dc:52:d4:3b:b5:e0:35:88:c6:cf:26:5f:99:69:89:
05:40:2b:6e:63:10:10:ad:60:94:18:f4:01:ca:33:
9d:6b:3a:6e:71:77:e4:1b:cc:20:ee:0f:0b:1b:9a:
bc:b5:e4:35:dc:2f:27:f0:42:ca:6e:28:ea:35:9e:
8e:8e:eb:79:67:4c:ea:b4:e2:56:b3:c4:1b:65:84:
b0:0f:81:ae:12:75:10:76:de:9b:fd:b4:7b:e1:59:
27:38:e7:ae:40:1b:fc:7f:ec:8d:a8:ae:14:d3:58:
31:b7:17:53:95:0d:8c:ca:22:3d:60:7a:72:fa:78:
85:39:b6:23:48:bb:e5:00:99:6f:36:f3:db:cd:93:
a5:91:db:bc:98:1e:ec:06:9d:4b:9d:5c:8e:c8:58:
26:97:c9:64:0e:b9:56:89:fd:19:cb:9f:08:7b:94:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:87:EE:C7:1C:77:47:63:B5:6D:B8:9B:3A:2A:9C:0B:AD:9F:36
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b4:83:4f:c1:af:90:82:ec:f3:d3:55:5d:4e:f7:35:ea:f4:
85:88:83:e6:f2:a6:cd:85:41:5d:42:a4:d5:b3:b4:f6:e9:91:
6d:54:84:bc:ba:e2:95:33:b7:15:0e:8e:b0:cb:02:44:b9:a5:
9c:5b:64:36:df:8e:49:b7:3a:9b:1e:74:59:20:99:7e:99:26:
41:e7:d2:1a:98:e9:47:75:67:3e:84:c9:c7:9e:bf:4d:6f:92:
8b:8f:25:68:3e:92:67:fd:ad:63:e4:59:d4:c5:3d:78:03:3e:
6f:1b:06:be:f7:2e:77:54:d2:db:c2:70:42:45:81:70:ee:5d:
1f:d0:22:cf:d5:b9:9f:91:e1:cd:04:4c:87:c1:7c:15:6a:d0:
2c:60:bd:3d:ea:ab:b4:5e:a0:98:55:d3:5f:8a:bb:f8:a0:3d:
7a:a3:9a:86:b1:11:ea:85:a2:e0:44:e2:3e:b8:7c:a5:86:2c:
f1:73:19:1f:9a:ea:9f:01:28:57:b7:e6:fa:47:35:07:a1:08:
21:9b:f5:8f:43:a4:ec:5b:78:dd:0e:c7:58:ec:e7:9e:7b:f0:
c2:9a:07:d2:76:0d:4e:c6:ac:94:ff:54:56:50:06:42:ea:3d:
34:c2:e1:5f:d6:3a:31:1a:40:44:a3:c7:9f:02:50:08:e6:ae:
d1:2f:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:20:20 2025 by rpki-client