Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
File: owVfB71HqGR4w79HOSVzrNU9Y24.mft (raw, json)
Hash identifier: Y9J1lWKKQ86f/UW+4uZ83nbBhjY7GsK70XzVh76YD1c=
Subject key identifier: EC:6B:04:42:0F:C9:48:E7:93:81:93:65:D6:F2:3C:8E:BC:AF:77:2B
Authority key identifier: A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
Certificate issuer: /CN=a3055f07bd47a86478c3bf47392573acd53d636e
Certificate serial: 0196BFDC5667E7CDC88D8EE4FE70BAB30D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 15:00:10 +0000
Manifest this update: Sun 11 May 2025 15:00:10 +0000
Manifest next update: Mon 12 May 2025 15:00:10 +0000
Files and hashes: 1: owVfB71HqGR4w79HOSVzrNU9Y24.crl (hash: yXpej/+86nyACBekC7V0y5cHMVEVYfvsBROPyW5ThOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:56:67:e7:cd:c8:8d:8e:e4:fe:70:ba:b3:0d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3055f07bd47a86478c3bf47392573acd53d636e
Validity
Not Before: May 11 15:00:10 2025 GMT
Not After : May 12 15:00:10 2025 GMT
Subject: CN=ec6b04420fc948e793819365d6f23c8ebcaf772b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:2e:d9:ea:79:b3:1d:18:d9:47:e7:fa:8d:
a3:d7:22:c2:14:13:49:c9:3f:23:d0:36:2c:58:bb:
4a:24:62:c6:3d:26:cb:83:a1:a9:f1:3e:66:c0:10:
7b:25:56:73:77:3e:aa:36:86:7c:d5:99:dd:af:8c:
25:64:68:be:d9:a3:15:88:c9:86:63:31:0d:23:33:
53:70:20:fc:49:d5:1c:09:1a:e6:6f:17:3c:01:80:
e8:1b:40:0a:ba:68:56:3b:2a:fc:1f:51:14:01:39:
04:b4:a1:21:22:bb:4d:dc:f8:60:2e:c9:49:4f:a9:
a8:88:81:ed:a5:d5:f7:fb:26:19:cc:dc:48:bf:17:
07:63:00:88:07:92:46:2b:8f:8b:69:f7:22:c8:5e:
9b:d4:a1:c5:f7:9e:67:40:dd:59:6a:3d:89:8b:dd:
f6:be:04:a8:43:8a:29:b2:33:8c:d3:f0:00:81:9e:
66:95:50:90:d3:85:67:e9:a1:82:d0:50:21:0f:58:
32:15:a1:5d:d2:53:ac:2f:f7:1b:1c:0f:a2:a2:16:
35:d7:75:bb:0c:f6:dc:2d:69:2e:5d:45:6c:e3:30:
82:a5:1a:d6:72:82:d8:7a:62:1c:2c:47:99:89:ca:
76:27:82:86:75:52:f4:29:46:ad:a3:6f:c6:49:05:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:04:42:0F:C9:48:E7:93:81:93:65:D6:F2:3C:8E:BC:AF:77:2B
X509v3 Authority Key Identifier:
keyid:A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:52:ae:24:a2:ec:a9:d5:45:34:8e:33:32:56:cb:f9:b1:37:
b1:f5:47:51:03:40:96:1b:24:80:39:8e:da:5e:f4:da:ba:01:
5d:31:70:b2:66:50:00:c9:6f:5a:0d:e8:64:65:0b:70:51:bf:
97:58:95:8c:76:1d:f8:66:c3:56:73:fd:34:93:bb:85:58:bd:
d7:e6:41:e3:fa:cf:3b:53:f1:3c:8d:62:fc:66:62:1f:ec:88:
ad:df:b0:df:11:0e:2a:f5:97:d3:d2:cd:0c:ee:c4:c3:c8:bf:
67:4e:1e:28:46:b7:31:54:85:b4:0d:a9:92:1c:89:f9:00:d0:
0c:f7:ab:54:6f:ba:e0:c9:93:33:38:f1:19:51:02:f1:62:df:
c8:75:f7:d3:6b:bd:11:1f:82:02:34:ce:ce:d7:9d:29:9a:b2:
3d:6d:2d:76:a0:3a:ee:cf:4c:1e:63:46:dd:8f:38:8f:82:2c:
cc:1f:d6:ad:a9:96:df:99:7c:9c:88:f4:6d:b7:b6:4b:67:15:
f7:a1:f1:62:5b:bf:74:8b:6f:8a:5d:29:32:2c:ab:ca:1e:8d:
de:e5:40:7c:48:76:83:bd:10:37:61:7c:86:1b:da:2f:b4:ca:
9e:2c:a9:8b:9e:2c:3a:7d:45:67:bd:6f:5c:aa:29:ed:ea:aa:
e2:e9:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:05:01 2025 by rpki-client