Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File: OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier: /g9iRQJVjlYId8p58lHTHI5GNGG/NIZ1dYjr8HDCRh4=
Subject key identifier: 6B:8D:BB:4A:3A:5E:47:8A:8B:A1:20:AF:9E:65:47:7E:A9:3F:B7:0B
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer: /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial: 0198D54DE688A60707572A8C07547E29C1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: lJ2vkQfA6pzRh1Jy7awzbrwq1P5wVgND11tE9MoYqpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e6:88:a6:07:07:57:2a:8c:07:54:7e:29:c1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=6b8dbb4a3a5e478a8ba120af9e65477ea93fb70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:40:9e:c9:cd:af:a2:80:5f:a9:a9:d2:bf:
c8:d1:40:b4:34:18:2e:ef:c2:ea:27:8a:2e:c7:ed:
4f:11:31:61:ae:8b:35:55:18:3c:10:e1:e5:56:ce:
2e:ef:f9:f8:63:bb:e1:9a:d2:8d:e2:89:4f:a4:ae:
1e:d2:6c:ac:32:67:ef:8f:fa:69:78:53:0e:0b:a2:
9e:1e:47:c9:65:3c:54:68:59:04:06:a7:c0:1b:7d:
a9:dd:c5:80:b2:f5:ea:21:dc:d4:d0:2c:5f:e2:3a:
95:77:dc:e4:d7:2a:8d:33:8e:a2:36:5c:1e:e8:a1:
e0:03:77:0d:20:8f:6f:75:f7:2a:0f:8e:00:5a:bc:
34:67:d1:9a:0c:57:c3:d5:8c:28:a8:dd:27:d7:64:
b4:51:f4:a6:e6:0f:ef:e0:4c:25:d7:19:ec:db:a1:
d3:9e:e8:46:ed:50:11:84:e0:d1:40:98:20:12:ea:
1f:3a:e5:df:56:52:3e:9e:cf:82:5b:f6:25:2d:2e:
08:e7:c3:94:7d:b1:fd:ce:6a:1d:3b:f0:d5:0e:8d:
bb:28:eb:9a:95:af:6d:cd:1d:54:e3:8e:2d:ca:8e:
7c:56:f9:60:44:17:74:a2:96:bf:61:e9:a1:1d:ba:
6a:7e:76:af:a1:0e:6d:91:03:b7:2e:11:69:1d:8e:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:BB:4A:3A:5E:47:8A:8B:A1:20:AF:9E:65:47:7E:A9:3F:B7:0B
X509v3 Authority Key Identifier:
keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fa:3b:5f:3b:05:83:66:ab:e3:62:f1:73:95:44:81:1d:2f:
66:89:09:cc:c1:00:53:65:85:2f:11:b3:32:f3:62:29:71:12:
94:54:10:30:57:ba:6a:b4:d8:fe:17:ce:70:20:02:f5:0e:f3:
51:12:81:3d:48:93:61:59:20:ff:7d:98:ab:a2:10:4c:d0:0e:
81:a6:63:c2:93:6a:c0:a5:6e:09:a7:e9:9d:a3:eb:3a:e2:17:
a6:42:29:a2:aa:40:a0:aa:e7:7d:2f:12:4b:d4:85:e4:9a:15:
ee:87:91:79:89:99:5c:e7:27:59:a0:b3:57:69:dc:33:58:b8:
72:d3:a0:90:d8:a1:36:46:d8:3d:52:ed:5c:9f:97:6c:d2:39:
08:72:d5:5f:a9:d1:8d:f0:f9:6b:23:20:28:5f:68:9c:e7:ea:
df:2a:49:18:f5:2d:2d:b6:5c:ec:ba:c6:a5:5f:91:f0:13:f0:
a0:56:62:79:eb:46:e9:ea:97:02:1e:e9:3c:a8:c4:85:3a:8e:
26:9a:58:fb:b5:3b:35:ae:73:69:a9:82:e6:45:0c:a6:7c:43:
ae:a8:bd:7d:7d:4f:8d:1d:58:32:96:0e:da:4a:11:d7:f3:67:
92:3f:29:e8:60:e4:a6:cd:ea:14:ba:e9:91:f7:9d:b1:d6:c9:
8e:03:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:34 2025 by rpki-client