Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: KYilBy6bhQluOG/V1a1Sub6QwnEkxosUjTgKaNbY+h8=
Subject key identifier: 2A:EB:2A:E4:E1:C1:25:57:C0:59:96:D6:69:C6:1D:26:69:4D:EC:82
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 0198D69868AE8727DC764C412D7C70C0D7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 0348
Signing time: Sat 23 Aug 2025 11:02:49 +0000
Manifest this update: Sat 23 Aug 2025 11:02:49 +0000
Manifest next update: Sun 24 Aug 2025 11:02:49 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: tq0p65AcLcKIZXNU+hbmgFzC4rrPq3HtEDNUfRoy/mY=)
2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:68:ae:87:27:dc:76:4c:41:2d:7c:70:c0:d7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Aug 23 11:02:49 2025 GMT
Not After : Aug 24 11:02:49 2025 GMT
Subject: CN=2aeb2ae4e1c12557c05996d669c61d26694dec82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:55:ef:1c:34:e4:47:9e:89:13:ea:ee:6b:
52:cf:83:fc:55:29:30:5b:16:85:29:89:78:fe:b6:
b3:55:95:40:4f:15:93:41:f2:11:1b:74:94:ba:7c:
5f:12:19:d4:37:29:d2:a2:d6:7b:0d:59:21:15:61:
cc:3a:e8:54:c8:86:64:25:61:4c:75:2d:b8:73:7b:
91:09:de:52:55:2d:66:5c:af:55:29:06:86:76:31:
45:69:1a:04:de:96:e1:59:56:17:a0:83:16:84:6e:
94:c1:39:41:06:60:7c:ff:dd:41:e3:90:9e:a7:49:
bf:50:4e:2d:bb:5b:2b:13:f9:c7:76:cc:aa:83:4a:
d7:32:94:c4:9d:3b:b8:7b:6a:1b:71:7f:a6:01:94:
c7:3b:9a:ce:96:09:39:76:93:cf:9e:ef:b7:35:23:
20:5a:e7:03:a7:28:07:da:24:8e:db:ff:c6:7c:e6:
51:61:d6:30:d2:37:64:af:9f:0c:00:56:db:60:c8:
63:d6:51:8b:1d:80:58:0c:4a:3d:fb:10:a1:9d:bf:
4a:b0:b9:a9:93:d2:ba:cc:e9:ff:9f:87:8e:49:dc:
4f:3d:ba:57:70:42:f1:ca:a4:7b:24:01:fa:ac:55:
a6:f8:18:1a:71:c4:58:8a:9e:76:3e:32:c7:31:1d:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EB:2A:E4:E1:C1:25:57:C0:59:96:D6:69:C6:1D:26:69:4D:EC:82
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7c:f8:fc:5c:01:88:90:93:64:e0:1d:58:78:1d:49:32:8a:
7d:8d:84:ee:ac:c2:e7:5f:6d:4e:c9:69:2f:e7:72:72:05:86:
dc:91:c4:e6:3b:76:fe:2d:bf:43:4f:99:8a:0d:99:a8:aa:31:
cd:37:ad:e2:91:31:c7:b1:3b:0f:83:7a:ff:88:bd:c0:f2:53:
32:b6:d9:b0:71:fb:cd:43:a7:b7:a8:70:79:62:31:52:49:6b:
c6:18:e7:1d:d1:a3:b5:49:f6:09:ba:53:7a:9e:d0:9e:be:01:
05:bc:6c:d5:17:3a:53:de:43:fc:d1:54:5b:01:14:24:a4:01:
93:b2:e6:ab:32:41:74:38:c6:fc:cc:76:74:38:56:61:e4:61:
15:a9:8d:81:10:1c:8b:04:9a:6e:6f:76:1a:52:35:08:0a:d1:
7c:a2:e6:16:df:f9:01:51:f8:7d:06:98:47:d8:58:a5:c6:d8:
e7:0e:30:7f:01:a1:06:2d:c0:67:81:f1:49:7d:51:f3:32:09:
8a:83:6f:f3:8d:fd:3d:7b:a5:e3:00:88:81:7f:4e:10:45:a4:
61:81:75:4d:58:81:de:ee:62:b8:d8:16:38:0e:c3:60:9c:b5:
69:10:9b:b5:36:90:32:d2:d9:03:69:34:15:a4:1f:be:05:f8:
11:92:39:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmGiuhyfcdkxBLXxwwNftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGYzN2Y0M2EyNjgzNDJlYWYwZmVjNTM5NjA2MzQwOTBi
NWIxYjcwHhcNMjUwODIzMTEwMjQ5WhcNMjUwODI0MTEwMjQ5WjAzMTEwLwYDVQQD
EygyYWViMmFlNGUxYzEyNTU3YzA1OTk2ZDY2OWM2MWQyNjY5NGRlYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA1V7xw05EeeiRPq7mtSz4P8VSkw
WxaFKYl4/razVZVATxWTQfIRG3SUunxfEhnUNynSotZ7DVkhFWHMOuhUyIZkJWFM
dS24c3uRCd5SVS1mXK9VKQaGdjFFaRoE3pbhWVYXoIMWhG6UwTlBBmB8/91B45Ce
p0m/UE4tu1srE/nHdsyqg0rXMpTEnTu4e2obcX+mAZTHO5rOlgk5dpPPnu+3NSMg
WucDpygH2iSO2//GfOZRYdYw0jdkr58MAFbbYMhj1lGLHYBYDEo9+xChnb9KsLmp
k9K6zOn/n4eOSdxPPbpXcELxyqR7JAH6rFWm+BgaccRYip52PjLHMR1yTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrrKuThwSVXwFmW1mnGHSZpTeyCMB8GA1UdIwQY
MBaAFDsPN/Q6JoNC6vD+xTlgY0CQtbG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgt
OWFlOTAwZGY0Zjg4LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgtOWFlOTAwZGY0Zjg4
LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHz4/FwB
iJCTZOAdWHgdSTKKfY2E7qzC519tTslpL+dycgWG3JHE5jt2/i2/Q0+Zig2ZqKox
zTet4pExx7E7D4N6/4i9wPJTMrbZsHH7zUOnt6hweWIxUklrxhjnHdGjtUn2CbpT
ep7Qnr4BBbxs1Rc6U95D/NFUWwEUJKQBk7LmqzJBdDjG/Mx2dDhWYeRhFamNgRAc
iwSabm92GlI1CArRfKLmFt/5AVH4fQaYR9hYpcbY5w4wfwGhBi3AZ4HxSX1R8zIJ
ioNv8439PXul4wCIgX9OEEWkYYF1TViB3u5iuNgWOA7DYJy1aRCbtTaQMtLZA2k0
FaQfvgX4EZI5XQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:41:52 2025 by rpki-client