
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: TEHzWbNjzcwQw1w/GaWWkEvewCI77oISrKGkqNt7le4=
Subject key identifier: B1:71:B4:9E:32:F1:BA:1C:2F:B6:DA:F2:2B:15:E7:78:5B:2C:99:F7
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 0197B6A101D1E0EEEDCAC61F8A048C29F299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 052B
Signing time: Sat 28 Jun 2025 13:01:34 +0000
Manifest this update: Sat 28 Jun 2025 13:01:34 +0000
Manifest next update: Sun 29 Jun 2025 13:01:34 +0000
Files and hashes: 1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: bzDhbW/vb5yC5YMEhK+SdQw1Y/4mojo2awEs5qfaKsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:01:d1:e0:ee:ed:ca:c6:1f:8a:04:8c:29:f2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Jun 28 13:01:34 2025 GMT
Not After : Jun 29 13:01:34 2025 GMT
Subject: CN=b171b49e32f1ba1c2fb6daf22b15e7785b2c99f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:c6:2f:59:55:bc:38:cd:4f:85:74:0e:e9:
22:32:7e:cf:a2:b5:ed:f7:05:aa:bd:38:4a:78:6f:
d3:a5:32:99:3a:9c:76:88:23:9b:71:35:53:de:82:
e9:9d:58:50:7e:f5:b1:a2:7f:10:c9:5f:85:43:48:
93:48:68:20:19:85:a8:1f:dd:56:47:66:87:53:fd:
a4:81:ea:22:a2:6f:78:ac:a7:82:5a:71:ac:1d:cf:
05:13:7e:fa:7f:d7:e0:74:39:5c:2b:8c:a5:f5:31:
16:64:f3:b8:b7:2f:1f:0a:55:bc:57:67:ef:49:42:
23:b5:32:53:5d:d1:1e:19:b0:64:43:7b:13:57:89:
af:3c:ed:30:eb:46:5a:d7:90:08:9f:0f:02:09:a3:
f5:ec:01:77:34:cf:a2:dc:c4:5c:d7:e2:7d:2a:4d:
a0:68:3e:c4:4b:d2:24:74:bf:64:39:a4:c2:58:22:
7b:b1:20:0e:97:ce:eb:dc:91:85:d9:98:9e:0a:63:
de:8d:48:79:7e:25:c0:c8:4c:47:83:f5:4f:6b:3b:
6c:79:a4:36:2f:33:cf:07:58:fe:bf:e4:ee:fe:b9:
a2:88:cb:25:60:7d:93:83:f1:cc:9e:8f:91:0c:b2:
e7:da:48:cd:15:72:7a:b9:f5:12:b9:58:02:49:be:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:71:B4:9E:32:F1:BA:1C:2F:B6:DA:F2:2B:15:E7:78:5B:2C:99:F7
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a2:d9:1d:15:b0:e5:02:ba:29:10:de:18:10:6a:01:ba:cc:
f8:8d:4d:25:93:69:d7:93:8b:a8:2d:77:e5:12:03:5e:bd:30:
5c:cc:2d:7d:db:e4:0c:b2:78:bb:19:5d:f3:81:5c:11:e1:2b:
20:0c:ab:1c:b5:95:80:5e:db:aa:fc:82:e9:82:3d:4b:6c:6a:
0f:c1:b3:69:e0:44:17:5b:00:49:24:1d:72:e2:5f:72:8d:d6:
90:a7:71:f9:bb:76:a5:d5:16:8b:fb:78:42:72:f8:a3:2a:f4:
35:df:35:e8:66:5e:61:bb:1b:89:21:f2:5a:11:61:a6:cb:16:
7b:aa:d5:ba:e6:d6:8b:3c:57:f6:30:fa:df:46:56:d8:ef:6e:
01:25:7b:23:23:dc:8c:04:06:62:29:7d:48:08:f2:48:b9:e5:
57:df:97:33:90:57:e8:9a:1f:7c:ec:18:3a:0b:02:4b:d9:3f:
a6:d1:24:1e:cb:31:67:21:4e:2e:e9:d4:28:78:43:ff:b2:cb:
0d:f8:8f:38:1b:ff:92:90:87:98:58:50:72:b7:be:e7:34:da:
4a:f5:5a:4e:d4:57:ad:68:eb:f0:e5:88:07:f2:09:81:25:22:
2b:58:2b:07:30:49:55:4c:f8:cc:85:6d:83:d8:62:87:d7:ec:
3a:50:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:25 2025 by rpki-client