Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: tJYwHgRpewLNyYQgGW8DPKogp4hLeaiHUywu3x3VTFA=
Subject key identifier: BF:0E:28:86:F4:BA:11:F5:49:C3:D2:3B:64:4A:B6:F7:86:BC:7D:AB
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 0197B7EAAF4727BBA52115D0E5EC3763735A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:40 +0000
Manifest this update: Sat 28 Jun 2025 19:01:40 +0000
Manifest next update: Sun 29 Jun 2025 19:01:40 +0000
Files and hashes: 1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: 4ZypdcFp0gqOb4lSJ6+31nEXAqLZOHhVLSjkQxi+QK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:af:47:27:bb:a5:21:15:d0:e5:ec:37:63:73:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Jun 28 19:01:40 2025 GMT
Not After : Jun 29 19:01:40 2025 GMT
Subject: CN=bf0e2886f4ba11f549c3d23b644ab6f786bc7dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:af:63:3f:34:15:e0:4e:3f:f3:be:e3:2e:
fe:b4:db:a8:e6:a1:90:7f:7e:2f:b5:98:87:79:cd:
3f:a2:c3:b3:02:91:74:f1:f1:b9:e1:c8:97:6c:cc:
29:71:3a:51:45:48:69:43:cc:87:a0:e4:33:73:a8:
f4:7b:62:9a:96:d6:b6:35:d2:04:dd:db:2f:d4:f6:
0e:aa:e9:bf:2c:d8:f4:d4:d1:25:4c:ad:c1:79:d5:
27:50:0b:05:df:e9:90:bb:0b:5d:c7:16:d4:a2:73:
4a:47:79:c3:11:f6:4b:2f:27:11:a9:df:3c:dd:db:
1f:42:df:84:01:4a:25:05:b1:0d:9a:d7:f0:d4:0e:
81:c1:49:0f:0e:cb:23:6c:43:ba:0c:b2:3a:0e:49:
d3:ea:dc:a1:4e:dd:78:4b:47:76:2f:fd:16:7e:f2:
e1:56:b5:0c:43:cb:8e:52:0a:d9:8b:ff:9c:97:26:
6a:ff:01:bf:fd:2e:56:b8:92:4f:ea:df:9b:55:0b:
f9:88:15:e4:63:54:0b:27:5f:5e:55:d9:74:c9:d0:
52:dd:03:ae:15:39:7e:da:d9:17:d6:9b:1e:71:c5:
74:70:57:58:b7:80:56:72:e0:45:9a:00:fd:50:aa:
5b:b7:0c:6c:e6:e0:ab:f9:5b:f6:3a:ca:0d:88:62:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:28:86:F4:BA:11:F5:49:C3:D2:3B:64:4A:B6:F7:86:BC:7D:AB
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1f:48:84:f7:93:6b:c4:48:c4:94:07:f3:84:73:4c:61:3a:
f5:1d:50:7d:83:52:36:8a:0e:db:65:3b:86:05:4a:cd:58:c9:
be:e3:a8:6d:c1:3e:37:60:fb:9e:16:42:df:a4:a6:8e:c4:8f:
d2:66:4c:2e:76:d3:4a:b5:3d:2c:2a:8e:34:20:ae:95:b8:33:
e3:9b:6c:ef:eb:7c:86:c0:fe:bd:20:d6:96:51:fe:ba:57:a5:
85:03:74:53:18:b4:42:24:79:73:78:2a:b9:8d:f0:54:53:0e:
c7:ca:2e:bc:a3:83:2c:7e:58:ec:52:a5:81:fc:e3:71:2b:aa:
18:02:c0:a7:00:7f:5a:ba:8e:8c:dd:92:00:11:64:b6:d3:29:
27:56:cd:09:c1:53:e0:6f:46:ef:6c:f0:35:2d:4a:6c:b7:4f:
79:64:ee:64:dc:c7:31:3a:a1:47:45:51:0d:96:f5:4c:dd:3a:
48:88:37:ad:a6:f8:f0:9c:4f:ec:92:52:81:5c:41:ac:af:c2:
ec:ef:a0:4a:e0:94:fb:e4:3d:84:6a:cb:6e:46:4a:e0:97:96:
9e:4c:06:d6:23:4c:87:71:76:a1:81:2b:a4:58:48:23:cd:60:
fa:94:4f:26:50:11:26:fc:92:72:da:a4:92:02:37:22:90:91:
e0:41:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:40 2025 by rpki-client