Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: ClNigVy85w0Wthy86v2eX3n6kXHJ8f0P7BF9a0Sqxac=
Subject key identifier: 6A:C4:F7:E8:AE:5B:AD:18:D8:FA:EB:41:B5:08:16:EB:D9:F4:46:5E
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 0198D5BC28C319E9927AD66B439F29784076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: v9cZW2LKerwObOn2l/vNsbA8ZCBVFlPf3mv2Y8Xs+BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:28:c3:19:e9:92:7a:d6:6b:43:9f:29:78:40:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=6ac4f7e8ae5bad18d8faeb41b50816ebd9f4465e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:29:98:d4:fe:b7:37:66:7f:23:27:b4:03:
aa:86:46:40:e5:f1:46:ac:05:71:84:90:85:23:6c:
47:ab:4c:81:18:4b:e8:5b:87:ff:3b:b6:1e:bd:e0:
9e:e9:90:19:43:cb:ec:61:ea:90:a5:02:80:1e:1f:
36:ea:4a:be:ed:47:8a:69:00:6d:a8:69:ec:73:7a:
6e:58:25:3e:af:78:9d:cd:d7:49:89:3d:5f:88:76:
18:7b:f0:31:9a:82:af:ef:46:1b:e9:80:66:12:36:
0b:99:0b:d4:96:2e:6e:78:e0:4a:59:ec:28:62:8f:
3c:31:fa:a1:18:01:ac:b9:ab:42:5b:df:27:86:a0:
9a:79:9b:ea:e8:7b:7e:cb:8f:0a:bb:96:16:8a:b7:
7c:70:24:ff:8c:5d:37:74:26:3c:e4:23:d9:9c:3c:
a9:8f:00:ec:b5:93:5b:ac:dd:54:04:e3:65:36:7c:
f8:45:a9:65:24:c4:0c:7c:07:9f:2f:89:da:5c:33:
c0:1d:11:46:24:75:d5:86:36:da:f2:7d:d1:35:96:
81:47:dd:c7:1b:66:5c:cd:2e:bf:d7:72:f0:11:5c:
64:48:7e:bd:80:4c:5c:93:19:50:91:69:06:98:08:
62:a3:be:ae:03:60:7a:54:1a:0b:ad:5b:cf:d6:3b:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C4:F7:E8:AE:5B:AD:18:D8:FA:EB:41:B5:08:16:EB:D9:F4:46:5E
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b2:c7:ed:11:ce:28:67:ea:0e:f8:0f:47:4e:65:77:b5:5b:
4d:de:cb:60:29:35:05:a6:fe:88:c3:7a:41:a7:3f:7a:bc:da:
65:6d:20:20:0c:26:5c:bb:5c:16:e4:8d:66:66:d1:e7:46:3d:
0f:1c:02:85:bb:8b:44:8c:75:f2:31:7f:2e:7d:57:28:03:0d:
b7:6a:f0:10:54:d9:44:6c:cb:28:5b:3c:4f:33:1e:ef:3d:6b:
fc:08:17:ba:a0:13:1e:43:60:37:11:4c:2e:3b:46:26:97:82:
4b:68:03:16:66:4c:1a:83:d9:08:70:e4:ab:33:d0:16:44:68:
6f:10:2c:a1:22:2c:c5:43:af:14:5d:5c:f9:0c:ec:02:46:27:
7d:3d:a9:54:78:3a:84:9f:03:9c:15:99:80:f0:a8:c0:ca:19:
6d:ab:ca:a3:63:2c:09:63:f9:3a:17:c9:7a:2b:03:9d:9a:03:
96:ee:36:b9:ef:3c:e9:e0:27:ac:37:3c:4b:ad:1d:94:42:52:
ab:c0:20:d4:a5:5d:3e:0b:f3:c4:d9:17:2e:05:00:5f:ff:b8:
3f:e3:95:13:6c:e8:ba:50:92:14:a0:c2:cb:f4:54:40:43:eb:
b4:70:e5:4b:6c:74:5d:69:3d:9d:f2:fc:4a:bc:cd:0d:fe:7d:
cf:65:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:47 2025 by rpki-client