Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: GLtcsGu4cDBo/XxvpMyqXba9G5r4yVPPhNJMaVT335c=
Subject key identifier: DB:D5:8E:10:04:26:10:05:A0:80:C5:A3:F6:1B:B9:81:0E:96:27:91
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 0199FF22D123F93CD99D19156DD165EBCE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 01:01:35 +0000
Manifest this update: Mon 20 Oct 2025 01:01:35 +0000
Manifest next update: Tue 21 Oct 2025 01:01:35 +0000
Files and hashes: 1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: mkAkQOuU49BDx0fJo0hiMs4iUOt2Y11iyPFzFFeK0oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d1:23:f9:3c:d9:9d:19:15:6d:d1:65:eb:ce:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Oct 20 01:01:35 2025 GMT
Not After : Oct 21 01:01:35 2025 GMT
Subject: CN=dbd58e1004261005a080c5a3f61bb9810e962791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:da:10:f5:21:cd:be:74:62:a0:c8:83:35:
90:38:49:9f:ff:34:19:5a:ac:20:26:69:90:0f:6a:
75:33:6f:a5:1a:30:a4:4b:d4:ae:36:36:ee:c6:08:
dc:8d:35:a9:cf:4e:f3:8d:eb:89:1b:4a:da:c6:e5:
0e:b1:d0:c5:5e:bb:d2:76:7d:ab:d6:41:61:fe:98:
4b:69:cc:14:00:28:3f:fc:07:9b:0f:35:27:ff:c3:
fe:b7:f5:bd:fe:ad:75:07:45:71:3b:88:1d:96:5d:
77:98:88:57:0d:ad:1a:6b:6b:5d:73:15:d9:5e:fe:
3a:c2:e1:6d:e6:66:0f:77:3d:57:18:c0:83:0c:62:
2c:db:1b:e4:0a:ef:2d:3d:85:18:15:15:6f:77:52:
ed:03:d6:d9:1c:f9:3e:d2:98:af:e3:5c:d1:06:31:
37:80:0e:40:c5:91:f3:14:73:a4:74:2e:a9:3a:f7:
62:28:77:58:10:35:6a:7d:cf:d2:21:b1:41:7f:71:
cc:8d:b3:f6:97:45:82:74:cd:38:9f:8b:b2:96:d8:
83:1d:ab:39:d9:b6:61:bc:da:ec:c1:87:78:96:83:
87:06:03:30:65:14:59:6e:c9:c2:db:ec:e2:0d:f3:
e7:f3:a9:c5:b8:b4:5f:b7:ca:7a:07:60:d3:b8:38:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:8E:10:04:26:10:05:A0:80:C5:A3:F6:1B:B9:81:0E:96:27:91
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3d:45:e5:9f:e5:c4:2e:eb:e6:a5:73:94:0a:46:e7:73:a0:
e1:df:b0:43:e7:81:9e:3f:a6:b0:c9:f9:02:5b:a4:9d:b6:06:
63:9b:81:66:81:89:2d:5a:d3:1b:92:e9:12:33:01:ac:75:66:
c6:68:69:ba:19:cb:54:d7:7c:7a:87:bf:c3:78:39:d1:9d:d8:
be:53:b9:7b:6c:67:00:be:83:a5:11:1d:d4:4a:a9:56:ab:64:
c0:3c:d2:fe:ef:06:ae:c7:37:83:57:7b:2d:df:74:65:a4:c0:
4f:03:9b:bd:ea:e0:57:d8:e2:e1:43:7b:b1:2f:c2:ad:a9:70:
9b:44:07:ec:90:7f:26:c2:f0:c8:ea:9d:f2:f2:96:ec:61:6a:
02:0e:04:22:71:36:fc:8f:37:70:79:b6:be:c6:b9:5a:f2:1f:
79:e0:eb:53:f6:78:cf:bc:5e:41:69:06:c5:8e:f4:df:70:1d:
6c:9f:7c:88:c2:5b:07:fa:43:55:12:9a:1d:49:af:92:20:9a:
d0:56:95:ca:19:d9:35:e7:72:47:00:3d:5c:56:12:b9:8a:27:
67:63:53:71:74:09:26:de:40:11:b1:8d:cf:ad:f2:1c:bd:c1:
4e:79:22:f4:6f:43:d2:72:1f:53:b1:54:9f:0a:ac:70:95:81:
6b:be:eb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:05 2025 by rpki-client