Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: vW3N5lh59raYlvqo6hh7nz3kCdMPOBuSFWp9rNC9kEo=
Subject key identifier: 7C:8E:FD:6D:FD:D0:84:6C:11:B0:90:B7:9B:83:2F:CE:5D:83:59:E3
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 0197B8213E3FC72A41B4BCBC9FF3178AEB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: r8YnHLVgdBUjVCK/e/5O9O0V4WZuInLM3PViHO/yJ2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3e:3f:c7:2a:41:b4:bc:bc:9f:f3:17:8a:eb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=7c8efd6dfdd0846c11b090b79b832fce5d8359e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:02:d0:8a:db:30:b6:c8:c7:c6:13:11:5f:
8c:b9:2d:6c:3e:b6:83:d1:75:40:6a:2c:ab:94:ae:
40:c0:eb:f0:ec:d3:4a:d2:b0:8c:8b:d6:e1:ac:3b:
ff:c0:8a:15:ea:97:75:14:26:eb:e2:61:54:a6:26:
c7:4c:20:64:e2:e7:66:5c:9e:4f:df:76:c0:82:03:
ca:4a:43:61:72:91:bc:4e:f3:21:3a:44:23:a9:f8:
0b:a3:bf:ba:f0:7b:5e:b7:4e:a1:31:84:c0:d8:21:
4a:d3:c0:1f:c8:4b:48:34:28:54:bf:bd:e7:d1:54:
a1:8e:82:1b:cf:0b:e7:52:74:e7:f0:c3:6e:db:9f:
63:dc:10:1a:5d:2b:d5:1f:ef:2d:b5:5b:1e:9c:80:
03:fa:60:a5:b1:24:23:b1:e4:89:d4:2d:c7:70:22:
a7:6a:6e:b5:ee:13:1e:5f:13:a0:1e:0f:28:2f:dd:
31:9a:08:62:19:30:e7:ca:ff:d2:6e:09:d7:15:b8:
3b:f4:2f:0e:d9:a0:0f:e2:ca:83:c8:ca:d0:8d:aa:
a5:15:c0:07:51:b3:87:75:b7:44:43:84:f4:65:f0:
4c:a8:be:4d:a2:b4:f2:ea:8e:a8:86:a8:b4:d2:62:
38:6a:03:15:00:63:fe:9d:20:10:43:63:f0:92:0f:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8E:FD:6D:FD:D0:84:6C:11:B0:90:B7:9B:83:2F:CE:5D:83:59:E3
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:00:ed:48:c3:a5:4e:a8:28:da:17:73:e5:0b:1f:19:90:e2:
7f:ca:c9:b4:48:8a:05:96:19:8b:36:76:8c:0c:b7:81:1a:66:
b9:3f:0b:7d:21:0e:59:4a:14:18:5b:c8:d7:86:53:b0:a3:f4:
9f:16:0e:9b:ac:c1:d8:fe:d9:e1:c3:c0:52:4f:ea:11:82:2c:
f1:02:ac:94:91:c1:e4:cc:aa:f9:26:66:cf:b4:f0:c0:dd:a1:
37:6d:e2:ef:6b:bd:59:cb:eb:35:18:cf:d6:eb:e5:0f:45:59:
22:2d:d8:a8:b5:ac:ab:19:f3:a8:70:84:18:45:7a:9c:5d:2a:
cf:f1:ad:f0:a9:00:b9:c2:77:0c:11:e0:75:8f:90:74:7c:80:
de:b7:69:a7:1c:4d:2e:c8:e0:fd:f6:3f:a2:82:e9:4a:ee:87:
ce:e7:1e:e9:8f:b9:5d:6c:57:a5:0d:5c:51:be:2f:fd:e9:f2:
d9:d2:86:ef:61:96:fb:a2:1d:04:53:cd:69:23:cc:36:47:05:
bf:8c:70:14:5f:c6:11:c4:5e:1e:e6:61:27:dc:f8:80:00:79:
36:f1:73:87:0f:d9:dd:99:d1:09:7d:bd:72:7e:b0:5d:35:7d:
45:b7:6a:4e:5f:52:fb:b0:58:ad:08:9e:fe:04:07:28:49:d6:
6e:0e:fe:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IT4/xypBtLy8n/MXiutsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGRkYWE3NDk0ZDY5YmExY2FjYjQ1N2VmOTFiNmRjZDIy
ZThkZDkwHhcNMjUwNjI4MjAwMTE1WhcNMjUwNjI5MjAwMTE1WjAzMTEwLwYDVQQD
Eyg3YzhlZmQ2ZGZkZDA4NDZjMTFiMDkwYjc5YjgzMmZjZTVkODM1OWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEQC0IrbMLbIx8YTEV+MuS1sPraD
0XVAaiyrlK5AwOvw7NNK0rCMi9bhrDv/wIoV6pd1FCbr4mFUpibHTCBk4udmXJ5P
33bAggPKSkNhcpG8TvMhOkQjqfgLo7+68Htet06hMYTA2CFK08AfyEtINChUv73n
0VShjoIbzwvnUnTn8MNu259j3BAaXSvVH+8ttVsenIAD+mClsSQjseSJ1C3HcCKn
am617hMeXxOgHg8oL90xmghiGTDnyv/SbgnXFbg79C8O2aAP4sqDyMrQjaqlFcAH
UbOHdbdEQ4T0ZfBMqL5NorTy6o6ohqi00mI4agMVAGP+nSAQQ2Pwkg+xEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyO/W390IRsEbCQt5uDL85dg1njMB8GA1UdIwQY
MBaAFKMN2qdJTWm6HKy0V++RttzSLo3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTIt
NjU0NGEyYjk5ODE3LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTItNjU0NGEyYjk5ODE3
LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFADtSMOl
Tqgo2hdz5QsfGZDif8rJtEiKBZYZizZ2jAy3gRpmuT8LfSEOWUoUGFvI14ZTsKP0
nxYOm6zB2P7Z4cPAUk/qEYIs8QKslJHB5Myq+SZmz7TwwN2hN23i72u9WcvrNRjP
1uvlD0VZIi3YqLWsqxnzqHCEGEV6nF0qz/Gt8KkAucJ3DBHgdY+QdHyA3rdppxxN
Lsjg/fY/ooLpSu6Hzuce6Y+5XWxXpQ1cUb4v/eny2dKG72GW+6IdBFPNaSPMNkcF
v4xwFF/GEcReHuZhJ9z4gAB5NvFzhw/Z3ZnRCX29cn6wXTV9RbdqTl9S+7BYrQie
/gQHKEnWbg7+Jg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:39:12 2025 by rpki-client