Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: /2CxXGjLV7tAp0+EHUzOPFtjeZtj95XsCNhMJKUbqag=
Subject key identifier: 8D:6C:6C:F8:CC:FC:70:CF:84:49:B9:E1:E6:0E:DB:0F:93:96:4D:D2
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 0198D5F16B8DBE34C72654226D9C357F720B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: zNze37edYyYYljd4jJDyKRHLSYZafdMRvPhZIVdMQqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6b:8d:be:34:c7:26:54:22:6d:9c:35:7f:72:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=8d6c6cf8ccfc70cf8449b9e1e60edb0f93964dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:52:51:35:2b:cb:f1:1d:98:16:98:13:b6:
7c:bb:06:8a:7a:d6:6d:31:5f:78:a4:66:08:7e:ea:
75:f0:de:b1:08:d2:fb:87:98:3a:a8:fc:ff:ef:43:
8d:39:8a:c8:93:99:4b:dc:61:48:7f:d1:24:7c:bf:
38:55:4b:da:57:6a:b6:61:ba:b4:74:b5:b1:b2:c6:
44:cf:f9:76:90:ca:6d:bd:fc:2b:ea:43:06:46:94:
76:8d:b2:81:4f:32:21:82:7d:bc:b2:74:4c:6b:57:
00:07:5c:f2:f9:a4:88:0e:4f:9d:b0:39:68:97:5b:
83:df:b2:ce:3f:5d:94:5f:12:c1:bd:7f:e5:c4:22:
cd:a9:1d:32:27:41:86:02:7f:84:0f:d3:20:d4:2f:
53:0e:5e:a4:54:4d:c0:9a:ed:3a:ad:50:cd:cc:87:
a2:95:2a:45:15:d3:53:67:61:ed:4b:c0:62:1c:dd:
1b:45:be:e7:14:6e:66:6d:2a:3c:ec:df:43:e1:5c:
08:7c:59:ed:c6:1f:c7:ce:c7:fd:4a:6f:d7:5f:68:
34:5d:f4:b6:b0:55:7c:a9:e3:07:6a:58:a5:7f:fa:
4f:05:08:d4:b4:d5:1c:76:7d:45:8b:03:8a:3b:8d:
ec:03:6f:10:80:57:01:85:8d:35:f0:94:38:27:6b:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:6C:F8:CC:FC:70:CF:84:49:B9:E1:E6:0E:DB:0F:93:96:4D:D2
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f1:6a:22:be:9a:12:69:4f:8d:32:5a:69:2a:09:b1:3a:74:
45:ef:35:c6:11:ce:b0:54:f1:b7:36:45:14:16:3e:a7:c6:c0:
f7:99:21:fe:2a:6a:14:62:f1:a4:31:1b:9b:f8:d9:a2:1a:65:
65:6d:5d:c0:f2:f2:aa:72:04:84:a0:31:37:0c:cd:e7:98:3f:
ed:50:2f:0f:fa:f5:ad:e4:95:a8:76:3b:ed:9e:90:49:e7:54:
5b:6b:3f:96:96:d3:36:1c:6e:ed:b3:1d:cb:66:52:ad:51:e8:
49:80:53:6b:30:a8:ef:09:c2:a0:f9:e9:52:2d:80:30:6d:5e:
2e:08:d9:0a:45:05:f5:b3:c8:ed:e1:01:62:30:1a:4b:05:b1:
ed:1a:28:c7:bf:6f:4a:a7:39:ec:9f:af:16:58:f4:f1:7e:25:
c4:60:ab:5b:00:b4:b7:79:d0:bf:cf:7f:5d:2e:24:13:7f:cf:
78:37:c4:b3:16:94:f7:db:ef:f7:c3:f9:38:f7:47:67:91:77:
6a:ef:65:78:fb:b0:c9:34:5f:2f:34:6b:57:f4:66:c7:46:d1:
9c:e5:30:4d:46:51:35:ff:c7:bf:4d:f4:93:80:00:28:b6:bc:
60:50:a6:f7:61:57:0d:a1:f5:1a:30:c2:4f:7f:d9:b1:49:12:
ba:91:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:32:16 2025 by rpki-client