Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
File: OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json)
Hash identifier: LA/YJKGQDXixeTfFu3Xr8aRUlUX9UvGbqosNWKzGdeE=
Subject key identifier: 01:8D:B2:22:BC:92:AE:D1:3B:2C:5F:4A:B3:3E:49:4A:45:8F:53:75
Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
Certificate issuer: /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Certificate serial: 0199FAD86690FF53781BBE4D5834BC296678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
Manifest number: 0666
Signing time: Sun 19 Oct 2025 05:01:49 +0000
Manifest this update: Sun 19 Oct 2025 05:01:49 +0000
Manifest next update: Mon 20 Oct 2025 05:01:49 +0000
Files and hashes: 1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: bygkzAIjBLGr318J0RUXKuxM0BtOG8O5EMJygjO5PLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:66:90:ff:53:78:1b:be:4d:58:34:bc:29:66:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Validity
Not Before: Oct 19 05:01:49 2025 GMT
Not After : Oct 20 05:01:49 2025 GMT
Subject: CN=018db222bc92aed13b2c5f4ab33e494a458f5375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:f6:c6:53:68:07:cc:bc:1b:a4:cc:c6:46:
03:0e:de:0c:8c:eb:fa:0c:5c:0b:56:ff:da:ab:44:
01:43:93:1b:6a:f7:10:36:a1:1e:7d:0d:ec:7f:49:
b1:dc:48:1b:8e:90:35:fa:8d:8c:b2:8f:1a:e3:ce:
fd:00:d3:4f:4b:b9:09:a3:1f:72:6a:84:69:c9:6a:
69:ac:a1:b6:e3:87:d0:9a:68:ce:85:e5:c1:8e:7b:
79:12:06:cf:1a:c8:ee:5f:13:0b:2d:98:83:2b:96:
cd:7b:d4:13:91:7b:c6:43:68:e3:2b:f8:cb:00:6a:
63:d2:65:70:1d:9c:80:e3:7d:41:8f:e2:fa:e9:f0:
8a:c4:13:11:60:da:98:95:70:e0:e2:a5:73:24:b2:
38:a5:d1:eb:64:65:fd:a4:8d:10:5b:9f:9b:10:ab:
b0:94:32:6e:ba:c3:12:f3:ea:f6:7d:31:c1:ac:e7:
80:1e:b9:7a:b7:89:ae:27:1b:fd:91:5e:28:bf:8d:
9a:fa:74:03:83:e0:aa:44:f5:05:a6:69:7e:00:65:
c6:8d:f4:d1:04:a3:7b:b2:ca:ae:e4:51:0e:3e:46:
2c:c6:57:ac:a7:ed:cf:55:44:f3:9e:81:06:60:9f:
c9:2e:98:a0:46:68:36:16:47:85:d0:82:69:07:89:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8D:B2:22:BC:92:AE:D1:3B:2C:5F:4A:B3:3E:49:4A:45:8F:53:75
X509v3 Authority Key Identifier:
keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:27:39:a7:c9:66:9e:a8:41:d1:ac:0c:25:1f:33:8d:00:8f:
f4:0b:89:d8:2b:d1:59:8e:d2:91:c2:0a:e1:86:50:f3:19:a5:
41:9f:22:43:97:5c:06:0d:c6:8d:c5:bc:75:d4:86:63:5b:dd:
21:3f:70:c4:41:c9:70:e0:c6:ea:51:46:d1:4a:19:5a:bd:91:
ad:6a:6c:3f:c1:5b:16:74:35:b0:0b:b8:9d:be:ad:95:1c:06:
57:90:67:57:41:0e:10:df:f1:04:75:c0:e2:92:f1:6b:dc:bb:
da:7b:4b:4e:b1:b1:df:1a:d1:59:25:04:05:f4:20:9d:9d:05:
fc:31:0d:d1:8a:1d:dd:f3:13:54:b3:38:12:71:f5:b1:9d:3b:
ff:3c:f5:e0:c9:a7:93:2a:6e:f8:86:47:d7:37:57:3d:6d:20:
13:a3:36:5c:0e:63:b6:ac:f7:0d:86:cc:ba:e3:b5:3e:ed:e9:
22:08:26:51:97:8f:7e:0b:99:9c:af:58:3e:1f:30:0e:27:10:
ea:c0:9d:8f:5e:c3:ad:c1:1c:e6:52:8f:20:79:71:dc:7f:0c:
c5:91:d9:58:da:7f:4c:8a:22:a6:c7:f1:32:f2:78:e2:73:8a:
1a:aa:8a:d5:6d:0f:ad:fb:1d:c3:b3:19:17:76:36:fc:0e:45:
52:5f:47:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62GaQ/1N4G75NWDS8KWZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjM3OGRlMzNkMTBiOGNiMGY4MDg2MmI2NDkxYTRkZTlj
ZmZjZGYwHhcNMjUxMDE5MDUwMTQ5WhcNMjUxMDIwMDUwMTQ5WjAzMTEwLwYDVQQD
EygwMThkYjIyMmJjOTJhZWQxM2IyYzVmNGFiMzNlNDk0YTQ1OGY1Mzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSn2xlNoB8y8G6TMxkYDDt4MjOv6
DFwLVv/aq0QBQ5MbavcQNqEefQ3sf0mx3EgbjpA1+o2Mso8a4879ANNPS7kJox9y
aoRpyWpprKG244fQmmjOheXBjnt5EgbPGsjuXxMLLZiDK5bNe9QTkXvGQ2jjK/jL
AGpj0mVwHZyA431Bj+L66fCKxBMRYNqYlXDg4qVzJLI4pdHrZGX9pI0QW5+bEKuw
lDJuusMS8+r2fTHBrOeAHrl6t4muJxv9kV4ov42a+nQDg+CqRPUFpml+AGXGjfTR
BKN7ssqu5FEOPkYsxlesp+3PVUTznoEGYJ/JLpigRmg2FkeF0IJpB4k+SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGNsiK8kq7ROyxfSrM+SUpFj1N1MB8GA1UdIwQY
MBaAFDljeN4z0QuMsPgIYrZJGk3pz/zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNzU2Y2YtMDYyOC00ZjcyLWExMTct
YmJlMDczYmY2YTY0LzEvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mNzU2Y2YtMDYyOC00ZjcyLWExMTctYmJlMDczYmY2YTY0
LzEvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESc5p8lm
nqhB0awMJR8zjQCP9AuJ2CvRWY7SkcIK4YZQ8xmlQZ8iQ5dcBg3GjcW8ddSGY1vd
IT9wxEHJcODG6lFG0UoZWr2RrWpsP8FbFnQ1sAu4nb6tlRwGV5BnV0EOEN/xBHXA
4pLxa9y72ntLTrGx3xrRWSUEBfQgnZ0F/DEN0Yod3fMTVLM4EnH1sZ07/zz14Mmn
kypu+IZH1zdXPW0gE6M2XA5jtqz3DYbMuuO1Pu3pIggmUZePfguZnK9YPh8wDicQ
6sCdj17DrcEc5lKPIHlx3H8MxZHZWNp/TIoipsfxMvJ44nOKGqqK1W0Prfsdw7MZ
F3Y2/A5FUl9H1Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:56 2025 by rpki-client