Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
File: owVfB71HqGR4w79HOSVzrNU9Y24.mft (raw, json)
Hash identifier: RFEWbK+ulQnTn0yoV0VWVmwAQgP6811tJ8pSfmOBBuw=
Subject key identifier: EB:04:42:29:14:AA:1C:BD:56:9B:99:99:B2:BC:B7:9A:10:45:C7:B8
Authority key identifier: A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
Certificate issuer: /CN=a3055f07bd47a86478c3bf47392573acd53d636e
Certificate serial: 0198D4DFF068E8273F371C5F414C9D1BDF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: owVfB71HqGR4w79HOSVzrNU9Y24.crl (hash: CKsyPadz9oMvUbV/CBYDhWUXOVpbDpRmla+HX9aC3ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f0:68:e8:27:3f:37:1c:5f:41:4c:9d:1b:df:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3055f07bd47a86478c3bf47392573acd53d636e
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=eb04422914aa1cbd569b9999b2bcb79a1045c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:65:1c:24:c4:95:5a:55:b9:9c:68:cc:9b:
74:3b:da:cd:e6:97:2d:51:72:e5:1c:6a:98:42:76:
15:ce:3f:12:81:24:76:de:b0:26:bf:5c:78:20:28:
46:b8:ab:2f:32:61:46:23:59:64:00:8f:da:39:15:
e5:b8:b4:35:a2:ec:02:fe:c2:27:f2:49:e4:fb:b1:
b3:bb:72:fd:ee:aa:0d:a0:86:53:9f:49:a2:27:cb:
5d:5c:01:16:6f:53:6e:7d:54:fc:83:0d:bc:2f:6c:
1f:d0:78:10:69:a1:5d:cc:7b:7d:7b:15:f0:26:ae:
10:73:9b:b9:32:dc:86:ce:6e:1b:72:12:70:f4:be:
4d:8d:90:bf:04:65:cd:fd:0e:33:6a:9c:4c:e1:a0:
8a:e6:9b:21:5e:50:da:d1:a2:1e:39:70:09:a5:2d:
96:a9:f8:6a:59:3a:ca:e8:b7:8e:d2:24:28:04:30:
67:4f:67:92:1a:6f:b7:e2:ba:f7:67:d5:9a:9b:2b:
bf:c4:01:fb:44:14:99:12:24:41:ed:47:5a:a7:de:
74:5a:aa:23:c9:4f:d6:4f:a2:ed:aa:51:7c:00:eb:
d8:98:4a:13:56:c5:c6:a9:77:58:b9:73:c0:28:9b:
5a:5b:68:10:f5:95:0f:98:08:6c:ac:8f:91:37:32:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:04:42:29:14:AA:1C:BD:56:9B:99:99:B2:BC:B7:9A:10:45:C7:B8
X509v3 Authority Key Identifier:
keyid:A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:40:45:09:21:f5:a0:8c:5e:ad:c7:e7:ab:c8:0b:fe:98:26:
6c:e5:b9:7b:26:95:0d:a4:6a:b2:85:7b:78:f5:7f:2f:ee:b2:
8e:1a:50:22:0f:55:07:f4:f9:aa:93:a3:2d:46:b7:65:3d:45:
ae:2f:d7:cf:10:ca:d4:74:3e:de:13:6a:84:d4:6b:37:95:da:
16:cc:46:1a:09:55:fd:d3:6c:f9:15:67:00:e3:48:c7:27:62:
c9:d8:c5:4b:d2:7a:0e:58:f4:0e:10:a0:06:11:9e:63:dd:60:
22:99:51:3b:5f:e0:ae:97:70:bb:99:c2:e1:7e:49:67:88:46:
67:76:37:11:86:b6:4d:26:a1:a0:45:84:a7:87:a9:ac:62:86:
06:98:12:f5:0e:57:50:40:00:d7:9d:40:22:03:ea:3a:16:b5:
9f:e6:54:95:2c:ef:82:eb:fe:3a:67:65:0e:e1:b7:7c:2f:67:
ed:e2:42:73:85:6c:a7:a3:a3:4d:79:ff:fe:cd:43:a0:7a:3e:
ab:81:cc:21:d4:d7:0c:ef:af:13:f0:97:9c:37:07:7b:73:6b:
1b:2e:6c:69:83:c2:f1:35:85:45:a6:71:37:e0:e2:ce:5f:c7:
94:01:a1:1e:44:77:a9:df:72:77:dc:97:26:a9:f4:60:9a:b0:
8f:60:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:22 2025 by rpki-client