Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: Q/RPOushIYfG6bFUEb6fX/4R4y0KSsN4kgAOKoFZKNo=
Subject key identifier: 4C:89:23:CF:66:A9:25:02:1D:C0:D8:DD:A9:CC:70:DF:72:54:90:18
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 0198499BEE80DA9C55DDE21703686A377A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 02FF
Signing time: Sun 27 Jul 2025 02:00:12 +0000
Manifest this update: Sun 27 Jul 2025 02:00:12 +0000
Manifest next update: Mon 28 Jul 2025 02:00:12 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: CHNSvQmS+0oy42G+b8mzWI+bdRx4Wsyn/1J8BK+BU4Q=)
2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:ee:80:da:9c:55:dd:e2:17:03:68:6a:37:7a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Jul 27 02:00:12 2025 GMT
Not After : Jul 28 02:00:12 2025 GMT
Subject: CN=4c8923cf66a925021dc0d8dda9cc70df72549018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:b6:7a:18:f0:68:79:b7:9c:a3:62:bb:82:
8f:77:06:e4:5e:6a:b0:fe:a3:12:e9:b6:7b:8c:d6:
d2:d7:a7:09:02:d6:01:fc:f8:81:79:a7:ca:c1:e4:
05:c3:52:1e:b1:2d:d2:9a:56:ad:c3:da:3b:7a:dc:
80:73:76:08:1b:30:95:75:0c:be:b7:0b:ba:4a:64:
ea:13:fd:cf:b9:25:21:53:55:bd:b4:ad:ee:29:80:
f0:f8:08:c5:fb:52:1f:17:b5:c1:ff:f0:c9:cb:88:
4b:53:ba:1a:1c:d2:10:76:85:08:a5:ea:6a:a9:7e:
b8:eb:d7:14:e1:b5:09:54:87:90:b7:a2:b8:f2:22:
8b:76:5c:f1:da:7d:57:20:42:28:c6:47:62:e4:fa:
ee:6d:38:26:f1:c0:31:90:60:1d:a5:dc:38:b1:42:
51:99:71:3b:23:9b:f9:87:ab:2b:cc:96:b2:03:87:
89:0e:6f:20:ac:65:57:7d:80:d1:98:27:53:9d:b2:
6c:0a:dd:d0:39:5f:40:e0:3f:4d:4f:26:b7:54:56:
f1:b5:9c:7a:24:86:5a:53:f5:f1:7a:8a:06:9f:98:
59:4f:73:d7:a4:57:82:a0:53:ae:a1:14:c6:66:b6:
95:c0:d6:0b:2f:d3:54:f4:36:72:ca:f8:80:24:96:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:23:CF:66:A9:25:02:1D:C0:D8:DD:A9:CC:70:DF:72:54:90:18
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9e:43:cb:6d:17:77:74:77:64:b9:1d:29:fb:63:6f:a3:26:
10:be:2d:64:2a:c3:7d:64:d6:8a:03:69:cc:7d:d9:6b:f8:73:
4b:58:fe:99:09:74:94:71:83:aa:93:7d:ed:de:20:96:f9:7b:
80:50:78:76:e4:25:13:4c:cd:89:cf:2f:cd:95:39:4c:14:b7:
a3:6d:73:6b:01:51:26:b2:f2:3b:d0:6e:e3:80:87:72:24:c1:
d8:c0:f0:5c:c2:9a:ea:f2:f5:ca:75:3f:71:bf:e8:ec:01:67:
c3:9e:af:65:eb:6d:2a:cc:20:bb:d1:a4:4b:9c:00:33:d0:42:
0b:ab:05:a7:dd:4c:4c:b3:51:6d:7c:67:5c:2e:cd:8e:29:24:
e9:44:c9:4e:16:84:2f:6e:0f:f1:dd:7f:5b:04:ee:fe:ec:92:
99:2b:59:1d:30:6d:e0:93:8e:a6:80:2d:d7:c2:c7:28:74:75:
e2:4e:06:56:62:83:5e:ef:59:dc:18:f9:c5:37:9b:a6:ec:f0:
e8:74:66:8b:5c:27:ec:5e:c0:00:15:fd:1b:27:95:82:e6:d4:
43:65:ce:2b:41:c2:3f:06:f8:83:6b:c1:ec:0e:a2:f6:c1:ca:
f2:bc:b0:92:3e:2c:ed:82:38:f2:b0:a2:53:11:dc:b8:37:3e:
61:5a:b3:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJm+6A2pxV3eIXA2hqN3p6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGYzN2Y0M2EyNjgzNDJlYWYwZmVjNTM5NjA2MzQwOTBi
NWIxYjcwHhcNMjUwNzI3MDIwMDEyWhcNMjUwNzI4MDIwMDEyWjAzMTEwLwYDVQQD
Eyg0Yzg5MjNjZjY2YTkyNTAyMWRjMGQ4ZGRhOWNjNzBkZjcyNTQ5MDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTK2ehjwaHm3nKNiu4KPdwbkXmqw
/qMS6bZ7jNbS16cJAtYB/PiBeafKweQFw1IesS3Smlatw9o7etyAc3YIGzCVdQy+
twu6SmTqE/3PuSUhU1W9tK3uKYDw+AjF+1IfF7XB//DJy4hLU7oaHNIQdoUIpepq
qX6469cU4bUJVIeQt6K48iKLdlzx2n1XIEIoxkdi5PrubTgm8cAxkGAdpdw4sUJR
mXE7I5v5h6srzJayA4eJDm8grGVXfYDRmCdTnbJsCt3QOV9A4D9NTya3VFbxtZx6
JIZaU/XxeooGn5hZT3PXpFeCoFOuoRTGZraVwNYLL9NU9DZyyviAJJZGnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyJI89mqSUCHcDY3anMcN9yVJAYMB8GA1UdIwQY
MBaAFDsPN/Q6JoNC6vD+xTlgY0CQtbG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgt
OWFlOTAwZGY0Zjg4LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgtOWFlOTAwZGY0Zjg4
LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF55Dy20X
d3R3ZLkdKftjb6MmEL4tZCrDfWTWigNpzH3Za/hzS1j+mQl0lHGDqpN97d4glvl7
gFB4duQlE0zNic8vzZU5TBS3o21zawFRJrLyO9Bu44CHciTB2MDwXMKa6vL1ynU/
cb/o7AFnw56vZettKswgu9GkS5wAM9BCC6sFp91MTLNRbXxnXC7Njikk6UTJThaE
L24P8d1/WwTu/uySmStZHTBt4JOOpoAt18LHKHR14k4GVmKDXu9Z3Bj5xTebpuzw
6HRmi1wn7F7AABX9GyeVgubUQ2XOK0HCPwb4g2vB7A6i9sHK8rywkj4s7YI48rCi
UxHcuDc+YVqz9A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:18 2025 by rpki-client