Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: zsTotl0KN6EPCp16lb86CyTz4r3nXw8D6DseNce6uIk=
Subject key identifier: 67:5E:DF:EA:C3:A8:FE:96:BB:EE:F5:B6:05:61:EB:DB:96:25:C3:AF
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 01984B53576C83F1C2503DA2596CE38E796A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 0578
Signing time: Sun 27 Jul 2025 10:00:09 +0000
Manifest this update: Sun 27 Jul 2025 10:00:09 +0000
Manifest next update: Mon 28 Jul 2025 10:00:09 +0000
Files and hashes: 1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: jCgtWabDT+UYnAAHwsQnVLZm4ELSwBM8PAlnD9VWgrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:57:6c:83:f1:c2:50:3d:a2:59:6c:e3:8e:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Jul 27 10:00:09 2025 GMT
Not After : Jul 28 10:00:09 2025 GMT
Subject: CN=675edfeac3a8fe96bbeef5b60561ebdb9625c3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:98:7a:76:e3:82:e4:c7:fe:e0:12:aa:d0:
22:e4:26:64:42:74:f8:af:f2:ca:8f:90:fc:95:fb:
21:64:26:1a:37:27:f0:d2:80:1e:fd:8e:6f:a6:d1:
0c:a7:bf:b7:94:ed:77:c6:23:45:e7:c1:ae:a6:1a:
79:8f:43:17:07:d9:e4:48:b5:68:6a:c0:87:62:1d:
e7:b7:9b:51:e5:98:de:c5:05:be:23:91:35:a7:be:
77:4d:17:9f:04:7e:2f:51:07:46:90:93:74:f8:7d:
5a:c7:8c:3a:b8:1a:28:da:6b:0f:a5:c8:82:77:71:
70:32:81:0d:67:32:14:b5:9a:68:11:dc:63:26:cc:
34:45:92:44:af:39:3f:37:51:35:53:bd:36:4b:a1:
72:ca:8f:22:56:16:c8:87:8a:32:68:41:54:c3:9b:
34:14:75:3e:4e:34:e3:44:57:59:43:62:5a:03:fd:
30:56:4a:f9:e1:50:3d:84:77:e0:21:a0:96:38:43:
e6:7d:27:38:cf:d2:62:96:fb:1a:36:74:fe:ea:fc:
65:cf:99:bc:60:e2:bf:91:f2:8c:f8:a6:d9:f7:35:
e7:02:1f:7d:6d:86:cf:d5:fa:50:cc:7c:80:59:83:
8f:cc:05:41:34:71:4c:11:33:f1:63:b5:98:97:02:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5E:DF:EA:C3:A8:FE:96:BB:EE:F5:B6:05:61:EB:DB:96:25:C3:AF
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:83:02:47:63:9a:ca:7f:8f:de:1d:3a:21:01:08:a3:e5:8d:
2e:68:9a:80:87:fb:86:62:52:f1:b6:63:09:46:02:50:32:41:
49:f0:79:d6:80:04:38:b2:de:e2:43:1b:fc:99:9c:39:ad:42:
7e:c1:10:ea:b4:09:1b:ad:1d:f8:f7:aa:dc:9d:d7:ff:eb:3a:
20:27:86:1b:f4:a0:e7:80:26:f3:af:e1:0c:46:54:eb:48:3b:
a4:21:9d:57:57:7a:81:65:89:cd:ba:f5:9d:5a:9c:16:96:19:
e5:76:80:4d:04:79:98:49:ae:ca:cf:6f:35:32:db:0a:dd:28:
03:fa:f9:eb:e1:f7:42:2f:84:2c:a9:cc:c1:91:64:ce:d2:43:
23:0e:33:b4:7e:31:a9:e7:87:23:6d:08:df:df:29:c2:6f:53:
f0:ac:09:d4:10:f2:aa:df:15:c4:a9:d5:d3:aa:da:ef:c1:51:
65:40:28:e9:6f:49:74:d8:8d:09:65:ff:da:5f:e8:4e:05:0b:
dc:6c:e5:12:f8:44:32:23:38:3a:bd:1d:fa:08:39:4c:2a:6d:
23:09:8a:cf:ff:62:77:a3:0d:df:88:c5:9d:c4:4d:a2:9c:cb:
fd:d6:94:ac:bc:2e:cb:4b:0a:eb:de:87:a3:e2:71:47:1c:de:
63:e7:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:41 2025 by rpki-client