Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: KdqJSdQpkjvgvpiPVj7EMyqOiooQtEmZnDghLwtJlw0=
Subject key identifier: D3:12:32:48:7C:59:6E:35:4C:3E:94:F3:6F:9E:D2:2A:B4:20:48:5D
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 01984AAF3E56067F92A2876C96FDE89FC15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 07:00:55 +0000
Manifest this update: Sun 27 Jul 2025 07:00:55 +0000
Manifest next update: Mon 28 Jul 2025 07:00:55 +0000
Files and hashes: 1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: MswvpIyfyA74tIwgJn2B2A+kutTpZQMD5sgPsztJnL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:3e:56:06:7f:92:a2:87:6c:96:fd:e8:9f:c1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Jul 27 07:00:55 2025 GMT
Not After : Jul 28 07:00:55 2025 GMT
Subject: CN=d31232487c596e354c3e94f36f9ed22ab420485d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:b1:b2:6d:0f:cb:ab:34:9b:2e:ea:dd:f6:
33:c0:a0:73:a8:02:af:be:f9:bf:78:51:39:d3:04:
7d:ae:46:a9:ce:92:27:4e:42:d1:9a:3f:4f:52:48:
29:fd:66:11:20:4a:f6:7a:d6:1d:09:24:aa:24:c2:
e3:30:22:f5:37:4d:53:4b:d1:48:33:45:b0:a1:b7:
07:86:d2:19:39:61:b1:9e:79:43:64:4f:5f:77:a3:
5d:9a:20:c6:a2:47:54:be:90:3d:d6:a1:6f:1a:3d:
50:28:6e:6b:fe:ff:af:0c:5a:07:0d:da:92:71:dc:
cf:c9:9a:4c:ef:aa:42:2f:3b:da:e8:18:1d:93:36:
dd:5e:cb:93:c8:33:00:37:a5:79:67:56:bd:24:1f:
b3:ed:37:2a:a4:d4:88:03:0b:09:83:0a:85:50:fd:
b0:8a:1d:5b:b3:2f:e8:1d:9e:02:ea:a7:33:43:55:
65:47:0b:98:ba:b9:51:6a:67:8f:4c:eb:47:03:79:
4c:d3:71:38:35:a5:5d:d9:ba:04:5d:aa:b9:d3:50:
96:8d:cc:24:c0:dc:26:b0:c7:c3:ff:29:d1:50:08:
b8:f4:dd:91:d6:68:3e:11:72:ce:d3:ec:cc:c2:8c:
cc:09:b1:bc:07:04:9e:75:2a:56:d9:19:3e:9f:2a:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:12:32:48:7C:59:6E:35:4C:3E:94:F3:6F:9E:D2:2A:B4:20:48:5D
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:43:bd:02:88:f6:4b:3b:ff:de:6b:e2:b8:2b:3f:0d:43:8d:
28:80:af:a4:a4:e8:97:32:61:11:1e:9e:1c:3a:84:60:d8:af:
be:c8:b3:66:e2:60:60:2a:0e:30:71:69:0c:f8:cd:df:a0:82:
12:68:3c:9c:7b:67:07:a0:e8:87:7f:71:36:c9:cc:18:1f:bb:
7b:20:52:61:b6:f4:f1:6f:99:14:34:09:c6:ed:31:ad:16:24:
e8:73:22:18:17:74:06:d5:48:7d:b3:fd:41:5d:fb:06:e2:9f:
58:de:fe:06:06:20:15:c3:dc:4f:40:e8:c2:0c:e2:13:d7:97:
29:7d:1d:6c:88:f7:a0:53:c5:2b:43:ae:17:f7:19:52:ba:89:
99:0c:be:40:15:30:bf:b2:4b:13:fc:15:c0:b6:5b:93:d3:9d:
5d:75:a5:24:8b:10:fe:2f:4d:be:69:94:ec:5e:1d:1f:b1:97:
f6:0c:f1:e0:36:b5:d8:00:63:6e:06:59:4d:21:45:e3:92:84:
38:d7:44:1e:81:62:d1:da:25:40:96:ca:d2:4c:59:cf:01:70:
80:ad:06:87:07:de:ac:1a:82:0c:90:38:42:96:e1:cf:9f:8c:
65:97:07:4b:51:4f:86:f3:a5:7c:35:46:d1:82:39:fc:5b:27:
05:b0:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:40:56 2025 by rpki-client