Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
File: OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json)
Hash identifier: yd148oXb+13ehM2hk1zOP8UNwBkfIXG+hRFW76e5eWk=
Subject key identifier: 59:25:42:C8:DD:D1:F0:1B:F5:36:52:A9:FB:65:F0:38:89:4C:A0:22
Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
Certificate issuer: /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Certificate serial: 01984A413BD9CDF6F0F5B20251695D08D5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
Manifest number: 0586
Signing time: Sun 27 Jul 2025 05:00:45 +0000
Manifest this update: Sun 27 Jul 2025 05:00:45 +0000
Manifest next update: Mon 28 Jul 2025 05:00:45 +0000
Files and hashes: 1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: VC9igrLXeCG5FMIAWvNU/zdmdu/w4S1iVmkK5XM9HH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:3b:d9:cd:f6:f0:f5:b2:02:51:69:5d:08:d5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Validity
Not Before: Jul 27 05:00:45 2025 GMT
Not After : Jul 28 05:00:45 2025 GMT
Subject: CN=592542c8ddd1f01bf53652a9fb65f038894ca022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:99:e0:23:00:cf:79:05:88:cf:ad:17:46:3d:
78:1f:03:d0:b0:e3:c9:92:53:e7:ac:ec:d7:9f:0a:
41:d0:b8:29:eb:cd:20:90:73:49:41:29:cd:96:16:
1d:7a:89:2f:87:32:b9:7f:10:b7:69:a2:41:83:55:
43:20:a1:ca:dc:05:c7:1d:d9:54:89:c1:5f:50:ab:
b8:73:f1:56:cd:5a:b0:cd:57:84:5b:de:83:22:77:
01:aa:79:56:5f:f9:92:55:ff:31:35:05:80:73:34:
2d:c5:2f:ae:c3:f6:c3:6e:68:d4:d6:f5:e5:46:9c:
06:88:53:91:3b:8d:19:25:f1:ba:de:84:2f:1f:d5:
a9:d2:64:b9:18:7e:5f:43:5f:7f:f0:5c:8a:82:c6:
ed:25:e9:c5:a6:bb:fa:21:50:3e:a9:ed:2b:82:4f:
0a:6a:c3:a6:b3:7f:c4:00:ce:22:1e:3e:cd:cd:13:
a7:3c:cf:75:12:f6:ba:8f:78:e0:97:e7:3f:0a:ad:
8f:f1:fb:22:00:1f:d9:0f:bc:21:a4:46:5b:20:fc:
b8:8c:a6:a2:53:5b:01:92:3e:6d:f8:23:01:5e:bc:
d2:f0:2e:69:a9:ec:98:69:3e:8f:ed:32:88:3e:98:
9b:1a:2b:18:f5:48:cc:54:5f:d4:6c:8b:70:d9:4f:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:25:42:C8:DD:D1:F0:1B:F5:36:52:A9:FB:65:F0:38:89:4C:A0:22
X509v3 Authority Key Identifier:
keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f7:9c:c7:ee:b3:66:d4:6d:f1:36:e1:9d:17:24:af:dc:e2:
6d:ee:56:0c:eb:39:09:ef:6d:2c:1f:41:02:c6:36:23:85:9f:
42:54:1f:7e:d5:c4:9c:ca:cb:57:af:93:10:3f:bb:ac:75:85:
49:a2:af:10:9d:3a:7c:0c:50:a6:aa:cd:fd:02:2c:06:08:46:
93:4e:34:f5:7c:b2:f6:25:fb:42:d7:83:cc:b1:6f:33:8b:21:
20:47:8f:bc:c9:dd:90:be:1f:af:4f:60:fa:9d:36:d4:23:10:
5f:d5:9e:3b:cb:6c:e8:4e:73:01:f7:7a:17:23:93:df:a0:48:
3f:d4:f5:f4:75:8e:10:f5:93:13:ee:ef:44:43:0a:50:69:39:
fb:af:b6:8f:19:91:0b:f5:ad:49:b6:49:1b:f9:d7:e2:64:3d:
58:82:d5:67:9f:f4:d9:e7:66:ab:73:1b:c3:83:75:9f:d1:92:
f8:ae:27:83:45:80:76:ab:2a:c2:1e:eb:93:69:d1:c1:39:6c:
c9:72:3f:ad:80:0b:fd:fb:19:5d:97:f5:d7:af:93:37:28:df:
13:1a:23:bb:80:86:c0:a5:63:ea:ab:f8:26:57:ba:6b:e1:1a:
54:e8:ec:dd:da:1d:48:a4:82:ac:66:90:3a:50:7e:81:0c:d0:
21:a5:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:17 2025 by rpki-client