Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File: OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier: pD2JvJu4zyaqpmJB5mb/ZImLZSssIL8ae1zcSWx6vpE=
Subject key identifier: 3E:E6:8F:E0:A8:15:BC:42:D8:D6:BC:07:33:78:0A:65:26:FA:2A:7B
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer: /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial: 019A7293EE7955B5CEBD3D7FF4D2F33EF822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: +K6xrYf3tt3QdPNgESU6D9rw15VQrIGFg2w+wUlXUTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ee:79:55:b5:ce:bd:3d:7f:f4:d2:f3:3e:f8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=3ee68fe0a815bc42d8d6bc0733780a6526fa2a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a2:fd:a2:aa:66:fa:a9:42:11:a6:84:61:6f:
99:ce:1c:28:bb:ec:1d:7d:79:80:8a:90:4e:96:a0:
b2:62:af:aa:42:6d:d2:b7:24:fe:16:9c:b1:85:51:
84:f5:0e:b9:88:d4:a9:d9:94:66:3a:b3:d5:72:ea:
a6:93:2d:82:04:1d:e7:ba:00:af:43:68:c0:83:87:
89:da:17:19:2e:e3:a7:78:8f:49:04:aa:d3:17:eb:
d3:7c:1e:df:30:4f:f4:5e:22:c1:5b:7a:a3:be:83:
b1:99:8c:68:fc:4c:92:e6:fb:7a:35:39:8d:57:cb:
60:c0:f7:61:15:8c:bb:98:c6:51:68:80:02:79:ec:
f1:aa:4a:19:fa:5e:f1:fc:93:fa:ef:58:ab:88:03:
d0:07:3e:73:7b:6e:c7:d5:f6:cf:87:a2:a4:8e:01:
92:86:4e:7d:8d:ae:b8:4e:b9:6e:1b:dc:91:71:72:
23:18:53:88:7c:00:d3:50:25:90:a2:b5:ce:b4:91:
00:23:8c:fb:a6:d4:57:a6:fe:ad:de:f1:4d:37:4c:
30:87:e1:b3:6b:5e:80:d7:bc:14:b5:8c:88:60:70:
15:ab:70:01:8f:e8:86:ae:74:8e:f4:f9:69:72:71:
1c:1d:02:ad:09:b4:51:42:f5:38:16:b7:62:ae:57:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E6:8F:E0:A8:15:BC:42:D8:D6:BC:07:33:78:0A:65:26:FA:2A:7B
X509v3 Authority Key Identifier:
keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:08:60:69:f8:a1:c5:91:45:59:ba:e9:cb:5b:63:d8:26:43:
73:2e:d6:4a:06:c1:d8:73:b1:97:94:03:ca:33:ee:15:d0:89:
78:0f:eb:88:ab:ec:3d:2b:62:a5:c3:e0:42:59:4e:35:77:75:
3e:7d:c3:ab:d8:92:76:d2:56:94:46:ef:5f:86:9c:23:99:e3:
67:c9:6a:34:99:5c:60:c1:75:6f:91:29:89:59:4f:41:b2:f8:
65:14:4c:e7:10:a9:65:79:f3:99:83:ec:20:23:28:08:5b:e8:
fe:25:53:0d:1c:c3:d6:21:99:d1:65:6c:c6:a0:e4:76:39:9a:
af:ef:15:f4:ab:bf:5c:ce:11:16:2c:f7:de:f7:3c:a7:fb:7f:
11:c7:09:04:43:57:fe:de:f9:3a:54:49:e0:b6:7f:d6:6e:db:
20:2c:8a:cd:43:7f:2a:98:bd:93:61:0e:81:a4:a9:d2:3c:87:
a1:42:cd:d8:4f:a3:eb:73:48:56:a9:58:0b:00:94:da:b2:65:
90:3d:21:8c:cc:43:36:7f:2d:41:ef:9b:d0:e2:84:45:df:7b:
ed:68:0a:d4:c7:05:e2:32:7c:ad:57:77:c2:29:16:8a:5e:8f:
c4:38:1e:dc:71:77:ba:32:fb:df:08:cd:83:63:d7:5b:e3:05:
c6:26:77:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:42 2025 by rpki-client