
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File: OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier: 7c4IStKZCRVt/aCn1L6z5CT1CpI/45PEHuylSZMclwI=
Subject key identifier: E0:E1:F5:EE:08:47:7F:4A:CE:EB:94:CA:04:1C:B0:DD:4F:83:08:D1
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer: /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial: 0199228C32B190C312578D0C7AA43FDBBF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:00:37 +0000
Manifest this update: Sun 07 Sep 2025 05:00:37 +0000
Manifest next update: Mon 08 Sep 2025 05:00:37 +0000
Files and hashes: 1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: 6unVieyblkSDuYiOPCsRcoF/LxYi8uzs4BHPfbIBgow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:32:b1:90:c3:12:57:8d:0c:7a:a4:3f:db:bf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Validity
Not Before: Sep 7 05:00:37 2025 GMT
Not After : Sep 8 05:00:37 2025 GMT
Subject: CN=e0e1f5ee08477f4aceeb94ca041cb0dd4f8308d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:57:b8:97:4d:e1:ff:2c:5f:3a:df:34:e3:
72:b7:b1:93:47:00:d6:ac:78:f4:96:9d:fb:63:af:
f9:16:78:85:6a:5f:62:3a:0e:1a:7d:00:95:85:90:
cc:dd:be:26:a5:5f:e8:8f:6a:5b:6e:5e:bf:a1:51:
40:04:9b:dd:d8:cf:7b:d5:19:23:c9:a2:b5:9a:41:
fd:f7:8d:6b:08:37:81:6e:8c:1a:bd:1d:23:5f:54:
4c:fa:0e:ba:4e:5d:55:2f:f7:1d:ba:68:53:0a:92:
20:c4:4c:8d:57:e0:84:1c:be:dc:3a:ec:ae:56:de:
fa:ed:b1:21:39:a7:81:45:88:84:34:ad:1c:e2:aa:
0b:bf:bd:7d:c6:39:b5:94:6b:5f:68:f4:4a:5c:ab:
e4:63:0f:20:43:98:46:c5:c3:19:44:c5:26:be:ab:
53:b5:82:05:6f:81:d2:ed:f6:69:06:72:cf:d8:82:
9d:da:28:47:bb:ec:24:9e:da:81:af:31:9f:d7:ed:
2b:ea:54:8b:4b:c4:c1:ba:8e:41:c4:00:61:da:53:
f2:9a:4a:21:57:38:3e:41:f4:ea:27:56:4b:b1:db:
91:03:d0:f7:e0:d3:ba:37:5c:f6:16:b7:5e:d0:b6:
ae:25:3c:67:0f:15:71:fa:8b:40:84:dd:f0:57:31:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E1:F5:EE:08:47:7F:4A:CE:EB:94:CA:04:1C:B0:DD:4F:83:08:D1
X509v3 Authority Key Identifier:
keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:26:8d:7d:03:15:6a:0f:9c:f8:c5:14:ef:25:50:c1:cc:39:
0f:37:ba:b5:44:ab:d9:bf:76:72:79:02:9e:27:15:c3:a1:67:
10:99:0c:0b:49:a6:68:a4:fd:a8:cf:fb:43:5c:b2:a1:fd:d9:
6d:9f:1f:b9:bb:19:70:f5:da:e1:04:12:16:fd:12:a0:19:b9:
d2:83:ab:71:a0:39:7d:ab:7d:3d:e4:49:3b:4c:4b:b7:87:75:
06:dc:e6:48:97:8e:ea:b4:32:a9:19:e7:bd:54:c4:98:50:38:
13:c0:4a:b8:4b:ee:a8:90:9c:59:f3:fa:42:d3:38:08:04:72:
7d:f3:08:bb:58:e0:14:33:fa:ce:a3:e7:04:9e:8a:ed:45:5a:
fc:b5:f3:59:5b:92:d5:1d:04:e7:1d:6c:81:9e:d9:bb:34:fc:
92:d4:61:dc:8a:19:23:ab:85:0b:4b:0c:d8:38:93:ef:be:e6:
ae:cc:c8:32:18:b8:a7:11:05:0a:7a:e7:4f:e8:a5:54:60:92:
18:8f:64:38:20:1a:2e:3e:a6:5e:da:d6:a7:d1:5f:e7:f0:59:
09:a3:5f:18:00:88:b4:c9:ae:f3:bc:16:a4:af:bb:c7:ff:ed:
dd:d7:ef:c6:10:3e:03:7f:47:b4:ab:e0:67:c2:24:61:3c:67:
0d:60:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:27 2025 by rpki-client