Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: cdbqyYZNh+iY9oJ/2QSvRf2ai24K1uK8VvzMTqaS3vw=
Subject key identifier: F1:F0:9E:1C:EB:66:82:D8:39:E2:FC:8C:3D:E7:DB:C3:9A:F2:50:7A
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019959E8B487FEB6BAA9315B40861400F39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 038C
Signing time: Wed 17 Sep 2025 23:00:46 +0000
Manifest this update: Wed 17 Sep 2025 23:00:46 +0000
Manifest next update: Thu 18 Sep 2025 23:00:46 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: 2ntOjTX2AYBUjBvr13t/P4lUYVuHK4alxJ5y+9+1kvI=)
2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:59:e8:b4:87:fe:b6:ba:a9:31:5b:40:86:14:00:f3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Sep 17 23:00:46 2025 GMT
Not After : Sep 18 23:00:46 2025 GMT
Subject: CN=f1f09e1ceb6682d839e2fc8c3de7dbc39af2507a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:a4:4f:60:8c:51:a6:36:5f:f9:d9:94:db:
56:d4:5a:ef:fa:de:ac:b4:cf:83:37:fb:c4:3d:06:
88:54:e4:63:b9:5a:93:7c:63:29:b7:0d:4c:dc:85:
07:29:b4:32:10:66:38:0c:5d:02:e9:70:ba:ef:84:
fb:d2:57:d0:2b:d7:a6:65:29:e2:22:54:ba:1d:3b:
bb:00:9a:0b:b9:d6:ce:16:a4:c4:c0:52:28:29:e8:
b1:06:49:1e:c1:b4:89:69:2e:47:e3:2e:7d:1f:69:
72:96:b5:1f:08:9a:e7:49:47:d3:22:9c:b7:b0:ce:
73:60:1d:4e:85:d1:fb:c0:94:ca:66:bd:af:45:d4:
e2:f3:28:9d:90:a1:a0:95:b8:b9:22:70:a6:cd:c6:
14:8c:fc:e1:eb:6c:51:9a:37:ff:d8:38:16:3a:47:
ce:79:65:2d:d5:32:98:4c:be:c1:50:16:97:44:40:
2e:f5:cc:46:a0:1b:74:00:ca:08:b9:6b:a2:4c:2b:
70:5a:42:d7:8e:25:38:97:16:4a:fb:80:60:c7:f6:
bb:3a:a6:c8:29:c9:95:74:cd:ae:ab:c5:33:3e:44:
ed:c4:2a:26:4e:f3:85:91:df:a9:2c:5e:a8:1e:b4:
20:0a:48:d2:8b:9f:6a:af:62:a8:bc:5d:33:8f:a2:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F0:9E:1C:EB:66:82:D8:39:E2:FC:8C:3D:E7:DB:C3:9A:F2:50:7A
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c1:13:e6:27:2e:00:d2:f0:2d:0c:b7:e0:d2:58:10:63:5b:
78:a4:96:36:8c:74:d5:a6:6c:5e:d8:6e:22:41:e3:01:0a:58:
3e:55:ad:9f:96:47:b1:46:e1:35:b1:7f:74:f3:51:03:ef:7c:
0f:1d:e3:e6:d4:a6:88:b7:b4:e9:ee:ce:e1:19:50:10:82:d8:
8b:7f:a0:60:96:07:96:a6:3a:ee:fd:91:58:b1:c6:a5:ac:e6:
12:ad:b7:29:98:57:25:1d:df:97:fd:16:28:8f:5b:7e:60:67:
79:0d:7f:0b:df:72:69:bd:c3:3f:e9:13:5f:bd:26:4c:f6:e5:
db:fd:30:34:9b:89:68:fa:fb:e5:49:7e:08:90:b6:03:23:fe:
9c:a6:6d:0f:1c:48:a9:b1:a0:ae:ed:aa:31:1b:81:84:d2:bc:
2b:af:80:48:21:6c:3e:83:53:a1:82:09:63:e3:ef:62:c0:89:
58:35:73:81:f2:a1:c4:c9:4a:0f:d5:3f:ce:a8:39:96:60:44:
5a:d8:b3:48:91:3f:ab:7b:7b:62:80:5e:14:13:79:e7:44:86:
33:3a:95:05:d1:0f:d5:6b:e5:61:13:f6:ac:df:5f:03:53:56:
79:47:0b:9e:99:3a:b4:4c:73:38:a9:d5:b1:15:dc:f4:6a:dd:
28:50:29:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:05:29 2025 by rpki-client