Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: RQVaUh68zEzftYlShDHhwTEoj/6yrdwr3iLPaOyykE4=
Subject key identifier: 05:ED:0C:C6:D6:9D:27:3B:DA:FA:05:AB:A2:D2:EF:A9:7E:3F:FC:77
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 019A736EF8F4C3A71E0D2FA8CEF1597CBB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 0696
Signing time: Tue 11 Nov 2025 15:00:43 +0000
Manifest this update: Tue 11 Nov 2025 15:00:43 +0000
Manifest next update: Wed 12 Nov 2025 15:00:43 +0000
Files and hashes: 1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: fplVjJrakWnaa5LDVODbl2/ibdSwjTBLR2N9n5HSLsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:6e:f8:f4:c3:a7:1e:0d:2f:a8:ce:f1:59:7c:bb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Nov 11 15:00:43 2025 GMT
Not After : Nov 12 15:00:43 2025 GMT
Subject: CN=05ed0cc6d69d273bdafa05aba2d2efa97e3ffc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:a4:ab:fe:77:01:94:6c:df:e9:81:4d:bd:
85:53:fb:2d:60:d6:1f:5d:40:c8:13:3f:82:63:cb:
b1:4f:4d:b3:b9:cb:0f:bb:1b:9f:ec:16:f5:c4:b0:
19:a2:67:fb:15:43:cc:32:dd:17:a0:01:48:bf:0c:
ce:98:00:19:68:3a:bc:56:57:97:54:50:9b:1d:94:
b8:20:2e:bc:dd:ec:6e:98:bf:d0:cf:c7:0f:77:54:
43:e7:76:ea:f5:bd:81:43:a5:91:cd:11:6f:1a:6e:
df:7e:a8:46:d6:f3:dc:aa:1b:b7:5b:30:34:eb:80:
ff:ec:64:f8:dc:ab:4b:a9:27:b8:e0:c3:44:64:2d:
c3:31:1b:9f:22:9b:8d:6e:27:d5:ab:58:8e:4e:94:
e0:6b:fe:f6:bf:79:00:3e:f6:83:3d:71:e9:2c:68:
22:2f:db:a4:51:7c:6c:ac:3f:ab:cd:3f:87:dd:43:
2a:5f:98:01:a3:55:94:29:21:08:97:6d:8c:dd:4e:
f8:af:b9:73:ea:50:44:cc:d2:b2:eb:0f:b4:19:13:
66:df:6b:a1:eb:93:fa:47:87:80:03:77:62:cd:4a:
b5:91:50:90:ae:11:60:8e:90:b2:f1:53:42:8e:9f:
50:48:b4:52:10:f8:05:f2:48:67:0b:b5:7e:f1:3c:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:ED:0C:C6:D6:9D:27:3B:DA:FA:05:AB:A2:D2:EF:A9:7E:3F:FC:77
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:49:3f:93:1b:a3:a4:ba:c4:3c:31:a2:1e:9f:80:17:0b:02:
1f:13:ec:30:ea:70:c0:ec:47:88:02:ff:97:98:22:2b:9f:f9:
e3:db:54:24:ae:29:50:e6:97:06:ad:99:5b:19:90:3d:75:db:
9b:65:47:82:92:d1:71:dc:fa:e5:6b:fb:ed:2b:e8:b5:eb:f4:
38:a2:3f:48:00:c2:98:d3:ab:ec:c5:65:aa:de:f6:ea:c6:13:
af:59:16:1d:c9:80:55:67:34:90:e0:3c:10:a3:6a:02:e2:f4:
03:fd:ec:3e:91:10:9d:bb:e1:e7:99:0c:d9:5f:44:73:fb:74:
0c:71:bc:cb:ff:94:ba:36:e1:a6:de:01:e6:c0:97:c3:14:ab:
08:45:e2:ce:02:b3:53:a0:17:8c:96:2e:2a:a3:be:2f:99:98:
28:93:6f:2d:b5:06:b1:28:4a:59:ee:8f:c9:a2:44:90:6f:38:
74:82:cc:b3:a2:54:52:89:14:27:6a:23:c1:4b:97:81:34:84:
2d:eb:f5:ba:ec:57:92:fc:b3:8d:3c:e0:29:5c:7a:1d:57:9a:
69:7e:12:ff:60:0b:4e:03:ec:38:ea:4f:95:4a:a8:97:d5:2c:
38:cc:f5:61:07:a0:32:ac:f3:53:9b:3d:1d:bb:38:c3:88:fa:
fe:52:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:32 2025 by rpki-client