Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: moXmSgr11T7+rMJ4rAFBzbW8D2EDkwMlXOzGe642X14=
Subject key identifier: DF:12:48:47:F5:C9:3E:F5:A4:9D:56:B3:DD:C4:C1:17:7D:3E:19:34
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 019749D620180001D3D941D1173308BFA0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:00:59 +0000
Manifest this update: Sat 07 Jun 2025 10:00:59 +0000
Manifest next update: Sun 08 Jun 2025 10:00:59 +0000
Files and hashes: 1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: fN1xdTyQKnltE6G+nzpJzJPFRpsSshx2BxxNrOhv5BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:20:18:00:01:d3:d9:41:d1:17:33:08:bf:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Jun 7 10:00:59 2025 GMT
Not After : Jun 8 10:00:59 2025 GMT
Subject: CN=df124847f5c93ef5a49d56b3ddc4c1177d3e1934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:68:58:d2:ba:7b:39:28:fa:31:dd:f6:ec:
75:84:c2:fd:23:8c:6c:52:5c:dc:b2:2f:2d:77:5c:
89:9a:9b:8a:b6:ef:22:40:1a:da:0f:d9:fa:ea:61:
ab:9c:72:7b:f7:8c:30:ab:39:df:d3:73:ca:a9:4a:
db:e9:2c:98:60:03:72:60:d2:d5:f9:56:f1:fb:d0:
34:58:77:8e:5e:f8:a7:8b:21:99:7d:d4:ad:b9:39:
f8:35:f8:e9:ce:43:4d:c6:ac:88:ba:74:6a:08:46:
00:88:e4:95:1c:a5:6b:50:ba:07:fb:7f:64:d4:97:
5a:c5:54:ca:9d:a5:e6:cc:0a:0c:5e:c8:fd:14:c2:
79:f2:d1:18:5d:c0:3f:28:04:23:88:17:12:de:2c:
f8:89:8f:6a:34:cf:c6:45:c2:11:52:9a:04:d0:00:
44:84:19:a7:92:12:04:d4:1f:47:62:9c:3e:8c:6f:
fc:63:23:a8:e1:8d:c5:9b:22:82:12:c1:89:46:32:
06:25:59:1d:77:79:c2:cd:4f:ea:35:3e:51:61:0b:
63:30:1d:fd:29:16:75:01:f3:a4:f3:24:b8:3c:68:
05:b2:2b:cc:1d:97:3b:09:a2:6b:0b:a2:10:f0:eb:
b2:f3:2b:44:0d:a1:32:c4:89:e2:33:0d:60:aa:0a:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:12:48:47:F5:C9:3E:F5:A4:9D:56:B3:DD:C4:C1:17:7D:3E:19:34
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:93:48:da:84:88:4a:36:32:b8:1c:f8:db:2a:07:b3:77:6d:
f4:b2:d4:dd:b7:7d:d3:80:45:67:f1:16:de:98:90:4a:cc:44:
cf:0c:77:1c:9e:d2:4f:28:28:a6:6e:24:db:3f:87:34:61:8b:
0c:93:c3:9d:91:5b:cb:a4:ad:1b:6c:21:cd:cf:b5:35:0a:96:
7c:5e:04:0c:87:a2:05:95:b6:4a:1b:e0:9c:2b:9f:88:ab:38:
31:8d:33:3c:a8:25:eb:6f:33:f4:65:54:00:b7:71:9a:24:c0:
f2:da:45:f6:a6:4b:70:15:5d:86:72:cd:73:b4:01:55:39:51:
74:ca:62:83:f6:13:2b:61:a4:6b:15:09:2b:db:a8:e4:e6:af:
d2:b1:ee:e1:cc:d6:4f:c9:c1:ec:29:d3:9c:e5:1b:8a:64:04:
13:ff:56:a9:c4:f2:99:82:74:51:4a:c4:b4:b8:3c:64:2b:c9:
01:82:d5:7f:28:e2:33:09:69:a7:72:0e:af:97:6d:27:1d:c2:
6e:8e:d2:bc:d6:b3:a8:be:66:8a:a4:f2:f0:77:3f:ce:24:f0:
07:f7:ad:71:fc:94:34:f5:44:32:db:d6:05:9f:36:da:ee:ff:
65:73:f7:ea:36:12:04:de:58:c9:72:19:4c:f7:02:a6:fd:e3:
23:d1:2e:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1iAYAAHT2UHRFzMIv6DwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGNkNDRlYmJlM2QwZDZhMDcyZTc1MTAzZjIzMTYwNjk5
NWY2YWIwHhcNMjUwNjA3MTAwMDU5WhcNMjUwNjA4MTAwMDU5WjAzMTEwLwYDVQQD
EyhkZjEyNDg0N2Y1YzkzZWY1YTQ5ZDU2YjNkZGM0YzExNzdkM2UxOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L5oWNK6ezko+jHd9ux1hML9I4xs
Ulzcsi8td1yJmpuKtu8iQBraD9n66mGrnHJ794wwqznf03PKqUrb6SyYYANyYNLV
+Vbx+9A0WHeOXviniyGZfdStuTn4NfjpzkNNxqyIunRqCEYAiOSVHKVrULoH+39k
1JdaxVTKnaXmzAoMXsj9FMJ58tEYXcA/KAQjiBcS3iz4iY9qNM/GRcIRUpoE0ABE
hBmnkhIE1B9HYpw+jG/8YyOo4Y3FmyKCEsGJRjIGJVkdd3nCzU/qNT5RYQtjMB39
KRZ1AfOk8yS4PGgFsivMHZc7CaJrC6IQ8Ouy8ytEDaEyxIniMw1gqgo4dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8SSEf1yT71pJ1Ws93EwRd9Phk0MB8GA1UdIwQY
MBaAFDsM1E6749DWoHLnUQPyMWBplfarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYt
ZjdkYTNiODczMmJmLzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYtZjdkYTNiODczMmJm
LzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJNI2oSI
SjYyuBz42yoHs3dt9LLU3bd904BFZ/EW3piQSsxEzwx3HJ7STygopm4k2z+HNGGL
DJPDnZFby6StG2whzc+1NQqWfF4EDIeiBZW2ShvgnCufiKs4MY0zPKgl628z9GVU
ALdxmiTA8tpF9qZLcBVdhnLNc7QBVTlRdMpig/YTK2GkaxUJK9uo5Oav0rHu4czW
T8nB7CnTnOUbimQEE/9WqcTymYJ0UUrEtLg8ZCvJAYLVfyjiMwlpp3IOr5dtJx3C
bo7SvNazqL5miqTy8Hc/ziTwB/etcfyUNPVEMtvWBZ822u7/ZXP36jYSBN5YyXIZ
TPcCpv3jI9EutQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:53 2025 by rpki-client