Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: XbAhoPc6vgbs/FzbSlvtB9RwnM+rx5r6dp47kf5P3O4=
Subject key identifier: 2E:01:D6:40:DD:AF:46:FB:D4:2B:65:A8:B5:A3:15:D5:8E:64:B3:80
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 019A0CA6BA6A584154729C9230E9076AFBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 16EA
Signing time: Wed 22 Oct 2025 16:00:44 +0000
Manifest this update: Wed 22 Oct 2025 16:00:44 +0000
Manifest next update: Thu 23 Oct 2025 16:00:44 +0000
Files and hashes: 1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: mR6XJu1koP+wDsi0jcZZjkYc8Ohd7V/AtEvf++3kJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:a6:ba:6a:58:41:54:72:9c:92:30:e9:07:6a:fb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Oct 22 16:00:44 2025 GMT
Not After : Oct 23 16:00:44 2025 GMT
Subject: CN=2e01d640ddaf46fbd42b65a8b5a315d58e64b380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:17:e3:4b:2f:59:97:b7:df:df:33:72:74:
a9:25:32:66:a7:2c:aa:3d:1c:fa:38:a0:86:6d:8b:
16:c3:ad:fe:f8:98:80:61:f4:e7:e6:5d:f7:60:6d:
f3:3e:eb:23:ec:5f:0d:aa:fa:fe:19:f6:1d:cf:fa:
55:a0:f0:fa:6d:ad:18:26:2b:2f:aa:c6:e6:7a:18:
a8:e9:85:40:8f:63:fd:96:43:d0:4d:e1:a3:f5:b5:
a4:f5:71:cf:4b:5a:84:a3:d5:d3:ad:48:db:61:d5:
26:d2:d3:e6:87:41:36:a2:d3:01:66:1e:e7:5c:a2:
78:13:2b:5a:00:35:c2:57:09:51:d2:af:65:a3:e9:
f6:4c:3a:a0:d7:5c:1e:64:07:21:f6:cb:93:e6:9e:
f1:87:26:e1:27:18:28:1e:c4:d8:80:65:52:e4:18:
15:4d:1c:e1:31:f9:4f:c2:83:eb:21:e3:56:fb:fa:
49:76:92:9b:54:ff:07:0a:d3:e3:f0:51:c5:0b:59:
89:dc:fe:57:45:5c:e8:00:04:cb:af:1b:2b:68:b9:
a9:ad:9f:42:25:96:d4:18:fb:1b:c7:12:38:8e:7b:
2d:b3:80:fe:c1:d2:fc:46:3d:97:44:40:f8:f5:e6:
06:7a:d5:67:fd:ae:fe:04:fb:71:c2:a5:22:03:c4:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:D6:40:DD:AF:46:FB:D4:2B:65:A8:B5:A3:15:D5:8E:64:B3:80
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:98:35:5e:6d:bc:be:4e:26:62:da:b7:c5:d2:62:3f:f8:fe:
2a:fc:0b:08:e6:fe:95:7d:2f:3a:65:52:27:0b:76:c0:2a:cc:
ed:a2:39:b5:67:4f:7d:91:63:aa:8c:f7:8c:4b:a8:f5:f7:6b:
48:f7:fb:6b:5e:9b:59:99:34:4f:66:96:35:c4:57:44:2b:19:
e1:47:9e:1a:2c:90:9f:ef:32:83:5d:ed:52:46:f2:10:f7:da:
11:6c:bd:f2:f5:ea:ff:61:3e:ac:2a:78:0e:47:f3:f6:34:fe:
81:10:05:56:ac:3e:0e:c7:b2:df:97:aa:93:46:c3:f0:39:c1:
45:5e:10:49:da:c5:1f:62:7c:a7:0e:9e:70:d8:54:5d:e8:ca:
64:2e:c5:58:fb:ec:e0:5b:03:90:34:4f:c3:92:4b:0e:84:34:
31:72:9a:c6:e7:1a:19:dd:11:62:f4:9f:d5:7d:5d:be:94:3e:
0b:a2:90:3c:5e:68:f1:3c:bf:5a:a3:6e:aa:b3:f6:2b:7f:3e:
da:67:b6:48:0f:2c:d0:df:82:95:7a:23:a3:e6:90:b6:a6:28:
8b:44:12:f0:18:25:03:01:4f:cd:fb:9d:d2:8a:6e:db:c8:73:
d3:9e:5c:52:9f:29:c9:c5:a9:68:d1:76:f9:c6:e8:a1:bc:38:
a3:8c:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:05:42 2025 by rpki-client