Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: dZHMBDZM9OGTFlmFTWQU5S1V0IrrljI+m6iomT9dg0E=
Subject key identifier: BC:3D:96:0B:F5:E0:90:08:97:9F:F9:11:42:FE:0E:A2:4D:46:75:1A
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 019764DF0B97F8AC0EC895D31964860B1FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 16:00:28 +0000
Manifest this update: Thu 12 Jun 2025 16:00:28 +0000
Manifest next update: Fri 13 Jun 2025 16:00:28 +0000
Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: xlltvZGoTQTvU2MbS4Pu2lf39uDmHWGIBcLSEc8KyE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:0b:97:f8:ac:0e:c8:95:d3:19:64:86:0b:1f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: Jun 12 16:00:28 2025 GMT
Not After : Jun 13 16:00:28 2025 GMT
Subject: CN=bc3d960bf5e09008979ff91142fe0ea24d46751a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:eb:b5:c1:38:a4:b9:2e:23:c1:b6:67:cd:
83:df:f0:32:3d:d4:d0:1f:2b:4f:00:cf:09:9d:1d:
90:e2:07:98:ef:0f:a9:a5:cd:af:50:6f:f0:61:63:
1d:35:8d:13:a4:5b:8d:21:1c:a6:ad:0f:94:04:6d:
bc:83:0f:84:ca:6a:ef:08:c7:a7:59:e3:ac:0a:cf:
a7:55:3c:84:aa:e6:a5:8c:81:e3:0d:a5:8e:df:12:
68:d4:9f:5c:0e:d8:fa:df:9c:78:e3:76:3f:81:78:
be:4c:d0:65:44:3e:cc:2c:3e:0c:91:dc:ae:8e:69:
82:b8:6a:21:12:ca:bb:b1:3d:fd:d2:98:ef:55:82:
0c:ac:4c:5d:ea:02:66:de:89:46:a6:f1:08:84:c9:
e2:67:71:48:1c:57:e9:e9:60:23:e2:34:8d:4f:4a:
c2:13:36:7a:d5:40:c3:97:59:6e:26:f9:6c:8c:9c:
94:1f:05:e1:52:c9:dd:80:ca:2f:c9:00:78:19:1f:
a7:dc:a4:d9:ff:92:d1:1f:19:90:d3:6e:e4:d1:4c:
03:0c:97:ed:5e:69:c6:27:29:59:dd:c1:ef:07:55:
6c:37:70:2b:e2:5a:15:13:35:8a:ac:7a:57:e5:10:
d8:14:3d:14:85:0a:d1:25:ef:88:f4:11:92:cc:67:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:96:0B:F5:E0:90:08:97:9F:F9:11:42:FE:0E:A2:4D:46:75:1A
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6a:0f:85:26:20:38:bf:32:ac:6b:96:fc:af:60:85:54:2c:
99:7b:87:c1:32:59:20:a1:c3:e3:77:6a:fb:f8:14:a7:65:d2:
d6:b6:98:c2:16:4e:d5:91:ea:64:fd:ea:fa:9e:0c:f2:f9:33:
1e:e5:d6:93:8c:fd:57:47:7f:03:eb:b9:13:6a:c6:24:7a:a4:
45:71:e9:3b:ef:1b:02:bd:80:eb:be:95:be:01:42:66:31:92:
d3:e5:5c:63:da:7a:d0:bb:b2:59:d8:e5:1a:4a:68:67:18:36:
67:1c:d0:77:3a:9e:9f:7b:b2:95:5b:44:7e:10:45:f2:ac:98:
10:12:0b:66:61:03:5b:0d:99:75:21:26:47:38:ef:6b:6f:bb:
9c:8a:f2:56:54:1c:c3:46:b6:b3:0f:83:ef:15:22:f4:35:8a:
b6:7f:84:32:36:06:8d:18:c9:fe:ad:0b:4c:10:cb:bc:84:18:
1f:ad:b1:c4:85:05:01:22:18:51:2e:e7:e3:34:ef:9c:cb:45:
69:62:7f:e7:da:4a:82:bc:a5:35:0d:63:30:31:d0:52:1b:57:
9b:8d:f7:a2:17:61:00:ef:60:81:a8:30:17:91:e7:d6:6c:01:
49:3a:e9:59:17:c0:1e:90:c3:8b:d1:68:69:6c:8c:b3:51:ca:
60:b1:1f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:09:13 2025 by rpki-client