Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: 2MP4Wpv/pVFAp6EPMyYPqUVVlTZZd8rOjP2sDdm7pmI=
Subject key identifier: 44:9D:21:59:61:A6:ED:65:1F:EE:E0:D0:7B:8D:26:3D:40:96:84:E0
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 01975F13DA3DC82621AB1C56B602499269CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 13:00:25 +0000
Manifest this update: Wed 11 Jun 2025 13:00:25 +0000
Manifest next update: Thu 12 Jun 2025 13:00:25 +0000
Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: lmjBCpG5di6FmswZlMolc1iRcCg7usUCqKZnGOHqXrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:13:da:3d:c8:26:21:ab:1c:56:b6:02:49:92:69:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: Jun 11 13:00:25 2025 GMT
Not After : Jun 12 13:00:25 2025 GMT
Subject: CN=449d215961a6ed651feee0d07b8d263d409684e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:d4:8b:9e:53:e3:79:f1:1b:b3:5d:a6:6e:
0a:6c:cd:87:e7:7e:d2:aa:99:13:47:0f:28:b6:9f:
9d:43:f3:6e:d3:16:49:1b:58:bd:b7:b1:00:d6:d7:
c6:73:38:34:f9:33:32:fc:4c:d8:7a:ec:ab:2a:9c:
14:b2:8e:a8:b9:00:6d:97:45:cf:f9:a3:f0:99:c2:
e5:2d:d5:47:22:8b:37:c8:6c:a6:87:09:3d:cd:f5:
ab:ad:48:ce:dc:f3:a1:25:eb:fa:2e:4d:16:76:38:
f1:4a:ae:cf:b1:7e:e6:bd:7f:cf:1d:4e:59:03:33:
29:29:4f:c6:bd:9c:7d:92:51:21:5d:85:6c:92:e1:
b9:c3:b7:37:ca:92:7b:31:1c:e9:c3:1d:90:70:42:
2d:41:7e:22:b8:0b:97:9a:20:04:37:74:b8:45:f6:
ba:20:6d:5d:ee:b3:36:c7:0c:a2:fa:eb:07:22:32:
03:d3:0c:97:b8:a3:37:85:0b:be:8a:0c:cc:db:c8:
71:a1:03:21:be:7c:4e:ae:61:a2:f1:08:84:ca:c7:
e2:21:08:b3:22:1b:65:fc:b3:13:fe:2f:b2:82:e5:
00:18:82:9d:1b:a0:de:f4:bf:98:23:74:4d:74:d3:
d9:9d:94:c5:bb:9c:97:3a:57:e4:62:5c:0f:b7:25:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9D:21:59:61:A6:ED:65:1F:EE:E0:D0:7B:8D:26:3D:40:96:84:E0
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:30:83:76:ac:1b:1b:62:84:36:99:dd:73:e1:6c:96:2f:f7:
69:8b:40:1f:31:82:aa:42:22:45:b0:69:6c:64:ef:02:d3:88:
ac:de:8c:61:dd:19:36:e1:a8:ee:ac:5e:6f:54:4d:c1:ff:5f:
31:c3:3b:76:74:ef:2e:5d:a7:0e:4b:cc:97:af:5d:94:ba:b4:
b8:58:38:71:3d:a9:68:93:1d:6f:d8:d8:de:1b:1c:ef:3b:32:
4e:d4:5d:fe:bf:46:47:eb:de:b7:3c:d4:68:a3:56:63:74:44:
21:a7:da:17:99:bc:8a:ff:26:81:36:e7:e7:6d:8a:88:05:87:
fe:3e:e9:0a:33:ab:2d:21:c3:91:59:f2:17:9b:7f:53:03:3d:
c7:64:c6:f1:f0:1e:33:db:45:23:d8:4a:06:33:08:7d:3e:fa:
4a:2d:30:71:a1:15:12:fc:c6:df:49:a9:e4:30:b0:69:9b:ed:
a2:6e:c5:4d:43:b3:10:72:91:b7:3a:93:39:c4:a7:ce:94:c0:
ca:32:ae:a7:83:ec:96:d9:fa:83:f9:9a:96:ad:e7:a0:d7:f3:
64:b4:0c:56:6e:55:b0:bd:2f:0a:6f:1f:f2:55:ef:e1:a6:9c:
be:5a:d4:e6:22:29:d1:f9:90:27:96:83:cd:7b:70:52:a0:45:
61:5b:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:52:34 2025 by rpki-client