Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: uC+TADNOXLSJxg2+3IW+VCdyBU668u+Re1/UO7nq5GY=
Subject key identifier: 68:EC:BA:F0:6E:F8:A7:04:95:5D:45:CD:26:19:02:33:7D:9F:6F:2B
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 01976AAAA6E7F6123BB4813CEDC3CFA747B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 19:00:58 +0000
Manifest this update: Fri 13 Jun 2025 19:00:58 +0000
Manifest next update: Sat 14 Jun 2025 19:00:58 +0000
Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: QHa95emihMQT6Eho+s8FFB+FtzPr8F9lOdrC0/cNytI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:a6:e7:f6:12:3b:b4:81:3c:ed:c3:cf:a7:47:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: Jun 13 19:00:58 2025 GMT
Not After : Jun 14 19:00:58 2025 GMT
Subject: CN=68ecbaf06ef8a704955d45cd261902337d9f6f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:91:3e:06:95:1e:f8:c9:53:18:60:43:00:
a8:9e:76:ef:14:96:f1:bb:d2:5f:10:50:c5:b2:7c:
d7:49:76:db:81:53:4d:96:33:12:78:50:c4:52:4f:
8f:1d:50:db:86:2f:8e:15:7d:fe:a1:34:a7:8a:74:
97:66:1a:d8:1d:fe:69:b0:bb:a3:7a:d8:ae:98:2e:
a7:3e:99:65:e8:d6:fc:e9:2b:b7:eb:88:5b:80:62:
7a:6f:2b:a1:58:05:7c:41:ca:8e:2a:cb:39:aa:93:
53:99:53:a5:49:85:2b:28:a8:b0:45:46:a5:16:84:
69:4d:10:f4:2a:34:a8:df:56:ea:3f:69:3b:a6:7c:
74:87:f9:d9:20:69:72:db:de:79:ea:40:62:6c:8f:
36:d9:c7:e4:63:07:b0:18:c1:3d:14:9a:e1:b3:a4:
15:6e:1e:02:af:0d:78:ab:a9:59:72:f1:22:29:dd:
ae:13:0a:5c:80:d6:c3:ba:e3:e8:82:8d:f0:a4:9e:
70:c5:92:6b:1e:0d:13:9f:c5:53:c3:f8:ca:5b:03:
6a:a0:80:f4:11:c2:42:57:a0:90:3b:aa:bb:4e:e8:
be:b9:26:fa:b1:e6:7c:72:d8:ba:e8:30:e0:db:18:
04:02:4b:4a:8a:a7:b2:a9:fe:65:51:3f:a4:f5:0a:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EC:BA:F0:6E:F8:A7:04:95:5D:45:CD:26:19:02:33:7D:9F:6F:2B
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:71:48:e5:d4:d6:ad:9e:f3:1d:9e:71:a8:2c:c3:cc:63:d7:
74:33:50:df:85:c5:4d:17:ad:97:f4:d8:7b:7f:3f:d9:c8:e5:
e9:29:d6:c7:d9:3e:2b:b7:40:48:a8:26:29:8c:93:96:c6:1f:
34:2f:2b:cd:8a:af:89:6a:27:0f:99:ff:3b:e3:5f:17:f7:65:
ab:82:29:55:c0:ff:9c:19:a8:76:91:18:8f:44:25:11:7c:c9:
7b:4f:74:6a:70:0c:ed:d5:be:14:3d:65:71:51:f9:ab:4a:92:
96:15:37:10:01:d5:d1:d2:c3:da:6e:0a:b9:6a:a9:48:dd:d8:
e6:9c:b0:a9:11:90:a7:bd:3f:96:f5:f5:a0:f6:fe:49:cf:17:
a4:4d:35:da:29:79:5e:70:b3:96:ee:de:f3:a1:51:89:ac:d8:
36:91:60:d8:6b:6e:03:60:4d:f7:a4:6e:dc:ef:5e:f2:a4:eb:
55:72:48:99:8a:2b:28:bc:2e:60:26:6d:7d:45:cf:75:30:ba:
ec:9b:33:17:25:19:48:10:a2:e3:ff:77:12:39:61:cf:2d:91:
a1:e5:4c:35:a7:da:e8:35:fc:34:2f:29:61:a4:6b:3c:25:d4:
e7:46:9b:56:0a:46:c7:2a:57:f1:d8:28:0a:48:5c:73:b7:0e:
d1:d8:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:54:12 2025 by rpki-client