Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: XMlcDacQMN+VGEIAKmcl8VKBAX2Oef50HSXkztDN8sw=
Subject key identifier: 73:D2:F8:C9:1A:CD:38:F9:BB:33:58:E8:4B:8A:05:25:92:E0:DD:1A
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 01975948AE4858CD9F095079DBAEE5F22A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 10:00:24 +0000
Manifest this update: Tue 10 Jun 2025 10:00:24 +0000
Manifest next update: Wed 11 Jun 2025 10:00:24 +0000
Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: 32JQiAqazSjszGEpu7bz9EqJRKlffYK7tWW4DpiFc0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:48:ae:48:58:cd:9f:09:50:79:db:ae:e5:f2:2a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: Jun 10 10:00:24 2025 GMT
Not After : Jun 11 10:00:24 2025 GMT
Subject: CN=73d2f8c91acd38f9bb3358e84b8a052592e0dd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:c9:5f:43:ec:e7:91:ae:9f:c6:01:1f:52:
7c:3b:da:8b:6e:c2:54:34:9f:fb:5b:e7:11:3e:18:
a7:d5:d0:07:38:40:62:d6:b6:4c:f5:6d:57:87:d0:
9f:7e:09:0e:af:17:65:9e:a4:b4:72:29:54:c7:30:
30:f9:9b:d3:b4:d9:fb:cf:91:a0:99:6e:44:96:60:
a0:3a:71:2d:21:7c:4d:1b:c8:4f:49:99:b8:40:b9:
7d:ff:86:f4:c6:5d:6b:53:df:55:96:8b:69:44:97:
96:79:be:81:c5:95:c8:46:14:83:fc:61:d9:78:99:
79:dc:60:ab:b9:33:92:13:eb:42:11:40:f2:05:dd:
52:a0:e6:d6:10:70:cc:c6:8e:02:63:87:ab:a7:e1:
ae:54:ee:c1:ae:d0:25:69:62:eb:86:6e:e2:57:9a:
58:69:f2:7d:02:a1:61:8b:0e:bb:2f:7c:6c:02:47:
4e:5f:12:2b:f9:b6:e2:18:8b:6e:ba:67:41:ea:bb:
95:54:bb:ec:62:9e:cd:be:1c:f3:e8:cc:6c:43:33:
0d:b6:4b:ac:1b:d2:6c:ab:bf:ea:ea:83:7b:a4:5f:
11:97:74:bc:e6:76:e5:25:a0:ed:73:99:c8:6a:e7:
28:56:81:7d:73:3a:66:6c:4d:76:ac:90:b4:2e:42:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:F8:C9:1A:CD:38:F9:BB:33:58:E8:4B:8A:05:25:92:E0:DD:1A
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8c:bf:96:c2:38:fd:9f:9e:fe:f6:95:1f:8f:9e:99:92:53:
6c:60:cf:24:c5:8d:8d:fe:05:1c:50:ba:9d:50:86:f0:6b:a6:
8b:2c:a2:6e:c3:87:0b:87:f1:dc:7a:36:41:5a:2d:11:f1:ad:
5a:14:11:81:14:f7:28:33:d6:6d:fb:0c:09:c2:0a:cb:fa:ba:
5c:f5:42:22:26:7b:57:20:5e:22:af:66:94:42:79:18:3b:34:
53:b2:69:2d:3a:9c:af:d4:f4:ee:6f:a2:3c:10:e7:4d:f5:86:
25:00:95:ce:6c:4e:92:22:f5:4b:36:22:7b:3b:94:ce:30:42:
02:8e:72:6e:a0:18:4a:f5:8f:e8:84:54:4c:92:ef:24:cb:6b:
3f:2d:99:21:98:4e:26:45:d3:e3:3b:77:e3:e1:f2:99:aa:7d:
0f:ca:5d:bb:70:65:c0:d1:15:48:d4:c3:b4:5d:94:d9:12:fc:
27:a7:bf:94:c3:85:a8:a2:1c:cb:cb:13:cf:c8:b8:d6:11:83:
d7:09:17:94:86:05:82:13:2c:31:98:d1:7f:3e:f5:24:22:91:
da:5c:5c:f2:0d:d4:ba:b8:1c:a0:3a:d8:9c:89:c4:ff:4e:03:
f6:2f:aa:f1:d2:23:7f:45:7b:e9:49:f6:85:04:9b:7a:2c:81:
42:43:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:43:13 2025 by rpki-client