Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: qZYJE6jXe45HmNb6L7LiTvGPrTg4Hcysf5zuJHx/FFg=
Subject key identifier: 30:FF:92:4E:A5:E4:69:77:FA:A6:B3:FF:C8:3A:B2:73:CE:C7:13:5E
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019A29D55506E3E8031E84038785CBF40010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 08:00:38 +0000
Manifest this update: Tue 28 Oct 2025 08:00:38 +0000
Manifest next update: Wed 29 Oct 2025 08:00:38 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: In9aOEni5xnyURr+D02GkNhcWWkCjqFQTTWo994Set4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:55:06:e3:e8:03:1e:84:03:87:85:cb:f4:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Oct 28 08:00:38 2025 GMT
Not After : Oct 29 08:00:38 2025 GMT
Subject: CN=30ff924ea5e46977faa6b3ffc83ab273cec7135e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:f9:9d:0a:d1:a5:d9:05:bc:d4:dc:74:df:
65:02:cf:da:d4:b6:1a:11:09:c0:e6:70:51:eb:80:
a7:ee:7d:59:ca:e0:48:54:61:5b:c2:12:60:92:12:
8a:bc:2a:37:e5:ca:0f:73:5a:b5:1b:86:77:25:5f:
01:37:7c:a0:39:01:0d:e8:dd:8c:a2:62:81:a1:04:
b1:66:ce:60:c1:3d:4c:b8:a7:96:7e:cf:e7:95:43:
83:88:a7:45:5b:77:49:67:65:6e:99:4d:b7:7a:7b:
82:1b:85:39:3c:5c:1d:b4:d5:b5:62:5d:5e:78:ba:
57:72:9e:1a:13:18:0c:df:24:de:ff:ff:2c:7a:ef:
ab:0f:3d:6b:36:a2:03:d6:05:18:e4:f6:7e:f3:f8:
1e:fa:a4:99:08:a7:9e:4e:9e:de:3a:e5:30:de:cf:
62:c6:9a:48:1a:cf:8b:98:13:8d:29:d2:e8:46:c6:
0c:07:87:31:1d:20:ab:92:e8:95:49:a1:09:9d:3f:
0e:62:0b:a3:09:bd:cd:d7:37:6e:65:c5:2d:ad:91:
c3:6d:ce:55:50:53:91:5a:43:62:5c:75:fb:53:2d:
b3:57:23:db:5f:a5:e1:81:6e:d7:40:5d:e7:bd:6b:
5f:4c:90:f8:dc:7f:42:4d:f2:de:7d:88:80:fc:22:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FF:92:4E:A5:E4:69:77:FA:A6:B3:FF:C8:3A:B2:73:CE:C7:13:5E
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1e:03:e1:63:a8:10:12:40:cb:31:a0:3b:3d:2b:05:b8:ca:
84:74:ab:c6:5b:58:3b:13:ad:4b:c7:df:08:80:fc:5e:cc:43:
91:cc:c8:d7:f0:4f:17:b7:8f:2a:a2:92:28:04:c2:56:49:2e:
dd:10:ab:e1:4b:86:31:b0:33:94:34:4b:02:29:f8:5d:6f:73:
8e:3e:ed:fa:c4:e2:2d:9e:af:97:88:42:75:59:d0:7b:5d:93:
f8:39:bb:9a:78:05:71:56:8c:54:e5:61:e3:35:9f:43:8d:85:
49:24:91:31:9f:0f:d2:f0:5e:fb:8a:61:43:2f:d9:b6:82:9f:
48:49:74:63:56:d2:48:13:cc:cc:3c:56:c8:08:3f:b5:5c:0c:
db:da:c8:c8:c8:21:33:b1:7d:48:50:a0:46:b6:df:e2:b9:8e:
78:ae:2e:3f:11:2b:c2:f6:20:74:66:38:b7:59:f6:69:1f:65:
dd:09:37:dd:ae:36:f9:7e:bf:0c:22:36:ea:f8:db:d9:30:68:
f0:df:f3:53:b2:c6:35:a1:72:24:1a:b6:42:93:99:85:ca:a9:
c3:7a:ba:bf:db:3e:48:16:7d:1f:2c:8c:29:57:b9:60:0b:4f:
f7:a9:7c:b5:8c:1b:e3:d3:e0:11:cc:34:fa:b6:21:3f:6a:aa:
74:9d:40:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:37:52 2025 by rpki-client