Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: lQCGHCedYWQxjQEQLEK9qGtldc8twfNUOocYLRTeVLc=
Subject key identifier: 18:65:A9:B7:28:3D:68:46:F2:0C:51:67:42:93:0D:AA:70:0A:FF:2B
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 01974A0D008DE9ADE3B8ABD4C602EE9E0941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 11:00:55 +0000
Manifest this update: Sat 07 Jun 2025 11:00:55 +0000
Manifest next update: Sun 08 Jun 2025 11:00:55 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: QMBQTFtEBAIKSPvnjPlE5jWjRvDF1iXNwHTFKn6km3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:00:8d:e9:ad:e3:b8:ab:d4:c6:02:ee:9e:09:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Jun 7 11:00:55 2025 GMT
Not After : Jun 8 11:00:55 2025 GMT
Subject: CN=1865a9b7283d6846f20c516742930daa700aff2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:d4:34:2b:12:05:08:ad:9d:6c:5e:4e:b5:
f2:dd:55:73:3c:5a:b1:db:3b:95:b8:99:92:53:ce:
af:26:e0:52:76:c4:02:6f:2f:21:1d:cf:81:a7:9c:
b0:e3:90:31:b1:db:ed:19:33:3f:7e:71:1e:f3:77:
30:7f:6a:82:43:3c:50:7f:b1:1e:c4:5c:59:70:ec:
e7:79:87:a0:cb:f1:a5:60:ea:94:d7:00:60:4a:82:
ab:a6:8e:c9:5a:c4:ad:75:6d:b3:94:4e:f3:f5:db:
d9:c3:62:5a:83:f1:7d:d3:f4:9c:19:c7:57:5a:3f:
2c:eb:ef:68:c6:2b:96:cb:84:a9:0a:b4:d3:ab:c7:
9e:a0:77:f7:20:d2:99:47:65:05:c8:95:60:f5:db:
a0:9f:9e:71:d7:cf:c1:aa:84:84:0c:08:0e:7e:0f:
c4:f6:51:49:6d:7e:65:20:66:e8:1c:58:ed:c1:87:
dc:96:cd:73:d6:cc:ec:c2:c2:41:30:a8:03:28:4a:
61:1f:7a:12:24:92:4b:6d:7d:02:47:7a:ba:20:76:
ab:07:e6:e6:56:ed:21:5b:c8:92:ac:29:6b:db:63:
98:64:e0:50:fe:b8:80:2f:9b:d7:b1:1c:44:ec:08:
10:69:d9:3c:61:ca:78:3a:04:9b:e8:22:b9:87:68:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:A9:B7:28:3D:68:46:F2:0C:51:67:42:93:0D:AA:70:0A:FF:2B
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:97:40:d0:ff:46:67:0a:a9:55:66:bb:0a:8f:6a:cc:5e:4d:
88:f9:62:39:91:1c:83:79:c5:b5:f8:79:47:e6:a0:19:7e:09:
35:ac:cf:65:2a:55:59:88:ea:a3:eb:47:73:2d:aa:06:19:24:
63:c5:8f:51:6e:49:27:32:a3:4c:28:b3:95:10:f3:dc:f4:6a:
12:b3:56:30:10:d4:1f:a9:de:98:2a:08:f6:61:45:26:9c:71:
10:18:69:08:2d:7f:13:5c:25:23:9f:53:70:b8:57:af:28:d3:
4e:db:ad:62:9f:aa:10:4a:f2:8a:f0:b4:22:c4:59:db:17:3e:
99:d3:e5:91:5d:cc:fa:0b:25:ca:87:03:01:2b:88:46:d1:33:
73:90:ea:b5:96:14:ad:1c:cc:bc:d5:37:68:fa:20:f3:a9:16:
96:ac:c7:09:88:84:29:66:2a:ba:68:e7:92:8b:cd:4f:34:ef:
3a:4c:12:00:e2:75:a4:72:45:22:58:3a:e1:ae:8a:12:1b:d5:
7a:89:d9:fc:5e:91:67:d8:9f:c3:69:0c:11:b9:be:43:bc:7c:
1b:a1:9c:6c:25:a3:62:09:e9:4a:73:fb:a6:4d:c1:f2:e1:2a:
21:ab:d7:ee:6b:05:91:0e:05:bf:61:ac:eb:67:de:33:cf:1f:
4b:69:76:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDQCN6a3juKvUxgLunglBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGRkYWE3NDk0ZDY5YmExY2FjYjQ1N2VmOTFiNmRjZDIy
ZThkZDkwHhcNMjUwNjA3MTEwMDU1WhcNMjUwNjA4MTEwMDU1WjAzMTEwLwYDVQQD
EygxODY1YTliNzI4M2Q2ODQ2ZjIwYzUxNjc0MjkzMGRhYTcwMGFmZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc3UNCsSBQitnWxeTrXy3VVzPFqx
2zuVuJmSU86vJuBSdsQCby8hHc+Bp5yw45AxsdvtGTM/fnEe83cwf2qCQzxQf7Ee
xFxZcOzneYegy/GlYOqU1wBgSoKrpo7JWsStdW2zlE7z9dvZw2Jag/F90/ScGcdX
Wj8s6+9oxiuWy4SpCrTTq8eeoHf3INKZR2UFyJVg9dugn55x18/BqoSEDAgOfg/E
9lFJbX5lIGboHFjtwYfcls1z1szswsJBMKgDKEphH3oSJJJLbX0CR3q6IHarB+bm
Vu0hW8iSrClr22OYZOBQ/riAL5vXsRxE7AgQadk8Ycp4OgSb6CK5h2hwNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhlqbcoPWhG8gxRZ0KTDapwCv8rMB8GA1UdIwQY
MBaAFKMN2qdJTWm6HKy0V++RttzSLo3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTIt
NjU0NGEyYjk5ODE3LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTItNjU0NGEyYjk5ODE3
LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpdA0P9G
ZwqpVWa7Co9qzF5NiPliOZEcg3nFtfh5R+agGX4JNazPZSpVWYjqo+tHcy2qBhkk
Y8WPUW5JJzKjTCizlRDz3PRqErNWMBDUH6nemCoI9mFFJpxxEBhpCC1/E1wlI59T
cLhXryjTTtutYp+qEEryivC0IsRZ2xc+mdPlkV3M+gslyocDASuIRtEzc5DqtZYU
rRzMvNU3aPog86kWlqzHCYiEKWYqumjnkovNTzTvOkwSAOJ1pHJFIlg64a6KEhvV
eonZ/F6RZ9ifw2kMEbm+Q7x8G6GcbCWjYgnpSnP7pk3B8uEqIavX7msFkQ4Fv2Gs
62feM88fS2l23w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:57:14 2025 by rpki-client