Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File: OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier: sdlV0ezT5fvoER55eHPDM1zvzGsE3gILkehUmbk7VvA=
Subject key identifier: E4:11:A5:77:DD:AB:A3:10:DD:A7:87:12:94:F4:C3:08:0B:44:88:4C
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer: /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial: 0197684E6A8DE9BCEEFBAE5FD93F71613FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 08:00:58 +0000
Manifest this update: Fri 13 Jun 2025 08:00:58 +0000
Manifest next update: Sat 14 Jun 2025 08:00:58 +0000
Files and hashes: 1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: kX50dMCEJrSN+31EAHit5YK0v3c7IKrvZvb5wC0P5E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:6a:8d:e9:bc:ee:fb:ae:5f:d9:3f:71:61:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Validity
Not Before: Jun 13 08:00:58 2025 GMT
Not After : Jun 14 08:00:58 2025 GMT
Subject: CN=e411a577ddaba310dda7871294f4c3080b44884c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:2e:12:84:32:a0:03:34:37:37:b2:2d:d3:
ca:ef:7a:ed:60:15:41:4b:91:0e:5a:92:48:60:70:
5b:f6:09:1e:1b:d3:ab:8f:2a:1a:2b:57:48:cc:74:
ec:a7:a7:d2:b6:48:60:88:3f:39:72:b3:f2:25:38:
57:e6:8f:c2:0a:b4:45:4e:aa:3c:9b:06:74:97:bf:
f4:1f:fb:ce:2a:28:8b:0f:47:4e:98:35:f3:a0:df:
99:8e:15:a3:fb:6c:23:63:7e:f5:1b:8c:d8:1c:9a:
93:d3:87:89:48:98:16:96:b6:ee:91:bd:ae:12:9e:
5d:95:34:d2:9e:bf:df:04:25:f6:97:a0:99:8f:22:
3b:9b:bb:26:18:01:bc:ca:61:8e:a5:2c:cb:76:3f:
0a:f1:15:b3:f8:d7:7f:e0:bb:3d:1f:36:c1:d6:bf:
18:de:f9:e3:32:b6:bd:2a:5e:08:ab:60:3b:93:db:
fb:71:64:12:5a:76:c6:89:64:c7:74:17:31:8e:78:
e3:d4:75:35:69:da:ad:a4:d6:8b:7d:b1:52:ca:28:
7a:4a:51:b9:9f:12:86:a9:14:24:fd:91:9a:ce:06:
47:ef:ed:5b:15:72:16:97:4f:8c:86:bd:aa:5b:63:
9d:53:58:e0:a6:7b:2c:86:46:94:20:c2:5e:d2:3e:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:11:A5:77:DD:AB:A3:10:DD:A7:87:12:94:F4:C3:08:0B:44:88:4C
X509v3 Authority Key Identifier:
keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b0:cb:7f:bf:b4:7e:1c:b8:c4:68:15:c8:34:c0:f7:ea:f4:
2f:01:43:5b:31:20:12:43:5f:62:69:59:78:2e:ca:39:ec:c2:
66:10:05:d8:8b:48:09:3d:b7:82:de:53:d0:97:91:ed:8c:e0:
43:17:50:cc:84:fe:a3:23:83:ca:75:48:e0:cd:c6:88:01:fb:
4e:9c:9c:02:4c:a3:c9:03:66:49:86:ac:c2:5d:17:de:16:b3:
4d:48:9f:cf:bb:7d:5c:46:59:d2:a4:13:38:91:f3:e6:71:99:
d1:24:cf:ab:ba:7e:1c:e0:10:af:f5:f3:2b:59:6b:a3:42:a1:
2f:cf:dc:ab:a9:c6:1a:98:c8:ee:e9:21:9f:53:e8:5b:f8:fd:
91:8a:cc:23:f0:fc:06:ce:45:7d:bf:10:d8:a8:05:a2:a9:6f:
17:a0:99:d5:08:d6:42:ae:56:50:ae:ad:d3:37:36:fe:0c:e1:
aa:cf:f7:39:3e:a7:32:b4:bc:07:3e:1b:d6:fd:c2:9d:e9:76:
1c:10:aa:39:a4:a6:83:cc:ec:51:e5:d0:c9:a5:8d:93:92:53:
73:0d:85:38:de:b6:1a:75:4b:40:56:89:b7:9e:1a:bd:37:18:
43:51:5c:8b:09:2c:4b:68:fb:d3:0e:12:99:02:0e:ae:79:89:
54:96:30:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:53 2025 by rpki-client