Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File: OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier: 45PseL13f6BdrCCc1IiZ/FfMS3X8ROWHApWQn48D0lQ=
Subject key identifier: AC:1F:C9:15:FF:27:B3:0A:07:FC:C9:DF:0C:C2:D5:A4:15:D2:C2:81
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer: /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial: 019A4FD07D9BFDDBC6F4F57DDD80E226FE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 17:00:54 +0000
Manifest this update: Tue 04 Nov 2025 17:00:54 +0000
Manifest next update: Wed 05 Nov 2025 17:00:54 +0000
Files and hashes: 1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: BVSopwtNxDy0YUfgParIMfezW/fYU9nEFvbMIyIMJ7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:7d:9b:fd:db:c6:f4:f5:7d:dd:80:e2:26:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Validity
Not Before: Nov 4 17:00:54 2025 GMT
Not After : Nov 5 17:00:54 2025 GMT
Subject: CN=ac1fc915ff27b30a07fcc9df0cc2d5a415d2c281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:57:95:86:4f:be:38:c2:13:75:98:44:67:
13:46:2e:43:28:f3:e2:79:dd:f0:39:d2:5f:b3:72:
5e:87:c5:c0:9c:79:c3:d8:5e:2a:ed:0b:e3:09:31:
b1:9c:5f:21:18:16:57:23:21:7e:fc:27:2c:4e:c9:
e8:b1:e2:99:8a:36:ab:1d:85:dd:ad:d8:dd:99:71:
dd:3d:3f:c7:f3:8d:ef:27:be:9b:fa:4f:2b:f1:e2:
b6:08:be:38:f3:d7:e1:cf:4f:86:2d:1b:a2:41:63:
6e:dd:45:ec:70:79:85:da:42:41:76:6f:15:3b:fa:
5f:b8:55:8c:86:a0:42:11:93:32:0a:0a:29:85:bc:
24:68:9d:11:f8:eb:47:26:f5:51:44:56:8f:39:98:
a3:f8:cb:08:cb:a7:f3:11:4f:4e:32:98:c3:f0:d4:
b8:67:58:2a:d0:bb:40:d9:e4:a1:42:11:d9:e2:81:
16:d1:37:d7:ba:66:28:ac:53:dd:78:a6:22:96:50:
5d:ce:1f:1f:2f:71:4a:ca:2c:14:39:9d:40:b5:61:
9c:b2:0e:f3:f2:f8:de:50:36:79:12:18:d6:7b:40:
45:e0:67:d1:f4:1f:8b:9b:33:ac:31:ae:87:8b:33:
66:4d:6a:52:5b:71:99:54:e2:84:80:02:bd:ed:16:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:C9:15:FF:27:B3:0A:07:FC:C9:DF:0C:C2:D5:A4:15:D2:C2:81
X509v3 Authority Key Identifier:
keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f0:20:8f:18:1f:59:08:1f:20:46:a4:8a:15:11:50:c2:5b:
e5:75:36:43:9a:aa:e6:c4:cb:0c:9f:ec:a9:d7:85:a8:ee:97:
46:2d:df:16:7c:cf:1a:81:2f:fb:6e:36:d8:2c:2d:76:57:43:
cb:67:03:2b:48:35:19:1e:30:be:a7:c4:b2:f0:bc:ca:ec:95:
79:1b:37:8b:4c:43:0f:f3:a8:4d:9d:39:52:ed:d7:9d:72:0d:
85:8a:cb:ad:40:79:bd:6d:39:78:d8:a6:75:70:d0:b9:65:8f:
cd:6e:ea:e1:f1:38:87:39:7a:cd:77:64:c1:6a:f0:49:58:6b:
3c:51:73:e0:cf:ad:02:88:af:51:c2:24:99:46:32:a0:99:3b:
51:0e:62:6b:35:ac:33:9f:0f:15:6d:18:b0:82:81:e6:65:c2:
c6:87:a0:38:88:27:ed:dd:e1:71:05:20:b5:f1:cb:65:51:f3:
15:4e:12:da:2e:ab:2a:55:33:fc:89:ce:e9:63:ac:30:10:1c:
a5:87:1c:7e:b4:96:ee:11:32:78:1f:83:e9:6a:b3:76:9f:51:
44:76:0f:33:45:c0:59:2a:d6:23:62:a1:10:7a:d6:86:97:8a:
a2:45:09:c4:d7:ac:52:ef:a2:37:75:ae:a8:7b:2e:8b:d3:61:
3f:03:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:14 2025 by rpki-client