Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: OykFlqSql1HFSnB6A5817jIjwu9bvKcpcAg+vFgJKGE=
Subject key identifier: F2:DA:94:E6:19:57:D1:BE:BE:0D:E4:0B:E3:83:C7:92:54:7A:E6:F4
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 01987DC0FD2B02117E7D0CE09F5FF048486F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 031A
Signing time: Wed 06 Aug 2025 05:00:56 +0000
Manifest this update: Wed 06 Aug 2025 05:00:56 +0000
Manifest next update: Thu 07 Aug 2025 05:00:56 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: 5R5pXxHcmyBVnjS1CEG+Y8a9z+B45Kwvq/k7Z3txfVQ=)
2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:fd:2b:02:11:7e:7d:0c:e0:9f:5f:f0:48:48:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Aug 6 05:00:56 2025 GMT
Not After : Aug 7 05:00:56 2025 GMT
Subject: CN=f2da94e61957d1bebe0de40be383c792547ae6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:0a:08:3c:73:c5:2f:50:23:5f:72:2e:37:
bd:5d:98:53:23:b1:5b:91:82:0c:2a:45:e0:7a:e3:
44:cb:f7:bb:1c:0d:d1:5f:be:82:dc:fc:f6:56:2a:
1a:fb:75:9e:6d:c7:82:81:dc:1b:92:c7:d8:22:1f:
47:c6:0b:cb:3f:fb:a4:1c:e5:19:f7:93:48:7b:21:
56:60:57:22:28:7f:17:83:9c:93:94:89:cf:06:16:
82:90:c0:d0:35:06:65:51:76:c7:6c:eb:90:f9:2d:
de:3e:ad:1a:b2:5d:79:5a:0a:4b:a6:43:1b:17:eb:
b9:bc:27:1e:17:c1:de:97:87:39:38:49:ec:16:87:
60:0e:ca:92:93:24:04:66:74:a4:68:a9:8a:26:1f:
23:33:7c:7f:35:41:db:d7:b0:3d:56:89:4c:20:12:
5e:d6:e3:86:ad:f0:fb:12:6a:22:87:24:2f:b1:ed:
64:9c:2f:aa:91:a2:28:6f:aa:ad:a3:6f:17:2f:a2:
7a:0b:65:c3:a8:ac:e0:2d:4c:31:9e:a8:ae:28:a8:
86:1a:92:87:37:bb:44:fa:64:5c:86:2b:cf:91:65:
e2:c4:9d:a5:fe:09:e3:87:db:cd:93:ba:44:b5:f4:
5c:36:c8:d8:cc:a0:0c:5c:11:f3:9c:96:25:c9:00:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DA:94:E6:19:57:D1:BE:BE:0D:E4:0B:E3:83:C7:92:54:7A:E6:F4
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d6:cd:7d:45:d4:06:86:0b:da:dd:b6:2f:e3:3c:5a:d0:74:
d0:0c:18:23:f6:1e:19:95:ac:60:1f:b7:c8:02:c5:70:52:df:
bf:aa:b8:de:38:31:bf:0a:78:f1:16:e1:1a:22:15:64:12:1c:
f2:bf:78:d9:7b:d7:09:e6:e9:48:b8:8f:dc:c2:d8:6a:41:f3:
7d:39:ad:20:6e:97:8f:74:27:82:79:31:09:10:96:79:90:53:
6d:34:f2:4d:11:6d:59:5b:12:50:5c:92:2f:ff:15:42:af:2e:
eb:5a:31:3c:f5:22:81:94:16:a9:d4:73:5a:3e:d7:2d:ff:c0:
b9:88:ca:d7:9e:57:a1:c4:92:ca:10:dd:5d:68:cb:9c:94:66:
7e:92:4f:5a:6d:a0:e0:21:44:60:13:bf:41:04:d4:41:a2:09:
40:ae:6b:13:38:f5:1f:f7:39:86:b1:06:a8:18:31:ef:01:ad:
53:3b:97:59:1a:d1:cc:cb:c5:27:93:55:dd:f6:42:ff:8d:0e:
84:9a:2b:05:a0:37:e5:df:29:79:45:f1:2e:2d:58:ff:4a:af:
2f:b0:3e:8c:fa:b9:ab:71:18:cb:0e:8a:d5:26:2f:87:5e:78:
31:5e:3d:bc:77:8d:9c:23:be:88:71:96:b2:73:06:12:4a:5e:
30:cd:36:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:28:46 2025 by rpki-client