
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: +AuFh9SOhV/KcBQ/6t8z6XLlUjv6BcA+Da7LCUu89Ro=
Subject key identifier: 35:D3:DA:AA:33:A0:59:FA:5E:0B:49:CB:27:99:8A:46:62:51:22:F7
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 01988166F12ED0769EF089C0C13049923971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 15B0
Signing time: Wed 06 Aug 2025 22:01:03 +0000
Manifest this update: Wed 06 Aug 2025 22:01:03 +0000
Manifest next update: Thu 07 Aug 2025 22:01:03 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: nTsAv4mJKljDiWaRfjMEXxzcwQo6ZcuP5XMFohSTSD4=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:f1:2e:d0:76:9e:f0:89:c0:c1:30:49:92:39:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Aug 6 22:01:03 2025 GMT
Not After : Aug 7 22:01:03 2025 GMT
Subject: CN=35d3daaa33a059fa5e0b49cb27998a46625122f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:71:89:a6:39:a0:15:b8:1d:f4:6f:fe:97:
96:f9:04:60:ab:05:8f:e7:59:74:73:ee:b5:a0:3d:
58:6d:ad:84:91:39:fa:2c:23:f9:57:79:56:3c:ef:
7c:b9:f2:a7:30:43:07:20:0d:51:da:21:b5:61:3d:
07:fa:a3:c9:b5:ce:5a:06:8f:75:98:e4:7b:30:1e:
8c:0f:28:8d:ab:18:ae:e7:03:f4:91:0e:84:19:36:
8f:77:26:a0:b1:57:f6:24:0d:2f:0c:84:26:99:1c:
9a:ec:9f:5e:4e:d1:e0:98:22:c5:02:f6:15:f1:fc:
4e:be:a3:63:5b:d4:bd:e3:77:fa:80:de:dc:f2:ab:
6e:4e:be:1f:dc:8c:fa:31:4f:b4:22:56:c4:d2:94:
fa:b7:55:0e:7e:a9:59:ac:00:26:6e:d4:c0:60:a2:
22:a9:33:d9:51:d7:19:33:61:9c:fb:e4:35:3f:e5:
ec:52:02:58:50:8a:d7:05:cf:0e:f9:f6:7c:fb:e5:
c0:41:5e:fd:6d:2a:01:4a:5c:af:dc:33:fd:b5:76:
1c:34:e0:8a:51:34:6c:23:96:02:5b:f1:73:59:aa:
eb:c1:8e:47:8f:b0:b5:ff:0c:83:9a:df:0a:6e:12:
9b:6c:21:6b:78:e5:db:f9:1e:4b:fd:6c:dd:15:3e:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:DA:AA:33:A0:59:FA:5E:0B:49:CB:27:99:8A:46:62:51:22:F7
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:53:f1:39:d6:ee:29:a0:9c:f6:cb:db:57:e8:b9:0b:ab:47:
30:54:ee:68:9a:95:42:bb:e7:a0:b5:40:9c:66:ff:db:19:2c:
b8:f7:81:5d:85:1e:85:a0:c8:f2:8f:7f:10:e1:ff:2c:14:69:
f0:29:c8:62:e9:2d:02:da:8c:5e:7d:2a:3b:ce:c0:56:64:00:
1e:f2:5d:c5:cc:77:df:16:7a:6c:ae:ce:91:60:94:68:73:47:
d5:72:1b:12:a0:95:fd:df:5e:c2:92:ee:64:88:10:cb:3d:18:
88:b4:f9:c2:3e:7b:b9:80:7a:89:68:29:a2:2d:72:0e:07:ef:
7a:18:30:42:45:39:f7:c4:6a:57:2f:c7:0f:f0:b7:84:39:dd:
78:af:c7:ad:93:2b:23:d9:d5:bd:a7:51:25:0f:ad:ff:aa:25:
40:d5:60:e5:a7:ec:ea:b0:df:6b:6f:64:f9:26:39:d3:e7:5d:
7e:b6:1d:56:13:95:7b:90:48:8b:d2:aa:49:4a:3f:fc:9f:54:
91:10:27:2e:67:cb:cc:d9:6b:eb:8d:93:76:a4:39:69:10:21:
6f:41:62:e9:34:f6:31:67:60:20:b2:d5:d2:49:fa:55:9f:af:
7d:13:6a:c8:64:35:86:8e:97:c6:d5:7a:94:30:60:38:9c:ba:
ba:ee:4b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:48 2025 by rpki-client