Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: TkUNCCEDVLLX97dAxG6B64lVs/Fj6P02bD47f4PSEMo=
Subject key identifier: 57:E5:A4:63:1B:F6:2F:52:AA:57:AD:5F:6A:6D:24:5F:C1:A8:79:E4
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 019A4EBD5E3D15E63257E106DA14F2770472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 0683
Signing time: Tue 04 Nov 2025 12:00:24 +0000
Manifest this update: Tue 04 Nov 2025 12:00:24 +0000
Manifest next update: Wed 05 Nov 2025 12:00:24 +0000
Files and hashes: 1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: BXpch2B5hVA1bw0WnmbJRrDX1LZWjXcx7T4Uv+eULl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:5e:3d:15:e6:32:57:e1:06:da:14:f2:77:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Nov 4 12:00:24 2025 GMT
Not After : Nov 5 12:00:24 2025 GMT
Subject: CN=57e5a4631bf62f52aa57ad5f6a6d245fc1a879e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:4e:e1:86:2e:45:69:81:54:ef:74:0f:15:
a2:25:22:c1:17:f8:a7:01:7c:47:bb:a3:97:5a:d9:
0a:c6:0b:d4:1b:a9:91:9e:eb:77:45:09:e0:78:6b:
db:64:bf:56:53:8c:df:09:2a:00:65:fe:0c:3c:02:
22:45:56:23:a0:85:b6:0f:7b:de:85:39:3d:74:6e:
5f:02:ee:95:28:b7:95:36:d7:65:7e:53:e5:9e:df:
a5:25:b6:a0:8c:a2:9f:d1:d3:1f:19:bb:62:b9:5b:
68:47:11:62:d5:bb:1b:4f:15:9f:41:76:53:a1:ed:
b6:f4:01:5e:2a:3b:85:95:20:33:cd:cf:68:7d:42:
08:55:bc:a2:3b:37:ed:bb:ab:c4:a2:07:04:18:03:
02:88:7a:0c:31:c3:60:0c:7b:9e:bf:36:49:a0:49:
bf:9e:5d:92:a2:ce:92:6d:16:17:85:4e:af:3d:e8:
88:20:dd:5f:f0:23:8f:49:7c:57:98:c7:8f:51:c5:
10:ae:ca:84:a2:d7:ba:08:34:85:f1:bf:50:67:6b:
24:7a:f5:45:b0:0e:3e:9f:0c:4a:30:39:23:77:1a:
1c:ad:2b:3d:33:2f:0d:dd:d4:1e:82:00:cc:df:e6:
ad:21:c8:49:a9:2f:e8:ca:be:16:34:a9:97:f5:9e:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E5:A4:63:1B:F6:2F:52:AA:57:AD:5F:6A:6D:24:5F:C1:A8:79:E4
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5d:5d:52:d7:d3:fc:6a:19:a0:c8:47:17:47:8d:9c:4a:39:
da:6c:52:50:14:63:b5:b5:32:5b:c4:d9:87:8a:2c:e8:26:e6:
92:55:6a:96:91:00:b4:3a:87:0f:b4:d3:df:d5:25:d9:39:f3:
af:35:8f:e4:07:ed:8b:d3:42:62:a4:31:c1:df:d9:3b:e9:9e:
4e:4c:4f:8c:d2:a7:d4:fd:f6:6a:ed:16:80:76:6f:ac:ec:76:
17:33:3f:b1:2e:84:2c:94:d3:ee:a6:8f:13:22:03:8c:66:21:
10:07:dd:02:09:30:a8:2b:67:bf:e7:17:32:d0:4d:f1:23:e4:
7b:f3:8e:1c:d1:1b:bf:bf:5e:a8:73:4f:a4:fa:53:84:01:2e:
fc:f5:11:c2:e6:0c:7b:bb:fa:25:36:58:bf:05:08:c3:8c:3e:
90:18:ab:ed:02:7b:70:4b:5f:1f:cf:79:2c:a6:9f:85:62:3d:
0a:1b:ed:84:03:68:b8:1a:4b:77:d4:3a:6c:10:4e:a1:e5:ce:
a5:9b:ae:79:ef:f1:fb:40:ad:8c:2a:a8:be:ab:4c:86:af:14:
ee:27:90:da:06:57:bf:87:03:75:5a:a8:b6:3b:62:d1:35:1c:
e2:42:bd:1f:6d:76:ea:be:66:69:f1:e4:a5:b0:71:05:20:7f:
ca:3d:49:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvV49FeYyV+EG2hTydwRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjRjZGVlZTM0NjExNmNiOTY0MWJhNDgwMGY1NWI5OTA2
ZGMzYTUwHhcNMjUxMTA0MTIwMDI0WhcNMjUxMTA1MTIwMDI0WjAzMTEwLwYDVQQD
Eyg1N2U1YTQ2MzFiZjYyZjUyYWE1N2FkNWY2YTZkMjQ1ZmMxYTg3OWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy9O4YYuRWmBVO90DxWiJSLBF/in
AXxHu6OXWtkKxgvUG6mRnut3RQngeGvbZL9WU4zfCSoAZf4MPAIiRVYjoIW2D3ve
hTk9dG5fAu6VKLeVNtdlflPlnt+lJbagjKKf0dMfGbtiuVtoRxFi1bsbTxWfQXZT
oe229AFeKjuFlSAzzc9ofUIIVbyiOzftu6vEogcEGAMCiHoMMcNgDHuevzZJoEm/
nl2Sos6SbRYXhU6vPeiIIN1f8COPSXxXmMePUcUQrsqEote6CDSF8b9QZ2skevVF
sA4+nwxKMDkjdxocrSs9My8N3dQeggDM3+atIchJqS/oyr4WNKmX9Z5qSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFflpGMb9i9SqletX2ptJF/BqHnkMB8GA1UdIwQY
MBaAFDlkze7jRhFsuWQbpIAPVbmQbcOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5Yjct
MmEwMjQ3ZmJiNmQ1LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5YjctMmEwMjQ3ZmJiNmQ1
LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgV1dUtfT
/GoZoMhHF0eNnEo52mxSUBRjtbUyW8TZh4os6CbmklVqlpEAtDqHD7TT39Ul2Tnz
rzWP5Afti9NCYqQxwd/ZO+meTkxPjNKn1P32au0WgHZvrOx2FzM/sS6ELJTT7qaP
EyIDjGYhEAfdAgkwqCtnv+cXMtBN8SPke/OOHNEbv79eqHNPpPpThAEu/PURwuYM
e7v6JTZYvwUIw4w+kBir7QJ7cEtfH895LKafhWI9ChvthANouBpLd9Q6bBBOoeXO
pZuuee/x+0CtjCqovqtMhq8U7ieQ2gZXv4cDdVqotjti0TUc4kK9H2126r5mafHk
pbBxBSB/yj1JQA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:08 2025 by rpki-client