Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: 6rSy7HTPuPYx8dCEBkmjKln/b/DIlg3B1MZHPb1YbP4=
Subject key identifier: 71:C5:A4:B8:B3:C1:37:EF:3D:EF:B5:C5:2B:AD:11:25:07:43:3F:53
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 019894B8258F6DEB80E112F9AE96B60A7277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 059E
Signing time: Sun 10 Aug 2025 16:02:32 +0000
Manifest this update: Sun 10 Aug 2025 16:02:32 +0000
Manifest next update: Mon 11 Aug 2025 16:02:32 +0000
Files and hashes: 1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: +ynFo85VoS7JuHCBxxgqF4NRy41cynH9+StyWOLSQe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:25:8f:6d:eb:80:e1:12:f9:ae:96:b6:0a:72:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Aug 10 16:02:32 2025 GMT
Not After : Aug 11 16:02:32 2025 GMT
Subject: CN=71c5a4b8b3c137ef3defb5c52bad112507433f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:14:69:ca:9f:94:a1:28:73:e6:c8:4e:11:
e7:d8:b3:72:2f:55:fe:ba:1e:3a:2d:93:43:48:2d:
8a:bb:cf:12:c3:d5:69:61:98:6f:e7:35:2f:28:f7:
0f:37:11:0b:6d:b3:a8:d6:8b:4d:87:7b:cc:9a:e7:
31:1b:d6:8a:b5:4a:bc:59:90:40:e4:45:37:74:96:
89:3d:05:26:62:d3:45:42:ae:29:ed:69:4e:a2:34:
7a:44:f9:a8:13:12:8b:17:29:6d:36:98:0d:46:80:
f7:e6:3f:10:a2:68:67:6c:0d:a9:7e:66:75:7b:60:
a5:22:e3:92:50:e0:e7:a4:3c:6c:8f:f2:b0:08:72:
07:83:ac:16:e9:a4:fa:1d:78:9f:aa:70:1e:5a:d2:
13:a2:60:8a:e5:ea:ed:b1:6e:d5:a9:84:0f:29:2c:
d5:c0:40:b8:36:94:79:9c:3f:9a:bc:a0:42:1e:e7:
43:45:57:0c:96:30:c4:ae:61:22:af:70:61:38:35:
2e:c2:16:05:d2:90:4f:8a:33:f7:32:f4:b8:b0:c6:
47:1b:88:d1:37:36:e8:8b:c4:7c:76:d9:51:66:e8:
95:d6:e9:1c:a3:4a:7e:32:ea:16:09:0b:6c:7f:26:
f2:ba:c2:0c:a6:66:13:43:6b:3b:a2:88:34:03:35:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C5:A4:B8:B3:C1:37:EF:3D:EF:B5:C5:2B:AD:11:25:07:43:3F:53
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:04:8c:53:20:44:35:a2:1b:78:b2:ec:0e:d6:6d:2f:65:a1:
1d:b9:85:f0:6b:59:dc:c3:68:53:89:4c:4e:a1:83:38:83:ab:
56:cf:c8:33:70:92:9b:42:2b:e3:cf:4b:ba:3e:03:a9:ff:06:
51:96:b3:ab:8b:d8:26:12:68:ee:34:24:50:51:df:f0:33:34:
79:e9:ef:ac:21:54:4b:28:bd:11:19:6f:6e:6a:ea:e5:84:f1:
d2:63:43:af:cc:c3:f4:75:d9:7a:3d:50:ef:c7:a4:5e:3e:08:
4c:5a:63:d9:70:53:87:ac:ab:b0:ee:4d:71:b4:59:25:09:17:
4e:fa:cb:d0:1e:0a:d3:ff:b3:28:c2:bc:0c:37:9c:a6:f2:d0:
a7:c3:c8:56:32:30:2c:85:40:31:ab:16:97:60:11:eb:62:0e:
9e:b6:a7:6f:ae:03:fa:e2:45:ca:6d:7d:b1:03:80:23:c4:90:
d0:b4:a6:39:f0:de:36:07:9f:e5:e9:57:42:28:89:07:9c:85:
a7:2f:20:7d:8b:54:6b:69:5a:6a:e3:d9:78:5c:e9:25:0f:ce:
bd:b9:9d:e5:0e:9a:2f:aa:e4:a2:b4:7d:99:be:3e:8b:1e:ac:
5e:c5:06:b3:46:02:1e:cd:e3:24:fd:af:9b:47:19:df:a5:da:
7f:f8:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:37 2025 by rpki-client