Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: lzYWP4XsQavUm/9yG+XFR7woNe0QuTtvzHnXBjsf8BA=
Subject key identifier: AD:06:5F:47:45:88:9F:58:69:A5:66:0B:5A:E4:7E:FD:6A:65:9F:AC
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 019A503E239E29CD28DA1CEB0B7B619B4A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:40 +0000
Manifest this update: Tue 04 Nov 2025 19:00:40 +0000
Manifest next update: Wed 05 Nov 2025 19:00:40 +0000
Files and hashes: 1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: JDRwYLHXsZEk+vvTODnv0G8Fe5GP2k8SKf5c2GiebuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:23:9e:29:cd:28:da:1c:eb:0b:7b:61:9b:4a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Nov 4 19:00:40 2025 GMT
Not After : Nov 5 19:00:40 2025 GMT
Subject: CN=ad065f4745889f5869a5660b5ae47efd6a659fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f1:ae:96:c6:4f:f8:6b:15:41:43:28:fe:40:
9c:50:cf:88:04:81:6b:f2:61:d1:a5:41:c7:79:ea:
b3:1e:cd:08:b5:7f:08:06:20:fa:e8:e3:7a:a3:cd:
05:02:4d:c3:b1:2a:e3:13:19:a1:8c:94:ab:b0:0e:
57:3d:94:58:6c:f1:cb:f5:fa:78:61:6f:7e:3e:07:
74:a3:40:18:de:e9:39:95:9b:71:12:b8:f7:d0:9d:
25:7f:bd:54:8c:3a:3e:3c:d4:c3:6a:a7:5d:b4:7f:
91:c7:b2:69:86:ab:a2:eb:29:40:97:d8:a8:8d:51:
2a:c2:09:99:32:e5:45:0e:60:d0:4e:2c:30:ab:a4:
67:7c:0a:1d:5a:cc:d0:f6:09:81:10:98:86:d9:fe:
b1:64:3b:eb:f1:eb:35:4a:c7:6b:c7:e3:1d:00:dd:
78:e9:13:f7:66:ea:77:4a:6c:85:93:aa:f4:74:30:
cf:04:16:be:63:d8:1d:1f:0c:45:91:98:b9:5f:5b:
e0:d0:14:85:41:15:2f:b1:5d:80:6c:88:99:4a:2c:
85:41:2b:db:af:08:6e:dc:cd:44:7b:50:16:1f:6c:
9e:fe:8f:b0:35:51:c5:7a:4c:21:0b:db:7e:56:9d:
6f:a0:b8:06:53:8f:e8:d1:09:3a:dd:a4:d5:30:68:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:06:5F:47:45:88:9F:58:69:A5:66:0B:5A:E4:7E:FD:6A:65:9F:AC
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7c:85:e1:ad:3b:04:cb:ec:c3:11:6f:08:8d:62:84:54:1a:
d6:db:e5:2f:06:f7:a1:ce:b4:43:27:68:61:6f:99:4a:24:8a:
d5:20:7e:bc:e2:60:ef:61:72:2b:50:e0:f2:95:b7:46:f2:74:
a3:f0:b1:fe:ba:39:76:a2:bd:03:fd:ab:e9:04:53:be:e7:9c:
86:04:b6:e4:83:ea:b9:01:69:fc:a3:f7:87:f2:3e:66:b2:28:
ed:e3:61:d8:62:0e:2d:31:ea:13:2b:67:8b:fd:87:f8:ce:b9:
3c:aa:42:ba:18:5a:1e:02:73:d0:6b:6d:8b:77:60:25:95:34:
44:ab:10:ce:70:4b:e9:31:92:10:07:b7:d3:3b:19:42:3c:79:
f1:c1:f7:e3:31:dd:58:df:57:16:6f:28:5c:50:3d:1b:89:58:
a6:7e:45:75:4d:f4:16:e7:75:c1:92:55:73:3a:a6:32:5c:7e:
5b:ad:eb:ff:f9:bf:ec:1f:c8:a7:12:25:fd:96:f4:69:e4:8c:
61:63:f6:6d:8b:01:6c:90:1a:c6:7f:32:b7:c2:f6:de:e6:04:
28:df:01:9b:4b:e9:81:50:68:bf:b6:ac:13:9a:75:c5:24:df:
b5:c5:74:f4:03:28:12:fe:8d:36:ea:05:00:d0:f8:0e:1f:91:
5f:9a:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:48 2025 by rpki-client