Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
File: OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json)
Hash identifier: WWz3+DsseS2EsfePXykCwdUDMJZTgoHbRdJKur/qEgc=
Subject key identifier: 49:19:6A:3D:83:C2:A0:0E:4B:85:0E:5D:E2:EE:37:72:D0:36:DD:F3
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 01987DC0EDFF99F3B3EE35C3EC6AD3A30B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
Manifest number: 0690
Signing time: Wed 06 Aug 2025 05:00:52 +0000
Manifest this update: Wed 06 Aug 2025 05:00:52 +0000
Manifest next update: Thu 07 Aug 2025 05:00:52 +0000
Files and hashes: 1: ECy4hcsZKRfHoRJrX40zL9VgZlM.roa (hash: TIqTReRQQT5DAw+Fnvsbl2Gazl66yiKwPvTFj1mKh8s=)
2: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: 4SjYYgvJlWfhaIYcWQPQEdc70qjVyoN58XQsqf6mdwg=)
3: b-pP2DvAvhNxFYiGst38p6kSpEw.roa (hash: OWrgzbHkSLo7aQ27PmujOGuFd28cotewB1lFGD+BaKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:ed:ff:99:f3:b3:ee:35:c3:ec:6a:d3:a3:0b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Aug 6 05:00:52 2025 GMT
Not After : Aug 7 05:00:52 2025 GMT
Subject: CN=49196a3d83c2a00e4b850e5de2ee3772d036ddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:90:3f:af:1e:af:c3:17:92:d5:83:de:82:
00:24:57:e6:a8:18:3e:eb:40:18:77:26:85:f9:b3:
e1:5d:1e:46:35:9f:f1:08:5a:71:2e:25:fb:be:d4:
91:46:4e:8e:e8:88:6a:d2:14:4f:f8:75:e3:2c:92:
19:06:86:f7:8b:a3:7b:6d:29:b0:95:d1:d1:31:65:
71:42:8b:eb:cc:37:16:40:1e:4b:56:1e:76:b0:f4:
9e:be:f3:d6:5e:29:b3:bc:20:10:3b:7c:15:76:5c:
95:b3:70:99:ac:b3:a6:db:22:87:7d:f2:bc:f9:46:
fa:83:7c:6e:5e:6e:94:e9:0c:2c:af:0d:f0:3d:b2:
02:0a:c6:64:41:c9:68:d9:5b:31:27:02:bd:d3:d7:
4a:5f:a7:35:92:ac:61:a2:55:2c:52:4a:9d:86:ba:
66:54:c2:e7:07:9e:17:0d:f9:de:de:d9:d1:3c:2b:
d9:d7:d7:63:1b:8d:79:8a:a8:35:93:0d:97:ce:1f:
cc:fd:ec:1f:15:b9:01:64:cc:f3:31:25:64:9e:e2:
c0:2f:ab:23:da:bb:73:be:b9:a3:43:1d:30:df:fc:
5d:40:e4:e5:b5:a4:e8:4b:03:24:df:0f:c0:cb:26:
07:7a:ee:d9:bd:2a:ff:6d:2a:84:28:a4:eb:59:5f:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:19:6A:3D:83:C2:A0:0E:4B:85:0E:5D:E2:EE:37:72:D0:36:DD:F3
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:04:1b:e9:71:1d:8c:b2:e5:b5:cb:23:d0:9b:c7:b9:6c:95:
5c:23:1c:2c:29:9f:b0:c1:32:5f:32:9e:88:ce:24:63:5d:7b:
2b:69:4f:4e:1d:0f:8d:88:7c:41:6a:a2:d3:8b:e5:e0:1d:6e:
cc:0e:e6:42:29:28:99:56:38:79:13:4a:94:8c:b3:86:49:cc:
10:37:6a:16:80:e1:c1:e7:01:a9:ed:0a:1f:1c:a0:16:64:e1:
91:7d:34:ec:3a:08:10:72:dc:1b:b4:19:af:90:54:67:ce:6d:
78:55:6a:02:7a:3b:68:c4:40:77:bd:8c:3b:23:83:b1:1a:4c:
fb:0c:fe:ab:a8:9d:49:07:99:c2:4b:64:25:36:e1:69:15:46:
e6:b8:65:01:51:4d:4c:4c:70:0a:be:b7:08:87:90:1f:21:63:
c7:15:b2:da:5f:ff:b6:4f:3a:57:97:df:5c:e0:3c:a7:49:67:
01:2f:22:14:15:5f:da:65:b1:69:c8:be:2e:9d:e2:67:94:48:
e9:ba:60:b0:60:78:7c:63:93:1e:2f:36:a3:97:fe:8d:c2:5a:
07:44:2a:ee:0c:53:8f:61:e2:c6:20:e4:ed:e5:b5:19:0c:68:
2a:18:b0:8c:e2:d7:a1:99:9b:4c:43:4b:13:36:d7:12:f7:5c:
cd:36:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:20 2025 by rpki-client