Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: qqQlSTiDIKbvxI9LHmMz4pNuFojE1KUqd82N9+OcElE=
Subject key identifier: C5:80:89:7E:FC:03:15:AC:3D:F9:46:F2:93:8B:E5:26:51:71:AC:BC
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019768F2CEC8C54AAD5DF59DFACBFF08C51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 11:00:32 +0000
Manifest this update: Fri 13 Jun 2025 11:00:32 +0000
Manifest next update: Sat 14 Jun 2025 11:00:32 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: yHQC2xdx3Atv1Ra8b0Dr8ttzPhym9S42qBKzvQdlVh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ce:c8:c5:4a:ad:5d:f5:9d:fa:cb:ff:08:c5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Jun 13 11:00:32 2025 GMT
Not After : Jun 14 11:00:32 2025 GMT
Subject: CN=c580897efc0315ac3df946f2938be5265171acbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:3b:d1:60:b6:5c:3c:3d:62:1b:27:53:20:
51:93:31:d7:d7:19:16:27:60:86:50:76:9f:b3:49:
b1:99:90:db:fc:5e:ce:42:e4:31:5f:9a:ce:e1:5a:
94:24:33:0a:66:dd:90:b4:a1:86:74:2c:57:8e:2d:
9b:76:1f:79:89:d1:5d:09:e6:d2:61:21:aa:1a:e2:
56:f3:3a:37:a9:ba:76:69:12:20:28:d7:ec:7c:cf:
ac:65:63:0d:28:39:27:27:03:cb:d7:b5:b6:9e:75:
b4:89:cf:db:c2:ff:60:e3:f2:95:a9:52:f7:0e:41:
81:35:7a:17:28:38:77:44:92:64:47:b5:eb:e9:6d:
da:42:03:62:51:59:94:52:b1:bf:13:c5:21:97:6d:
5c:ed:6f:cd:55:46:de:17:92:5f:81:73:77:9f:4d:
74:96:3a:1d:c1:4e:b7:2b:6b:5a:51:00:ed:20:53:
70:f6:cf:47:63:23:68:7c:87:76:e9:9d:da:e7:01:
67:2a:7f:54:c5:81:25:53:14:37:c6:14:82:35:5f:
d8:20:dd:76:4d:71:f2:89:35:a3:da:eb:da:b3:e9:
10:30:9f:92:c9:62:b8:75:9d:ee:98:b4:cd:91:5d:
99:73:d2:58:1d:1d:e2:79:af:58:e2:f8:8f:f0:54:
22:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:89:7E:FC:03:15:AC:3D:F9:46:F2:93:8B:E5:26:51:71:AC:BC
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bc:3c:9a:44:50:b4:c2:d3:77:d9:ab:49:aa:6c:67:bb:ea:
ed:e9:92:6b:23:d9:a3:a4:75:a6:93:ff:fa:61:60:1e:e3:af:
87:89:f2:8f:33:16:f1:b2:28:11:53:20:a2:55:31:6e:76:0d:
2c:23:1e:84:82:07:36:04:ec:6a:b6:dc:72:13:a4:fc:09:f6:
ee:07:a1:42:db:47:1f:e6:50:a3:f0:0d:54:66:66:d3:48:47:
53:e2:f8:c2:83:9c:40:ca:2e:ee:cb:3d:fa:48:b6:7c:1b:90:
73:74:4d:98:09:58:70:1e:c5:e5:a8:ed:c8:49:c3:a8:1c:3f:
1f:59:14:60:b4:2b:e9:90:1e:1d:94:f2:98:ec:1b:11:71:c7:
50:14:e0:88:fa:47:d9:08:7d:62:d2:71:1c:33:48:35:34:b3:
de:3a:66:1d:54:68:d7:a5:22:31:b5:4f:c0:67:b1:e7:0e:2f:
88:d1:82:77:67:b6:64:e5:f5:99:21:83:8b:5a:5a:c1:20:27:
fd:8b:e6:25:c4:c2:e3:52:1d:ab:a1:e7:0a:c8:ab:75:b7:c3:
65:b6:d7:df:5a:41:5b:40:d2:26:0b:d7:73:2a:07:a2:da:f0:
63:19:f9:09:d2:8a:98:2c:7a:94:0d:da:97:aa:dc:80:e2:4c:
92:22:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:48 2025 by rpki-client