Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: 8qqw+bqFD2xXFjA1YAsHceaKlz63b5YCS/CL5UDI8i4=
Subject key identifier: D2:B1:23:59:33:21:3B:85:4B:DB:43:CA:1E:39:0D:A4:DF:3A:F2:4F
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019A4C98367116EAA5FE820B6525DDAB6ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 02:00:34 +0000
Manifest this update: Tue 04 Nov 2025 02:00:34 +0000
Manifest next update: Wed 05 Nov 2025 02:00:34 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: vFhBKiZey5wNSSAcIIjZtCmulZg9B18KmLwK/s4DCBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:36:71:16:ea:a5:fe:82:0b:65:25:dd:ab:6a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Nov 4 02:00:34 2025 GMT
Not After : Nov 5 02:00:34 2025 GMT
Subject: CN=d2b1235933213b854bdb43ca1e390da4df3af24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:4f:d1:89:f3:9b:03:dc:bf:63:0b:86:0c:
39:b4:10:20:20:06:a8:04:21:4f:18:f5:d8:58:78:
b5:e3:be:0b:e1:06:7b:f2:53:20:b7:93:2a:8f:be:
c1:51:b1:10:5a:f9:05:f4:de:5a:cd:ec:ad:a0:60:
d7:5c:f6:87:f6:23:cc:ad:fa:0c:97:b9:30:e3:bc:
9f:4f:ad:d1:9b:96:e5:02:c9:27:4d:a7:eb:8c:ba:
7f:a9:18:b0:9b:98:97:3e:75:94:43:ae:4a:fa:f9:
66:9f:34:62:a1:39:0f:8c:c0:e6:ba:72:57:33:88:
5c:6b:f0:47:90:8e:59:44:10:84:5b:c4:41:51:f2:
07:39:1f:d9:eb:fa:47:1c:9b:ef:d1:c5:1e:36:78:
3f:df:14:13:3e:91:6a:7f:d2:fd:d6:bb:8c:57:6f:
4c:72:6e:7e:2e:92:c0:41:d5:61:4a:28:26:ea:61:
a5:66:d2:a2:a3:9b:6f:1f:6c:e5:76:43:59:61:2a:
7e:25:23:8b:92:05:eb:0b:45:89:f3:41:8c:2b:2c:
8b:d6:6f:c8:c6:32:12:c0:86:96:f9:da:d5:54:68:
76:c9:32:fa:fb:22:99:30:84:10:65:dc:90:ab:15:
32:e5:da:a2:77:06:09:74:72:48:63:24:93:da:d7:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:23:59:33:21:3B:85:4B:DB:43:CA:1E:39:0D:A4:DF:3A:F2:4F
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:65:2c:b8:50:f2:91:4e:7f:ed:b1:59:55:53:cb:f5:75:03:
3e:5f:dd:41:25:01:95:3c:03:82:1d:18:d1:1f:80:ec:8c:2d:
8f:48:66:50:71:ba:7d:0a:f1:ca:b5:d8:09:7f:5f:81:c9:e8:
8c:94:1f:04:b2:fd:38:c1:b2:b5:d1:c6:37:2e:51:95:22:0b:
82:3c:69:66:a8:29:d6:b9:60:10:bf:29:f5:62:51:e8:eb:88:
a5:de:bb:a0:a3:a5:8f:ba:1c:ff:cb:85:1b:45:1d:ff:64:e2:
a9:d3:97:b1:ba:c1:56:f7:da:57:3d:48:14:7d:08:cd:0c:28:
ab:08:c6:fa:1e:a5:73:03:72:22:c0:52:43:8b:a1:d2:b2:99:
dd:36:02:e8:08:6c:c2:3e:c7:74:42:ce:70:42:49:b2:be:2c:
18:56:94:38:87:17:16:a0:30:9a:0e:2a:2c:25:83:5c:ab:58:
6d:a0:b9:6d:40:d4:68:4d:1d:36:7f:76:8a:0f:66:0c:4e:b4:
eb:34:76:f2:69:fd:a9:99:13:10:4b:08:7f:57:f4:0c:68:2a:
cd:e6:92:a9:22:65:62:45:b9:94:49:a7:21:9f:b6:40:fc:ad:
7d:87:66:49:3e:86:6b:30:4b:3d:22:50:ba:53:fc:ee:7c:8e:
5b:b6:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:40 2025 by rpki-client