Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File: mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier: 2UYBJWzv8v5/7S+MqmZnLr/BHXh5v7mI2WJ+c6Z0Mlg=
Subject key identifier: D9:2A:0D:A4:AA:92:53:E6:D7:14:9C:3D:77:0C:79:81:CA:18:59:C0
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial: 019771F663D7E230370CF7CD27DCDD96D180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number: 0289
Signing time: Sun 15 Jun 2025 05:01:02 +0000
Manifest this update: Sun 15 Jun 2025 05:01:02 +0000
Manifest next update: Mon 16 Jun 2025 05:01:02 +0000
Files and hashes: 1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=)
2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: A73iLTl1x1m21qkaiteV4GnWJMe6iV6dQGYRqYK6mek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:63:d7:e2:30:37:0c:f7:cd:27:dc:dd:96:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
Validity
Not Before: Jun 15 05:01:02 2025 GMT
Not After : Jun 16 05:01:02 2025 GMT
Subject: CN=d92a0da4aa9253e6d7149c3d770c7981ca1859c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:21:be:98:bb:55:b9:6a:f0:da:15:f1:15:
f7:88:10:aa:48:4a:26:4a:51:a9:bc:e1:94:b4:b8:
ac:0d:94:0d:ad:1f:0c:4c:e3:0e:fa:40:47:3d:38:
1e:50:34:fd:ce:46:93:52:20:dd:61:e4:58:57:13:
63:a9:54:02:74:03:32:fc:26:61:6b:cf:f5:3c:95:
2f:46:e2:27:9c:22:ae:f6:4d:26:33:c7:99:0d:48:
19:64:0c:a2:0d:d3:54:7a:9a:a4:64:e1:23:c4:85:
b8:5e:8a:c2:a0:b3:79:6b:23:9e:00:33:3b:c9:b6:
da:b9:e6:6c:ed:46:3c:0f:3c:66:70:da:aa:41:4b:
b9:50:9f:6f:7f:bb:18:5a:7d:30:6a:48:fe:90:f2:
84:d6:77:00:85:b5:20:7c:92:de:46:3c:8c:58:cb:
cc:55:2a:be:58:65:7f:83:7e:6c:6e:44:a6:d5:50:
26:12:93:ba:6b:71:fc:c4:c0:fe:7e:f6:f5:fd:27:
ae:e9:18:f1:db:18:9e:6a:24:5a:a5:d9:a5:a5:98:
24:35:68:54:0a:32:1d:66:60:08:3c:02:f6:36:0b:
22:40:67:8f:1f:ca:75:61:ac:48:ec:77:d0:e1:33:
97:7f:62:f3:ef:72:5c:22:a5:8d:c8:e9:7d:34:e5:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:0D:A4:AA:92:53:E6:D7:14:9C:3D:77:0C:79:81:CA:18:59:C0
X509v3 Authority Key Identifier:
keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:60:bf:f5:1c:43:c8:c8:c2:46:6d:28:76:84:6e:fd:c3:17:
16:97:1c:1b:32:8e:ab:fa:b5:0f:bd:b4:e9:70:59:a8:8b:2b:
75:aa:3f:b4:e8:c2:b5:6d:fa:1c:d7:5a:75:5c:d1:82:4b:ce:
c2:14:22:db:a7:09:db:5a:17:56:d1:68:79:15:62:18:44:51:
32:8c:73:b0:2a:09:e5:0b:6f:c7:43:8b:3c:84:06:71:c2:77:
f7:b5:1f:0d:d2:91:b7:fd:66:f0:60:ac:d3:e4:6e:89:3f:8d:
b3:3b:fb:d6:57:e6:95:13:6f:b1:ca:ef:87:6e:f3:0a:03:b1:
47:bb:b3:71:6b:91:e4:71:96:6b:c0:b4:76:cb:d3:d0:4b:e9:
9e:8a:4b:47:53:98:98:b1:1a:26:59:5e:b9:21:55:35:c9:94:
e9:b3:b8:b3:51:eb:80:fe:44:98:a3:d5:e8:43:72:77:20:0c:
e3:54:eb:08:53:4f:2d:bb:ac:cc:81:5b:65:23:b9:5f:f4:d5:
83:b4:83:49:56:97:ea:d3:0f:aa:a8:44:4b:40:eb:42:72:06:
4b:a3:4b:d7:c2:9e:18:56:b3:db:d0:a7:d6:8a:1c:6b:71:c2:
25:4b:ca:45:83:13:9d:83:53:31:9a:17:5a:4e:df:2e:60:f4:
98:cb:b7:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9mPX4jA3DPfNJ9zdltGAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOGMzMjlkODc2M2MyOWYyOTkzMWFiYmI4MTk1Zjk3NTAz
ODI5OGIwHhcNMjUwNjE1MDUwMTAyWhcNMjUwNjE2MDUwMTAyWjAzMTEwLwYDVQQD
EyhkOTJhMGRhNGFhOTI1M2U2ZDcxNDljM2Q3NzBjNzk4MWNhMTg1OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMwhvpi7Vblq8NoV8RX3iBCqSEom
SlGpvOGUtLisDZQNrR8MTOMO+kBHPTgeUDT9zkaTUiDdYeRYVxNjqVQCdAMy/CZh
a8/1PJUvRuInnCKu9k0mM8eZDUgZZAyiDdNUepqkZOEjxIW4XorCoLN5ayOeADM7
ybbaueZs7UY8DzxmcNqqQUu5UJ9vf7sYWn0wakj+kPKE1ncAhbUgfJLeRjyMWMvM
VSq+WGV/g35sbkSm1VAmEpO6a3H8xMD+fvb1/Seu6Rjx2xieaiRapdmlpZgkNWhU
CjIdZmAIPAL2NgsiQGePH8p1YaxI7HfQ4TOXf2Lz73JcIqWNyOl9NOW1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkqDaSqklPm1xScPXcMeYHKGFnAMB8GA1UdIwQY
MBaAFJqMMp2HY8KfKZMau7gZX5dQOCmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wY2Q5NDktZjRiNy00OGQ5LWEwYzYt
ZmRhOGExM2NhMWQ3LzEvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wY2Q5NDktZjRiNy00OGQ5LWEwYzYtZmRhOGExM2NhMWQ3
LzEvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWC/9RxD
yMjCRm0odoRu/cMXFpccGzKOq/q1D7206XBZqIsrdao/tOjCtW36HNdadVzRgkvO
whQi26cJ21oXVtFoeRViGERRMoxzsCoJ5Qtvx0OLPIQGccJ397UfDdKRt/1m8GCs
0+RuiT+Nszv71lfmlRNvscrvh27zCgOxR7uzcWuR5HGWa8C0dsvT0EvpnopLR1OY
mLEaJlleuSFVNcmU6bO4s1HrgP5EmKPV6ENydyAM41TrCFNPLbuszIFbZSO5X/TV
g7SDSVaX6tMPqqhES0DrQnIGS6NL18KeGFaz29Cn1ooca3HCJUvKRYMTnYNTMZoX
Wk7fLmD0mMu3Kw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:16 2025 by rpki-client