Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
File: OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json)
Hash identifier: 2iX7uNHcTwNRNKBhPbjYNWihiytwuuv7noCZf4lxcKI=
Subject key identifier: 96:98:4E:7D:6B:18:31:F2:33:2A:92:D2:43:2C:99:E7:21:2B:E1:F2
Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
Certificate issuer: /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Certificate serial: 019A4DE1824BFD748EBAEA90DA742866CDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
Manifest number: 0691
Signing time: Tue 04 Nov 2025 08:00:15 +0000
Manifest this update: Tue 04 Nov 2025 08:00:15 +0000
Manifest next update: Wed 05 Nov 2025 08:00:15 +0000
Files and hashes: 1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: BCK4Y5NquyfVezlV/DAIxFZpTwpVdQzJH/f+C9442wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:82:4b:fd:74:8e:ba:ea:90:da:74:28:66:cd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Validity
Not Before: Nov 4 08:00:15 2025 GMT
Not After : Nov 5 08:00:15 2025 GMT
Subject: CN=96984e7d6b1831f2332a92d2432c99e7212be1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:5c:a8:d2:89:83:82:2e:31:30:23:58:07:
c3:49:0f:8c:a6:70:e1:a5:f7:ba:82:71:ed:07:bb:
86:f4:6b:3c:d5:c2:12:f3:e9:e8:db:78:a1:96:83:
57:41:17:49:b8:4b:45:4a:3d:00:0d:c5:ac:de:91:
4a:d0:fd:2e:2c:5a:90:d4:96:07:b7:6b:26:d5:be:
e7:19:0c:9f:64:68:aa:aa:08:8e:b3:28:0c:42:d5:
ef:b7:12:d4:76:43:c2:e7:2f:79:63:65:1b:99:5b:
01:9b:70:92:de:82:0c:43:a5:20:42:32:73:7d:26:
ca:f5:ad:5e:fe:f6:32:fd:1d:51:52:ba:21:7f:22:
30:90:ef:2e:39:be:91:33:ca:2b:5c:a2:f6:ca:4a:
a5:d1:d6:1e:20:26:d3:61:1f:87:d8:ed:df:25:64:
88:98:e1:c6:45:2b:d2:93:27:89:bd:47:3c:b1:a6:
41:b9:02:96:88:38:9b:3f:f0:f5:9a:62:bf:62:36:
59:28:a0:0f:33:4b:5a:85:a8:c3:27:84:75:75:44:
f8:66:3e:2c:b4:f9:46:f8:84:b3:df:a3:80:a1:c1:
e1:13:b3:59:e6:ec:ee:32:3e:00:67:13:42:37:0e:
7d:4c:72:3b:bf:5b:5c:02:a6:23:dd:c6:41:33:78:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:98:4E:7D:6B:18:31:F2:33:2A:92:D2:43:2C:99:E7:21:2B:E1:F2
X509v3 Authority Key Identifier:
keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5e:2b:93:de:1b:51:9a:93:10:da:57:37:39:0b:30:a6:80:
26:30:66:5b:b6:35:d7:59:80:66:2c:35:3f:fa:63:86:67:d0:
db:6b:f7:94:e8:38:13:20:fd:b2:4e:2d:e4:bb:aa:81:43:ac:
56:6b:db:17:ec:d9:64:70:70:6b:14:b5:b9:0e:35:c2:15:0b:
49:30:a6:2d:35:67:b8:17:bb:96:05:fa:8e:0a:49:f1:21:b0:
a9:17:43:64:1a:cf:70:5d:bc:da:cf:c2:4b:02:3a:55:71:3a:
14:1d:2c:34:af:76:88:ca:89:c1:23:60:d4:8f:48:84:c3:26:
8f:eb:67:ee:cf:3a:06:3f:c6:24:5d:44:28:b8:04:40:ef:bd:
26:b8:4c:b6:e3:e9:68:05:a3:73:a1:28:d1:5c:bc:e9:b4:6b:
b1:01:37:53:3a:6e:09:ec:c8:25:30:b6:2c:90:a4:50:23:03:
e3:fd:1d:93:f8:e3:52:9a:aa:52:f7:5d:a5:72:48:ff:e7:0b:
68:db:45:b6:1d:4b:77:a0:c2:47:83:c8:49:80:f7:0f:56:f4:
56:fe:02:5c:17:f0:2b:fa:d8:6b:96:85:b1:c2:52:fe:43:3c:
1e:ff:ef:fc:59:db:6d:f5:8d:b4:0c:40:dc:a3:c7:4f:c6:40:
74:c3:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:41 2025 by rpki-client