Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File: ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier: 0W3H0RvbcB8zl7NFqMT0XMWDlyzWbDhWGFtNOCGuhhY=
Subject key identifier: 30:B9:FA:89:08:DF:15:C1:E2:51:9C:54:5A:06:8A:85:C5:89:14:F7
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial: 01987C4042F6F70F5AA72EC5C6FE932E886E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number: 0AE6
Signing time: Tue 05 Aug 2025 22:00:42 +0000
Manifest this update: Tue 05 Aug 2025 22:00:42 +0000
Manifest next update: Wed 06 Aug 2025 22:00:42 +0000
Files and hashes: 1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: EUHCoOvEClDbl16OGfbbMSgOMbPLm1IwfFQQmw6diKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:42:f6:f7:0f:5a:a7:2e:c5:c6:fe:93:2e:88:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Validity
Not Before: Aug 5 22:00:42 2025 GMT
Not After : Aug 6 22:00:42 2025 GMT
Subject: CN=30b9fa8908df15c1e2519c545a068a85c58914f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:e8:a5:11:6f:38:4b:0b:07:1a:af:7e:46:
30:ee:71:b6:b9:43:a4:66:73:8d:ab:79:b4:33:d7:
c3:d2:92:34:68:40:4a:99:97:3f:3e:04:cc:68:38:
6d:90:03:00:e6:6c:3a:3e:e0:4c:56:d5:56:aa:33:
10:7e:bb:75:23:20:c6:06:19:b1:a8:e7:24:1c:d2:
7f:15:d7:e7:03:5d:84:a4:b9:69:7b:5c:63:e8:48:
34:c0:c8:e2:6c:b9:25:db:dc:18:b2:34:46:da:67:
4e:06:fe:3c:16:cf:fa:ed:b4:99:ae:74:e7:cf:da:
e4:e0:5d:68:df:1a:f3:64:e4:60:6a:6c:28:28:85:
7b:41:39:e1:23:01:df:bf:a6:8f:3d:e1:db:4b:cd:
20:df:fe:42:d8:7b:c1:78:2a:a8:12:5b:a9:66:ed:
79:a2:35:69:2c:b0:ff:69:51:2e:41:68:74:ae:00:
45:b5:df:42:49:f0:58:ed:d6:4c:59:e2:f2:7e:bc:
b2:34:c8:d3:07:06:74:44:4e:3f:c0:7c:80:42:3b:
2b:2e:ea:bc:37:d7:32:ef:5b:ff:e2:e1:91:17:f2:
34:29:2b:24:8f:8d:68:28:bb:ee:7b:5d:5e:a8:c9:
74:33:df:c8:2f:2e:eb:64:90:71:12:39:0a:6e:c1:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B9:FA:89:08:DF:15:C1:E2:51:9C:54:5A:06:8A:85:C5:89:14:F7
X509v3 Authority Key Identifier:
keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cd:97:62:31:fd:9d:34:ff:e1:ee:07:21:77:42:f6:67:55:
d5:25:72:4d:e4:24:cd:17:83:d3:59:69:7c:ef:b7:fc:37:a8:
cb:ad:b0:e1:15:fd:3c:83:f0:a7:a6:80:d6:1d:16:fe:76:3a:
f9:13:61:32:f2:72:81:c3:a4:c7:4f:b8:f6:ee:6d:7b:07:8c:
69:a1:bf:e7:08:2b:9c:26:c2:9c:27:f0:67:02:d0:b9:00:3e:
23:54:c0:56:c8:af:86:c3:60:97:23:59:3b:5b:c3:37:36:b3:
6e:29:ba:89:7f:31:c1:96:4e:52:df:a3:92:11:c9:18:52:ad:
00:24:19:70:81:97:0a:24:3e:20:f4:41:d1:e0:0d:56:a6:bc:
1f:59:be:9a:e9:90:06:41:2c:d4:04:b8:b4:45:75:28:9b:5f:
1d:11:ca:20:b9:13:14:d6:40:42:fc:39:67:b4:29:f0:9c:58:
12:bf:84:cb:1b:be:94:a8:cf:b1:90:84:13:d9:b2:af:de:3a:
99:94:c9:e4:16:0c:45:5e:8d:cc:aa:c3:a9:53:27:a8:5c:1e:
6d:24:c5:eb:6c:1e:79:c0:b4:24:02:d3:03:db:f7:6d:86:70:
a7:41:5a:92:44:ec:83:5b:78:ba:d7:79:c5:36:01:8e:18:14:
69:5f:01:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:55 2025 by rpki-client