Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File: ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier: VD0SLf2yw+W1EW8vHbACqle986ipX3QUtwnb4Oa4NkE=
Subject key identifier: 73:92:B2:98:E9:06:E2:9C:FE:7D:72:79:C8:4F:7F:31:9A:0D:BA:03
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial: 019A4F99472EE2858AF9192D18D4E332E412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number: 0BD8
Signing time: Tue 04 Nov 2025 16:00:36 +0000
Manifest this update: Tue 04 Nov 2025 16:00:36 +0000
Manifest next update: Wed 05 Nov 2025 16:00:36 +0000
Files and hashes: 1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: zUqtaJN7UJTVPQmdyp/PPuou5ekamQZv5JTiVSLYgt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:47:2e:e2:85:8a:f9:19:2d:18:d4:e3:32:e4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Validity
Not Before: Nov 4 16:00:36 2025 GMT
Not After : Nov 5 16:00:36 2025 GMT
Subject: CN=7392b298e906e29cfe7d7279c84f7f319a0dba03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:48:18:cd:04:1e:d4:c6:10:d7:0e:03:d1:d6:
96:8c:4e:ff:0e:85:c1:98:bb:bb:00:6f:cd:13:fd:
a6:0b:61:c1:6a:43:30:76:9f:44:da:c6:25:4f:dd:
74:57:d4:cb:89:c5:8a:14:dc:30:6e:87:de:1a:c8:
f8:43:cd:1f:c8:75:da:6f:98:f9:9d:7c:5a:be:0b:
da:3c:a7:08:e8:68:2c:60:0d:ed:bb:6c:3e:e8:98:
db:c4:ba:eb:72:17:f7:15:d1:6e:16:e4:f5:13:49:
67:a4:9d:be:7f:02:10:4f:47:cb:60:f0:ab:8e:b3:
34:a8:ae:55:f8:4d:7e:64:b9:27:16:44:38:50:80:
05:45:55:7a:43:3f:c9:3c:75:0a:fd:38:e7:07:42:
2e:00:2e:57:e6:fb:6b:09:80:61:bb:b8:ee:93:76:
e4:ca:07:49:4d:72:7d:74:1f:c3:f2:51:ab:be:e6:
5e:77:92:6c:b4:1d:5a:75:15:e0:fa:2f:b7:5a:72:
26:8d:d5:06:a3:69:dc:35:34:27:1e:f3:61:fe:06:
18:f0:f5:e7:a4:34:2a:37:34:8f:75:e0:b1:7e:8a:
d7:29:d5:3c:b4:08:43:fe:8d:6c:76:2b:b7:89:5f:
c0:fb:22:3a:40:af:0f:b2:e9:f9:fa:84:72:81:33:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:92:B2:98:E9:06:E2:9C:FE:7D:72:79:C8:4F:7F:31:9A:0D:BA:03
X509v3 Authority Key Identifier:
keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c0:6e:05:ef:8b:35:d4:56:e5:4d:43:67:b8:e0:dd:73:aa:
83:c5:06:ae:09:ef:b3:09:58:35:c7:15:19:16:89:a5:1d:99:
03:cc:bb:06:d6:ae:ff:c1:ea:42:6e:a8:f4:b1:88:a5:83:71:
a8:c5:08:37:46:f0:4a:c1:26:fb:c4:56:d3:83:66:93:33:0f:
4a:cf:0d:0a:0d:67:a7:2d:f4:b4:8a:93:3f:ac:f3:9a:5e:f8:
71:1e:bf:6a:6f:b4:98:a6:a1:91:33:96:31:89:8c:6c:a1:1e:
fd:1e:73:4a:01:63:da:02:96:76:b6:65:eb:fe:e5:f7:ba:4e:
86:2b:c0:75:92:53:35:9d:c0:88:f7:ca:05:91:8e:67:31:fd:
e3:5c:4f:22:42:0d:89:6c:e1:67:32:30:4a:f9:9b:a6:3a:73:
a0:2e:3b:dd:c8:6f:08:58:6f:b8:71:7a:51:8c:f0:a2:25:30:
18:01:98:9c:41:69:6d:15:e6:b1:f4:51:8e:53:2a:e1:40:fc:
6c:9e:dc:c3:50:e7:6f:07:48:af:ac:f7:65:a3:d8:59:d3:da:
bb:14:f1:c8:d2:af:fa:56:39:ea:79:c6:f6:c6:cb:f9:b1:89:
9a:7c:ab:29:89:98:d6:9c:d3:26:3c:ab:55:a0:44:11:fa:9a:
3b:0b:85:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmUcu4oWK+RktGNTjMuQSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjk3NGVmYjUwZTcyOWM5ZTAxNWE4YmMyYjZjMmIwNjE5
ZGZjODQwHhcNMjUxMTA0MTYwMDM2WhcNMjUxMTA1MTYwMDM2WjAzMTEwLwYDVQQD
Eyg3MzkyYjI5OGU5MDZlMjljZmU3ZDcyNzljODRmN2YzMTlhMGRiYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UgYzQQe1MYQ1w4D0daWjE7/DoXB
mLu7AG/NE/2mC2HBakMwdp9E2sYlT910V9TLicWKFNwwbofeGsj4Q80fyHXab5j5
nXxavgvaPKcI6GgsYA3tu2w+6JjbxLrrchf3FdFuFuT1E0lnpJ2+fwIQT0fLYPCr
jrM0qK5V+E1+ZLknFkQ4UIAFRVV6Qz/JPHUK/TjnB0IuAC5X5vtrCYBhu7juk3bk
ygdJTXJ9dB/D8lGrvuZed5JstB1adRXg+i+3WnImjdUGo2ncNTQnHvNh/gYY8PXn
pDQqNzSPdeCxforXKdU8tAhD/o1sdiu3iV/A+yI6QK8Psun5+oRygTOUNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOSspjpBuKc/n1yechPfzGaDboDMB8GA1UdIwQY
MBaAFKL5dO+1DnKcngFai8K2wrBhnfyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZsMDc3VU9jcHllQVZxTHdyYkNzR0dkX0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82NjgzNDUtZjViYy00YTNmLWI2ZmYt
MTBkZjQ5ZjY1NjE2LzEvb3ZsMDc3VU9jcHllQVZxTHdyYkNzR0dkX0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82NjgzNDUtZjViYy00YTNmLWI2ZmYtMTBkZjQ5ZjY1NjE2
LzEvb3ZsMDc3VU9jcHllQVZxTHdyYkNzR0dkX0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsBuBe+L
NdRW5U1DZ7jg3XOqg8UGrgnvswlYNccVGRaJpR2ZA8y7Btau/8HqQm6o9LGIpYNx
qMUIN0bwSsEm+8RW04NmkzMPSs8NCg1npy30tIqTP6zzml74cR6/am+0mKahkTOW
MYmMbKEe/R5zSgFj2gKWdrZl6/7l97pOhivAdZJTNZ3AiPfKBZGOZzH941xPIkIN
iWzhZzIwSvmbpjpzoC473chvCFhvuHF6UYzwoiUwGAGYnEFpbRXmsfRRjlMq4UD8
bJ7cw1DnbwdIr6z3ZaPYWdPauxTxyNKv+lY56nnG9sbL+bGJmnyrKYmY1pzTJjyr
VaBEEfqaOwuFKg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:50 2025 by rpki-client