Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: AY2+6k0Lq31f6pboAzbMIKsp5TAgeNFGeojrwoOEsxQ=
Subject key identifier: 7D:32:6F:74:57:CE:39:34:53:0A:54:41:C9:B7:93:73:A6:E4:34:19
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 019A51BE7B0F48F14D2CEA61CBE08CB332C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 13A1
Signing time: Wed 05 Nov 2025 02:00:29 +0000
Manifest this update: Wed 05 Nov 2025 02:00:29 +0000
Manifest next update: Thu 06 Nov 2025 02:00:29 +0000
Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: 9jaYCiB3HQNZi2CHy0RbWRnp14SspcCkNhzot13q/EA=)
2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:7b:0f:48:f1:4d:2c:ea:61:cb:e0:8c:b3:32:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Nov 5 02:00:29 2025 GMT
Not After : Nov 6 02:00:29 2025 GMT
Subject: CN=7d326f7457ce3934530a5441c9b79373a6e43419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:80:05:13:f0:41:0f:05:db:fc:2c:3d:c7:
66:f2:73:b6:c2:74:fc:d7:8f:64:e4:0f:c9:9b:f8:
8e:26:57:55:71:54:b0:2e:32:94:44:39:21:f6:af:
ab:a9:ea:c0:bd:26:94:46:f1:51:fc:e8:23:4c:ec:
85:db:d0:da:98:94:98:aa:44:e5:11:5c:fd:5c:47:
70:62:45:c0:8c:91:8b:6c:ed:8f:44:c6:28:c4:1a:
ab:9e:19:15:ca:20:f1:af:bd:cc:44:0b:4d:a9:b0:
ef:1a:f7:3e:4c:bc:f8:fa:5b:bc:ad:51:d2:83:d4:
c7:0b:66:77:5a:47:9b:7c:a0:aa:e9:24:fa:76:1d:
b4:26:15:83:34:70:c9:25:e9:11:c2:de:35:91:c3:
f9:7c:22:a4:92:01:05:78:fe:ea:ad:3f:f2:07:83:
b3:13:1a:99:bd:af:d3:ff:fd:75:78:6b:03:df:11:
d4:3c:05:c0:62:27:dc:87:aa:ff:c8:8b:d0:f5:80:
0b:a6:97:9f:30:1e:f2:1e:6f:61:46:10:86:53:b1:
cb:8b:a5:b5:b5:4e:f7:3b:89:ad:7e:95:40:6d:d9:
a2:73:b2:ac:db:d1:b0:4c:a3:84:a7:13:80:bd:47:
ec:ce:52:9e:a1:3f:aa:96:2a:fa:ad:89:2f:92:eb:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:6F:74:57:CE:39:34:53:0A:54:41:C9:B7:93:73:A6:E4:34:19
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0a:a6:42:02:3f:89:d4:5b:05:99:49:44:fe:aa:30:bd:67:
5d:e0:b5:29:e2:fa:47:13:2d:67:70:e8:3c:e7:4d:0f:ae:b6:
d0:1d:ae:cf:5c:38:0f:63:77:0d:37:23:94:11:98:12:1b:6b:
1a:25:0a:72:20:a1:3c:ca:d3:f9:b0:d3:93:1e:71:f1:b4:40:
06:11:d6:eb:39:ea:d0:ce:1c:c4:f2:e8:72:d1:14:86:84:88:
70:4d:0f:6f:93:bc:ae:8b:4e:97:50:8b:16:92:ad:94:64:c5:
41:0a:6c:fe:3e:9b:3f:2b:73:35:97:77:b4:bb:d2:93:cd:81:
a2:e3:90:f7:e8:75:b9:89:4f:b9:03:32:e9:48:b4:e1:da:d1:
97:f1:8d:db:4d:8c:b7:d3:ee:a2:5d:26:f8:48:85:55:b5:f3:
55:57:e0:72:9d:e7:a5:ea:bc:51:2a:ec:ce:1b:80:e0:12:87:
4b:e1:02:bc:fb:79:88:a7:29:6d:cc:0c:6e:a9:bf:45:8c:e1:
98:43:a4:3f:60:1b:49:f9:81:da:0e:a4:60:8f:98:45:07:4a:
eb:0b:df:9e:60:55:c0:22:8a:e0:86:7a:db:0b:90:33:42:a1:
fb:3d:6a:23:ff:f6:5f:9e:50:23:94:f7:4f:24:63:90:33:88:
f8:a8:52:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:17:32 2025 by rpki-client