Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: ylx4nUBQkxuEczrzE0fC48GoOvT3jwDsAMJm4UKpoQI=
Subject key identifier: 06:47:EE:36:AD:A3:FA:AE:3B:A3:0E:DE:46:45:91:99:BF:0C:F6:7D
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 01988FC7AB12FEE4DB0DCBDA4406209605BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 12B8
Signing time: Sat 09 Aug 2025 17:01:24 +0000
Manifest this update: Sat 09 Aug 2025 17:01:24 +0000
Manifest next update: Sun 10 Aug 2025 17:01:24 +0000
Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: YYHPMzpOabsnuRLWa/zA81Ej7Op6KSPwDjCYU5OLIPw=)
2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:ab:12:fe:e4:db:0d:cb:da:44:06:20:96:05:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Aug 9 17:01:24 2025 GMT
Not After : Aug 10 17:01:24 2025 GMT
Subject: CN=0647ee36ada3faae3ba30ede46459199bf0cf67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:3a:a7:0b:4a:6b:8c:8c:0f:d6:24:be:65:
44:f3:09:1d:6a:86:91:09:fc:61:d6:ab:04:52:e8:
f1:0f:e5:6b:9b:8e:57:fc:0f:17:f4:73:eb:bb:91:
b6:48:f6:36:9b:4b:b2:28:11:b8:eb:9b:d0:00:3d:
b8:74:98:08:35:38:e3:2d:3b:35:36:6c:ac:5f:eb:
2c:79:03:36:10:59:5a:6d:e5:93:77:cb:e1:cd:e8:
7b:5d:c3:72:63:d0:78:d3:22:1e:6b:b8:7e:d2:50:
74:34:28:a6:8a:fa:96:83:57:a5:77:7e:89:db:29:
5e:13:44:f9:7c:fc:ae:e0:c4:59:76:c8:9d:9c:64:
e2:d5:3b:6b:a6:0a:e7:c5:82:6c:2c:b0:26:fc:03:
10:4d:69:61:fa:a9:1f:e7:3e:da:5e:13:e1:3f:61:
9c:74:7f:aa:ab:90:94:e4:a2:a1:a5:01:0e:cf:27:
61:db:a4:8c:cd:4d:f2:f8:ee:8e:32:0b:65:8b:e4:
b7:77:64:cd:3c:82:7d:ff:60:a4:fd:e0:fd:6c:69:
27:2f:16:19:c2:3c:e8:31:72:5e:60:68:3c:da:d0:
58:9c:f0:a9:a6:84:61:b1:72:18:89:65:98:c4:4d:
85:81:1e:b5:e0:ad:47:98:15:11:4f:a7:3f:1e:36:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:47:EE:36:AD:A3:FA:AE:3B:A3:0E:DE:46:45:91:99:BF:0C:F6:7D
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0c:e4:a2:67:0b:bc:9b:84:ab:6b:c7:89:30:e0:7d:d0:fe:
20:40:33:15:49:27:7d:ba:c0:96:10:7b:e6:1c:58:70:63:cd:
74:4b:80:0a:af:28:92:f7:28:1b:5a:76:1e:65:d1:f7:6a:fc:
02:ec:9f:e4:d4:3f:d9:79:6d:da:57:9c:16:1e:13:7a:08:b5:
31:43:6f:d3:4c:6f:b9:c0:eb:0e:6e:35:d8:6d:ad:98:23:9f:
fd:e1:91:f3:e9:c0:cd:eb:92:6a:32:c0:e4:60:1d:e0:b8:e5:
48:b4:8d:a3:ab:44:f6:15:eb:23:14:5a:8c:0c:c4:1c:b2:ed:
7a:f2:b1:24:04:9c:cc:43:68:a2:ff:c8:1b:fe:85:07:47:95:
c5:e5:17:5c:93:64:48:8d:6d:2e:48:32:bf:16:38:ac:8e:e4:
ec:19:7e:eb:66:76:4e:c3:6f:ff:9b:af:47:86:aa:d7:1b:de:
16:26:3d:36:39:44:45:f4:21:40:e6:92:73:b2:ad:5a:9f:72:
9f:7c:df:6e:00:70:fd:0c:49:76:4a:54:2a:c9:51:56:5b:ae:
ce:f3:ee:89:ab:05:a5:f9:a8:54:70:55:d9:ed:a2:11:b7:b6:
fc:5b:25:b4:bb:96:8f:a9:b1:ac:e8:88:6f:53:cf:96:da:1e:
b8:6e:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:19 2025 by rpki-client