Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: hWqFUOQzKcUzrRReGQpoWLK0Q4Qet6nuVTCNaeIJEVA=
Subject key identifier: 00:5A:CF:74:55:31:AB:C9:9A:A3:96:E4:B0:63:24:1E:BC:F4:D5:0D
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 019782EA3182CE7D596B5AB7A495E8B6DA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 1598
Signing time: Wed 18 Jun 2025 12:01:15 +0000
Manifest this update: Wed 18 Jun 2025 12:01:15 +0000
Manifest next update: Thu 19 Jun 2025 12:01:15 +0000
Files and hashes: 1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: S4pPv4S7DgXvvVeYpYK5HOQydZ/6LgPbaP2vVC1yyqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:ea:31:82:ce:7d:59:6b:5a:b7:a4:95:e8:b6:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Jun 18 12:01:15 2025 GMT
Not After : Jun 19 12:01:15 2025 GMT
Subject: CN=005acf745531abc99aa396e4b063241ebcf4d50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:d3:5d:10:1c:79:34:1a:4b:dc:89:cd:ef:
f1:d0:89:05:0c:03:22:d4:35:15:57:76:12:8e:9b:
7e:f2:ba:5c:38:a1:ac:fc:80:75:b6:30:8f:2c:01:
b4:a7:b3:8b:1a:6d:90:5e:18:0b:b1:74:9d:01:72:
c2:10:f0:e6:e2:7e:42:22:98:65:a4:c5:16:73:bd:
09:e2:a6:3a:d5:d7:d2:3c:02:6b:c0:92:04:0c:12:
c5:88:6c:74:59:02:74:ae:73:b0:cd:91:2f:31:05:
d5:d7:07:a2:9d:79:6f:3f:ab:2d:c4:1b:2a:eb:3f:
6c:f7:37:0a:b4:e5:94:2b:ff:87:71:9c:8b:97:84:
9a:08:e4:ea:5d:9f:20:ce:06:f9:6d:7a:74:7e:4d:
f6:a4:57:31:96:ef:04:86:14:df:57:a7:7d:1e:f1:
5b:51:36:e5:c2:06:ce:4b:65:1f:42:2c:54:04:86:
81:ae:94:bf:ce:0e:af:12:0c:4b:22:87:15:9b:d6:
af:7f:b2:57:ef:15:c7:52:51:a5:98:55:fc:6f:5e:
79:22:52:ea:c0:63:e5:83:10:91:f5:1d:91:9a:bd:
fb:7e:a7:b5:09:c1:11:65:1f:31:1a:50:1a:11:67:
d3:b6:c5:9c:35:72:13:4b:05:42:f0:0c:ce:1e:6a:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:CF:74:55:31:AB:C9:9A:A3:96:E4:B0:63:24:1E:BC:F4:D5:0D
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0d:dd:76:dc:0d:d5:55:ae:f8:8c:ff:09:a1:0e:d6:f1:22:
1d:44:40:ce:88:4c:41:04:5d:69:ea:3d:a6:e0:49:09:81:77:
d3:3d:6e:fe:cf:ae:64:14:1f:0d:e9:75:a3:3e:2b:8f:ea:79:
81:4c:c8:6b:01:83:ca:24:08:85:2a:58:97:89:a5:ab:5e:4f:
dd:9f:ed:c6:08:1a:cb:bc:8d:b5:08:4f:e4:9b:c0:b6:53:3d:
9b:b2:3b:3d:af:84:00:c5:d3:ae:e2:c1:cb:85:9b:7b:bd:e8:
d2:92:87:64:30:95:1e:b1:6f:38:ac:9d:7d:46:11:e7:5b:22:
a4:9b:b8:93:d1:b4:aa:51:fd:17:3a:b1:d1:22:2c:67:44:ef:
50:cc:b5:38:1e:75:97:53:f1:3b:70:2d:8d:42:5d:67:ee:65:
9d:dc:8f:08:e8:68:b9:41:c8:40:4a:19:dc:4c:50:68:a4:ba:
12:91:db:c8:87:9d:48:49:96:18:ff:9c:8c:05:88:cf:c4:5b:
de:0f:6a:bb:a6:95:1f:58:87:76:2d:58:50:a8:6c:2c:90:b3:
24:f0:1c:40:20:af:7e:0d:12:42:7e:e3:8b:08:15:d1:99:3d:
9e:0a:f2:48:2c:a1:a5:05:84:60:d3:c1:3f:1b:c0:3a:c4:f3:
31:a1:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:01:30 2025 by rpki-client