Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: mDmchnaJ2R420qnTHYSd5O+GvmoMDsx1wapqLN1l+TU=
Subject key identifier: BB:EE:A0:CC:8F:44:98:5E:D3:6D:F0:C2:80:CD:DE:64:6F:BD:3E:63
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 019891487DA9EF4E75B3EC404B427E710D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 00:01:43 +0000
Manifest this update: Sun 10 Aug 2025 00:01:43 +0000
Manifest next update: Mon 11 Aug 2025 00:01:43 +0000
Files and hashes: 1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: GX8Y+9k1TjVXIyXXNZbhHvHLC24FEgKky+m0/gRkvgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:7d:a9:ef:4e:75:b3:ec:40:4b:42:7e:71:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Aug 10 00:01:43 2025 GMT
Not After : Aug 11 00:01:43 2025 GMT
Subject: CN=bbeea0cc8f44985ed36df0c280cdde646fbd3e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:0b:1d:c7:ce:d0:76:dc:36:a0:a7:8e:0c:
2f:b8:c5:0a:00:c0:e8:9c:1d:7d:2c:13:4c:7a:1a:
c6:58:86:1f:98:fe:6e:80:b1:4c:40:1a:3d:13:84:
25:88:d9:20:91:ea:54:ef:d8:5f:49:76:e9:c4:20:
6c:b3:cf:bc:3b:24:ff:0e:34:e3:30:1d:2b:fa:8c:
91:3e:58:8b:8c:ee:c6:2c:a3:fc:15:c5:e6:1e:99:
f1:9a:2b:02:17:f3:18:e6:b8:ff:f3:4d:41:3d:ce:
73:9f:50:6d:b2:14:d2:82:41:bd:d9:f4:8f:6d:7e:
c9:83:57:21:4a:bd:91:9d:58:64:6e:54:be:57:e3:
af:34:57:41:37:dd:c2:cb:74:00:a1:9a:e6:b0:04:
0c:73:33:40:37:c4:22:23:ef:2c:02:29:36:47:10:
bc:cf:4b:79:fe:4b:ed:e8:d4:4e:73:17:de:68:9f:
05:ae:ca:6c:46:9d:d4:e9:a6:8f:0c:0c:6a:40:02:
c7:44:fe:1a:f9:7a:f0:37:31:8a:fe:20:dd:e1:2e:
2c:1b:8f:87:89:97:ff:d9:4e:15:2f:c4:e7:01:7b:
8a:23:65:c9:09:e9:5e:f5:ee:ae:e2:a9:9d:96:27:
b8:73:c7:6c:06:76:41:2a:ae:31:06:a3:15:08:db:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EE:A0:CC:8F:44:98:5E:D3:6D:F0:C2:80:CD:DE:64:6F:BD:3E:63
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ca:ef:44:5e:df:37:8f:38:b3:be:27:a3:37:60:f5:7b:53:
95:9d:68:6f:a0:43:21:05:24:7a:df:cf:db:78:73:1a:7b:20:
45:36:fc:3c:17:b6:a3:d6:95:4c:e3:bd:7f:00:11:1a:85:38:
0b:b4:17:60:77:55:e8:67:46:d1:aa:81:5b:3a:ed:0e:86:13:
ce:83:89:b9:70:a3:ba:1d:44:59:ee:05:22:73:f0:82:3e:ce:
4a:d3:44:e1:c7:d6:ce:91:1d:cb:84:45:37:d5:4b:c9:ae:ee:
40:f3:64:0a:0f:0c:79:6c:6b:49:79:8e:4e:bd:b3:53:b3:8b:
ad:12:af:f2:2e:95:f6:fc:83:06:81:94:b5:46:ad:c3:a3:fe:
59:86:92:a8:8e:f2:61:05:66:ad:91:e4:d3:77:14:45:bb:86:
51:7b:98:cb:2f:92:a4:81:10:0f:27:f3:39:e5:c5:68:ff:da:
04:9f:a8:90:10:be:b3:96:0e:8c:82:b0:60:be:6c:24:87:a5:
d6:df:06:be:a9:7b:37:95:ec:80:8d:7b:d9:72:00:1f:84:73:
bf:df:24:b5:3c:b6:90:4f:8e:ac:6f:c4:37:d9:fb:f3:b9:b3:
4c:04:5c:ae:d3:bc:35:12:ee:29:0c:ec:bb:70:2e:ed:aa:27:
c1:9a:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:15 2025 by rpki-client