Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
File: OVUKm3Usc5f29p6qaoDwm6f32Co.mft (raw, json)
Hash identifier: TnNr1Dda2/zF4gPAmUPq6x1cH3PDNiUXx1RCyuuZyLg=
Subject key identifier: 56:50:18:EA:8B:6D:AA:00:BC:B9:D3:BD:30:45:39:3F:FD:FB:E4:69
Authority key identifier: 39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
Certificate issuer: /CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Certificate serial: 01988C21A42C774BEC7E535DCFDD605AC028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
Manifest number: 20
Signing time: Sat 09 Aug 2025 00:01:11 +0000
Manifest this update: Sat 09 Aug 2025 00:01:11 +0000
Manifest next update: Sun 10 Aug 2025 00:01:11 +0000
Files and hashes: 1: OVUKm3Usc5f29p6qaoDwm6f32Co.crl (hash: EyVQKUzW+KP1BQfxuEhH+ihq4kSNBanxKq6DHBwexLk=)
2: ylMtZ7R7fkeUU1B9KHOMXQfIdGs.roa (hash: DSXOCCTFabtrlzKxDb8ds7fUzGa0VH3hHQbIA5SQrgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:21:a4:2c:77:4b:ec:7e:53:5d:cf:dd:60:5a:c0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Validity
Not Before: Aug 9 00:01:11 2025 GMT
Not After : Aug 10 00:01:11 2025 GMT
Subject: CN=565018ea8b6daa00bcb9d3bd3045393ffdfbe469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:37:ea:6e:a6:5d:2d:5c:46:02:a3:4b:f7:
b1:72:55:f7:c5:a3:2f:27:c0:27:ee:7f:c1:e4:af:
00:44:08:a6:32:78:b4:15:92:bd:55:f9:25:d7:09:
96:cb:5e:73:56:a4:f2:68:f9:72:31:8a:39:6c:0d:
dd:46:9b:31:ef:b5:11:44:6d:8b:9d:2b:70:38:f1:
13:96:ca:88:4f:d4:d5:6d:9f:5d:e4:ee:fa:7e:a6:
22:ff:dc:ff:bc:b2:cd:5c:78:38:54:de:9a:b6:0b:
fe:71:53:cf:c3:78:0a:1a:d1:36:70:b2:ac:76:b1:
a9:5e:e3:41:dc:ae:47:14:3d:80:cb:41:ae:86:0f:
97:a4:24:20:56:f9:44:2d:45:52:22:49:9e:67:99:
ae:30:ed:c9:1b:f9:fe:f9:e7:30:4a:46:10:d1:f6:
fe:b5:55:5e:b4:b4:49:c8:3a:08:04:c5:6c:c3:36:
ec:7f:90:da:a9:40:91:13:ba:63:4d:01:bc:7c:2c:
9d:04:7b:1e:7d:f4:3f:e5:c9:6b:eb:b9:50:c1:82:
89:c0:cf:d9:31:78:af:40:6d:a5:a2:4e:e7:64:52:
ee:ab:68:19:74:e0:c3:d6:7c:f2:9a:b4:27:5f:61:
f7:75:5f:cb:fe:57:76:a5:7b:af:75:90:07:ac:2e:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:50:18:EA:8B:6D:AA:00:BC:B9:D3:BD:30:45:39:3F:FD:FB:E4:69
X509v3 Authority Key Identifier:
keyid:39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:88:2e:a0:62:18:13:c2:37:35:46:76:23:8e:bf:5d:ba:cb:
18:93:db:72:8b:67:31:7b:1f:55:9e:07:b0:e6:eb:d5:40:49:
61:dc:c3:f1:5e:2f:a2:a8:2f:8a:03:4d:bd:b0:76:38:c2:85:
a2:24:6b:6c:87:2d:e4:15:02:f6:41:29:88:01:17:3a:fe:6a:
06:4b:55:10:40:9a:e3:49:82:26:62:bd:2a:8e:9f:3d:b5:f1:
23:25:11:04:fb:6f:3e:c0:92:73:68:04:ae:15:50:f6:d0:1a:
a8:1f:f7:bb:1c:65:1b:61:fb:6e:98:2e:e1:07:7e:d9:05:1d:
db:0b:bc:a9:d5:26:50:36:4e:52:ce:47:37:b4:3e:44:f4:73:
2a:95:c1:b2:10:19:d8:61:fc:8c:3c:cb:fd:56:0b:cb:94:42:
55:e1:e9:6e:77:dc:a5:49:7d:02:1c:10:e5:2e:6d:85:c1:01:
c5:65:d2:51:9a:8c:24:e3:d3:37:c5:b4:c1:52:8f:2e:47:99:
3d:45:b9:2f:82:f7:1e:49:10:21:b6:73:bc:7c:9b:47:30:67:
c6:3a:78:6c:65:bd:ec:d5:71:33:ec:e7:a4:3a:bc:9b:3a:60:
3c:1e:c9:aa:3a:b6:4b:6e:2c:4c:a7:1f:9d:51:17:89:43:c7:
76:7f:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:59 2025 by rpki-client