Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: PEns8IcufOamZdzpd/g309vRmHNNzeqvpsliefGY6Ss=
Subject key identifier: F4:68:29:C4:AB:69:5E:AE:6D:7C:DB:8C:86:07:B1:A6:A7:0E:AC:D0
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 019780FB58D49C8F301A15893ED02911AFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 1190
Signing time: Wed 18 Jun 2025 03:00:45 +0000
Manifest this update: Wed 18 Jun 2025 03:00:45 +0000
Manifest next update: Thu 19 Jun 2025 03:00:45 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: l49w0wO9yziwDwtf/z9yt0UYQJTCW/yoHF805zGHokA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:58:d4:9c:8f:30:1a:15:89:3e:d0:29:11:af:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Jun 18 03:00:45 2025 GMT
Not After : Jun 19 03:00:45 2025 GMT
Subject: CN=f46829c4ab695eae6d7cdb8c8607b1a6a70eacd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:3f:08:50:ce:d1:c2:f1:9c:db:c1:09:85:
2f:bf:fa:1d:9f:1d:84:c7:21:37:96:30:6e:fb:a6:
c9:b9:6f:b5:07:76:72:2e:07:21:08:9f:54:03:7e:
c2:90:ec:a2:04:20:68:c7:c6:b8:f6:da:d5:21:cb:
02:d6:85:32:d0:b4:f8:7b:a3:9c:c6:d0:b5:50:ee:
6b:eb:27:25:43:af:31:21:f5:3a:eb:d1:d7:77:f0:
a4:33:86:83:22:ed:e6:61:f6:51:27:64:2c:15:fb:
55:0d:56:f1:57:4b:16:b6:eb:dc:91:fa:5e:f5:8a:
8d:c1:3c:60:57:fd:78:ba:ec:0a:5b:60:69:23:84:
94:3a:69:76:7d:cb:75:2b:51:5c:db:d2:8d:d9:6d:
eb:3c:c4:54:90:de:00:74:b9:31:58:d0:3d:2a:fb:
bd:46:44:7f:31:2d:74:5d:a6:2e:5e:cf:b8:16:ea:
15:21:84:07:19:5a:44:4d:c3:ce:db:b5:40:91:61:
b2:2b:25:3f:8f:3a:ce:b4:e2:71:7f:23:28:4a:6f:
82:49:18:27:88:f7:52:07:63:23:ef:e6:31:81:2c:
51:f9:0d:d8:a8:ac:ff:77:8e:d9:54:4b:5e:5f:77:
c2:7a:42:94:75:98:5b:a7:90:a2:e0:f5:10:a2:8c:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:29:C4:AB:69:5E:AE:6D:7C:DB:8C:86:07:B1:A6:A7:0E:AC:D0
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5e:21:77:5e:2e:69:0e:47:f8:d3:fc:10:89:c6:26:94:be:
59:fe:48:72:b9:cc:97:a8:00:14:ad:57:41:53:25:85:34:ef:
a6:23:8e:e7:c4:8c:88:10:b1:76:c4:c8:18:09:c3:02:22:69:
12:19:ab:53:40:0a:a0:ab:af:9e:42:3d:96:d4:90:08:23:ec:
c6:e2:f2:8c:63:59:1c:f8:5c:0b:f8:21:3c:b9:77:47:98:6f:
c4:34:59:e4:72:3b:d3:fb:7a:2d:ef:25:5a:52:78:65:1a:ed:
34:98:f9:b7:f1:55:8d:46:be:83:9b:8b:4e:15:61:8c:d8:9a:
14:66:c4:f2:47:40:51:f4:b6:f8:da:dd:4c:e5:54:cb:19:ef:
4e:4a:d7:71:66:be:af:03:9f:5b:f3:3c:46:c2:1c:cc:98:87:
3b:a8:98:01:40:50:26:1e:fa:51:ea:ad:b6:f4:ff:88:08:0b:
7e:88:e5:1d:38:96:a8:61:78:a3:cc:05:7a:cd:1b:1c:91:8a:
f0:6e:02:11:6d:5d:7b:1c:bb:bc:57:59:71:e8:63:6d:b6:cb:
00:2f:50:18:2d:c3:4e:18:08:e5:b5:c7:9b:0e:70:4b:ab:90:
e6:a9:ce:46:7d:11:70:b5:63:01:28:87:44:f5:8d:d3:3a:be:
4d:81:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:01:25 2025 by rpki-client