Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: e9jPwXmxBPo1aOKvUPlAxwUNiX4C5IOyoiKe4COYedM=
Subject key identifier: AF:DD:0C:B7:A3:49:8C:B0:61:4C:D9:48:79:BD:6A:57:50:FD:B1:7E
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 0198898E277B24483BE2469217FF262B7721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 1219
Signing time: Fri 08 Aug 2025 12:00:51 +0000
Manifest this update: Fri 08 Aug 2025 12:00:51 +0000
Manifest next update: Sat 09 Aug 2025 12:00:51 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: O1WJtSpw7IAFJAjmivk9qkKK4O3Tl6rjnuC79J61A3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:27:7b:24:48:3b:e2:46:92:17:ff:26:2b:77:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Aug 8 12:00:51 2025 GMT
Not After : Aug 9 12:00:51 2025 GMT
Subject: CN=afdd0cb7a3498cb0614cd94879bd6a5750fdb17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:b4:c3:6b:16:57:5d:84:0c:ad:0f:0a:11:
1c:ca:e7:d1:8d:58:f4:76:47:38:7a:5d:5c:a9:1d:
34:39:23:54:a5:95:95:6c:32:f0:5d:ad:65:ba:0a:
bf:1b:2f:41:75:cd:74:6a:3c:83:c6:08:48:35:22:
88:dd:dc:18:ac:fb:2a:20:fd:1d:fb:55:e9:3a:c8:
0b:e1:24:56:8d:dd:dd:fc:f5:87:c4:ca:16:17:c2:
3a:cf:49:3c:d4:48:8c:22:47:ec:e5:e4:77:97:e7:
1b:a9:76:7c:09:1d:75:0b:84:88:35:e2:42:6e:29:
d6:81:ce:80:e4:48:4d:d0:d2:da:42:7c:26:dd:58:
7f:12:77:21:74:85:c0:df:c8:18:66:33:ae:66:52:
52:6a:c8:98:a6:e7:fe:0e:04:78:e9:b3:d3:4c:04:
4c:75:06:ff:cf:22:6f:00:2f:12:76:66:a6:79:d7:
62:83:d5:9c:48:32:eb:1e:1c:12:d9:01:67:96:a9:
c7:7c:06:30:c4:4d:9c:98:85:16:07:15:4a:ac:0b:
f3:f2:9f:e0:73:7c:81:ee:a5:08:fd:44:a3:68:2c:
c0:25:64:90:06:dd:e2:68:24:57:08:e0:5a:ae:da:
2e:32:06:23:49:6d:0f:22:53:02:17:f7:1b:65:7b:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:0C:B7:A3:49:8C:B0:61:4C:D9:48:79:BD:6A:57:50:FD:B1:7E
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cc:e5:74:20:45:a1:19:2d:7a:ae:60:a0:07:cb:4d:c1:43:
9e:ed:44:e7:1b:81:25:3e:a0:09:3a:e1:19:b5:1e:66:e6:a6:
6b:81:13:da:6d:25:a5:14:1a:de:a7:3d:18:68:a5:d1:12:51:
4e:83:a3:9e:b9:24:98:49:95:12:f9:6c:93:19:77:cb:de:6b:
dd:aa:10:91:18:29:c3:ec:67:b7:4b:ee:45:cd:1d:0b:eb:ef:
3d:26:3b:8f:74:37:f4:cc:98:6e:c1:d1:fd:9d:67:60:70:44:
a1:fa:48:b5:b6:7f:35:1d:3f:0b:cb:3c:9f:82:73:df:d1:d0:
c4:36:b8:a3:d8:3c:38:ad:23:a1:54:d8:23:7f:e2:1f:b7:6c:
14:91:bf:82:fb:50:95:aa:2d:cf:78:5e:26:03:88:0f:b3:a4:
8f:2d:e3:9b:90:45:ff:08:c5:00:a1:70:23:2e:a2:4f:4a:1c:
2c:c3:e4:81:f0:b5:48:84:56:02:9e:9b:56:54:c7:26:f6:0e:
ba:1c:d8:ba:24:84:fc:f4:3f:dc:e4:28:e5:7d:ad:6e:b8:90:
7a:77:8a:90:aa:f9:ea:ff:25:29:d1:7d:df:d3:69:43:9a:b6:
c1:6e:66:3c:ec:f2:ae:e0:67:11:21:a5:1f:91:5e:f9:86:5d:
8d:4a:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:36:56 2025 by rpki-client