Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: JgrueDe9iZ81Ok/V37KjGdUIBP9KuO7wCEQAESipoa0=
Subject key identifier: 39:7C:82:39:A4:53:49:3A:81:EB:9D:75:4A:77:2F:E2:48:A5:36:8A
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 0196748C25E863B9A3F1878B1AC2C7D9B854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 1105
Signing time: Sun 27 Apr 2025 00:01:03 +0000
Manifest this update: Sun 27 Apr 2025 00:01:03 +0000
Manifest next update: Mon 28 Apr 2025 00:01:03 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: WC9B3bvlE9RD7ZQNp7o13a7VLfJ8pFuMsZOqoX8vSW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:25:e8:63:b9:a3:f1:87:8b:1a:c2:c7:d9:b8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Apr 27 00:01:03 2025 GMT
Not After : Apr 28 00:01:03 2025 GMT
Subject: CN=397c8239a453493a81eb9d754a772fe248a5368a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:34:91:ab:4c:11:dc:af:f8:a9:57:47:38:
9a:1d:b2:02:f4:f0:35:12:82:c0:75:f1:9c:07:a0:
aa:a3:2b:8f:a1:f0:7c:fa:50:dc:14:36:da:39:be:
4c:77:be:6a:9f:50:c9:4b:e1:b8:74:3d:d7:8a:9a:
37:c7:6f:5c:25:d4:e9:d2:9c:ce:dd:25:c3:34:c8:
1a:34:22:9b:f6:ab:27:75:8d:07:9c:38:77:78:f7:
0c:28:6f:ba:3a:7c:30:8c:6d:9e:f9:5a:9e:a2:bd:
7d:57:4a:38:38:77:8f:62:5e:ce:70:c7:17:14:30:
2a:f7:e3:69:99:05:ea:d2:ec:8e:e0:90:52:e8:17:
72:86:4e:8c:9e:68:9a:fa:a5:e4:1d:1f:aa:e4:1d:
23:36:f3:c9:a8:bd:5e:d7:36:dc:1d:6a:bb:25:c0:
77:85:11:9f:db:fc:1c:3b:02:56:b5:4a:bb:0a:9f:
61:b7:a0:40:58:42:38:76:19:74:9d:11:f7:08:4d:
ad:95:80:5e:c3:60:bd:04:37:ff:8e:32:8f:24:d0:
23:ea:b1:95:cc:46:81:be:07:52:85:58:17:4f:b3:
ff:30:a3:2b:b6:85:f7:c3:78:f2:79:40:c7:4b:4d:
1a:d3:bf:db:2f:e0:44:e0:e8:30:c2:8b:45:c2:ac:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7C:82:39:A4:53:49:3A:81:EB:9D:75:4A:77:2F:E2:48:A5:36:8A
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a5:b0:a4:07:28:57:5a:05:6f:61:ca:c3:83:b7:b7:55:94:
d6:c6:80:53:92:c6:d3:3d:ae:72:6a:ef:0e:0a:43:1b:98:d3:
be:8a:94:e3:59:97:b8:b2:2c:47:21:27:e2:d7:cc:1d:9c:a3:
d1:2a:00:d9:d8:cc:2b:fb:cc:94:2c:0b:e7:58:d8:d9:01:97:
21:9b:89:46:58:de:1e:9e:c8:01:65:27:44:f2:2c:bb:49:da:
a2:14:58:36:91:4c:92:0d:28:9d:30:50:02:67:7b:c1:c0:ca:
3e:da:51:14:00:a9:1d:f8:9d:fe:3f:48:71:81:95:a2:6f:2d:
19:19:68:ec:4e:70:31:22:60:2b:e5:87:ae:77:93:c4:c0:ef:
7f:03:ad:64:7f:1a:28:b9:84:cf:b4:4d:15:f5:8d:df:c3:e0:
5f:68:14:6c:55:d0:ba:8b:46:f8:98:e4:e2:79:9b:20:3c:f1:
5d:e7:75:71:e0:00:77:13:c9:71:fe:e5:0b:4c:3e:50:a0:97:
01:5c:8a:91:8f:a6:c5:51:8e:e2:71:37:9c:a7:a6:53:b0:23:
63:c6:8f:5c:a8:ae:cc:5d:89:dc:cf:74:0c:1a:d2:d6:1c:85:
58:cf:b1:42:87:0a:3b:52:dc:76:db:d8:fc:ba:05:d6:93:a4:
3a:c0:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:16:58 2025 by rpki-client