Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
File: OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json)
Hash identifier: MAFJlN2CONKcvUAGhm9oPWBC1Zm+1gu9GsYf6QqVKzM=
Subject key identifier: BA:9A:99:20:99:0A:60:A6:E6:DC:62:9E:AB:F0:A5:32:4E:1C:34:37
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 019777C1AF7F8DB8835CAE57ECA2D1743B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
Manifest number: 0ACF
Signing time: Mon 16 Jun 2025 08:01:11 +0000
Manifest this update: Mon 16 Jun 2025 08:01:11 +0000
Manifest next update: Tue 17 Jun 2025 08:01:11 +0000
Files and hashes: 1: 1-5V6RXgQOXjxU3mO34q_0PmmYk4.roa (hash: UBzppXP3Ubih2qJBoeebTWZSAjaul2dwW+uHzrrKrpI=)
2: ALdpivp7qzpUB5jnmeapFiwkGxg.roa (hash: 7MA0ajseX1lz/krgeoOJVgQJUF4DBwVOkQ4FKnVb0B4=)
3: EyL9qIdoOkum4j70O97owcKKNdo.roa (hash: CPup2t2Dcwh/1Zx2zcdDGMOwGKKSbKozTe/yHf2vibg=)
4: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: imHXMToRX/bIYcVXnEQPTsYimlUV/H54VHdlzKwpReY=)
5: R9lxjYdjsKxlvanBaxZtqFtiK5M.roa (hash: EAnasKsXxwBwZXC0ThjWuRnRdndnASQeOuSOk8haA34=)
6: mdUceimjZwfVVG0REiUEooQJhAE.roa (hash: LzFwucR3C7CoRMDtQiS0SQDDS6RSOm6dTPZ+EmCdgOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:af:7f:8d:b8:83:5c:ae:57:ec:a2:d1:74:3b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Jun 16 08:01:11 2025 GMT
Not After : Jun 17 08:01:11 2025 GMT
Subject: CN=ba9a9920990a60a6e6dc629eabf0a5324e1c3437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:27:6b:6e:2a:39:21:2b:69:2a:75:ab:32:
8a:0f:e5:97:93:6c:97:9b:b0:4d:5f:f6:73:7b:19:
ec:36:69:2c:41:53:6a:1a:ca:62:c9:03:20:ec:56:
52:d0:1e:f3:36:8f:80:25:68:31:99:5a:26:e8:15:
a6:78:72:a6:c0:3f:4a:ad:dc:75:c8:7d:b6:79:16:
4a:f2:fd:75:f6:06:14:85:f9:c9:3d:d3:e1:b7:19:
e8:14:e3:26:40:f9:3d:c0:db:bf:1f:4d:91:1a:cc:
f3:03:26:d7:42:97:6e:bd:b6:de:e5:ad:8a:14:dd:
9b:c6:25:e7:c8:4b:1c:45:2f:43:8f:98:fc:fe:74:
01:32:e9:2f:42:bb:2a:d2:72:aa:ff:76:a1:30:12:
c8:14:61:19:d7:59:8e:e3:57:c1:c7:db:18:73:d2:
20:33:fa:1e:9b:d4:f2:10:1f:95:1d:b2:94:f5:69:
ac:5e:a0:e0:2e:bb:40:54:f3:f8:a4:68:50:32:28:
4b:a7:bc:54:e9:b6:f5:4f:b2:56:f3:68:ff:18:81:
3c:85:8c:c8:0c:24:33:8d:b8:46:a2:f7:20:be:98:
5b:cf:86:49:d4:85:66:89:ea:d7:2e:4b:e3:10:41:
47:08:13:68:30:f4:3d:e1:bb:83:83:bb:29:9e:ac:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9A:99:20:99:0A:60:A6:E6:DC:62:9E:AB:F0:A5:32:4E:1C:34:37
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a4:c5:97:52:e7:f3:97:04:aa:c3:02:1a:5b:4b:05:9b:b2:
ee:31:62:d1:45:85:54:99:35:19:6a:9a:0d:b9:3e:77:72:07:
3c:c4:c7:fd:05:e8:4f:4d:f0:4e:b2:87:df:3f:b7:6a:2f:e6:
13:da:6f:14:87:cd:0b:fe:e3:5b:fd:77:cd:c2:a6:f5:a1:58:
fb:6e:ef:1a:25:ed:59:d5:79:c5:36:63:6f:1a:c9:b1:78:42:
7a:b6:e4:7e:1b:d4:67:40:af:22:2a:a0:61:89:e2:00:02:a4:
d4:a4:0f:32:53:6a:37:90:25:05:88:41:6e:14:18:ba:a4:00:
56:c5:e9:2d:2d:cd:19:37:76:ec:d2:04:3f:c3:e3:61:b0:b1:
a0:c3:11:40:35:a2:be:d3:a0:54:34:8f:87:b9:9d:fa:e6:df:
3a:d2:75:cc:5e:ca:d1:75:f4:2a:b8:d2:2e:ab:fa:a0:67:6e:
91:b9:47:d7:cf:63:f9:d8:b3:40:58:f1:17:9c:0d:61:04:bd:
a4:bf:99:4d:28:95:f2:e5:71:88:ec:da:36:dd:d1:f4:88:cd:
c0:32:4c:d3:c0:0e:d3:52:18:fb:5c:e4:42:ed:e5:cb:fe:0f:
d4:ae:42:b4:53:4a:c3:1c:34:de:49:9b:57:90:83:73:32:70:
3d:01:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:08:26 2025 by rpki-client