
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: 2WwXFIJWGKVXodhlM37gMlRz1g9louFykFnk3HqDAJ4=
Subject key identifier: 36:D5:10:B7:03:CF:9E:6F:5C:14:3B:25:68:B2:1A:47:52:BA:EA:BB
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 019875D09F81088CC7879F09E5681FE07939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0B71
Signing time: Mon 04 Aug 2025 16:01:03 +0000
Manifest this update: Mon 04 Aug 2025 16:01:03 +0000
Manifest next update: Tue 05 Aug 2025 16:01:03 +0000
Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: DtqXEB8u/QYauhFiTKLMqHFfP2+58ApoMSvaAP/DKiY=)
2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:9f:81:08:8c:c7:87:9f:09:e5:68:1f:e0:79:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Aug 4 16:01:03 2025 GMT
Not After : Aug 5 16:01:03 2025 GMT
Subject: CN=36d510b703cf9e6f5c143b2568b21a4752baeabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ee:e4:32:bb:e5:d1:84:7e:e8:ec:2d:f3:b1:
5d:cd:f1:f5:43:08:20:33:f0:ba:dc:eb:a1:56:52:
69:f1:02:47:ce:18:3f:ac:4b:4d:74:f9:46:3a:00:
1b:af:5f:7e:a2:f8:07:c0:52:1a:85:d1:fc:1c:7b:
7c:fa:ed:54:e9:fc:b5:97:15:3f:1f:b3:8f:48:c2:
3f:f7:50:25:4e:09:0c:e4:69:5d:eb:2f:90:07:00:
a9:f8:82:aa:28:95:bf:46:d4:74:15:e2:5b:ab:21:
5a:5b:79:cc:bb:a9:85:d7:1f:f1:4d:5a:4b:1f:fe:
da:d4:19:a6:18:d0:b5:ed:38:4e:a2:e1:9b:41:89:
e4:bb:85:65:ac:d2:e0:8c:9d:7a:3d:cf:67:fa:45:
3d:38:1b:7f:34:11:83:f6:cf:af:2b:d4:69:c7:49:
3c:9a:4d:f6:0f:f6:fa:32:3f:a5:e1:3c:39:2e:ba:
91:71:0b:5d:21:3e:95:16:26:eb:d1:f1:1c:2a:ba:
91:13:09:a2:2a:79:37:b9:7d:e7:e0:d6:af:4d:dc:
ee:45:ea:c7:ac:68:dc:3a:84:23:33:4b:b3:cc:0f:
d0:cf:18:2a:26:90:16:cd:ef:8c:bf:a2:8d:67:16:
07:f7:2e:f6:94:bf:14:c1:21:fd:bc:58:92:c6:bc:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D5:10:B7:03:CF:9E:6F:5C:14:3B:25:68:B2:1A:47:52:BA:EA:BB
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:43:82:74:4f:ec:11:bf:a9:77:ca:c7:6d:2e:1e:f4:33:40:
5a:65:8d:f4:49:0a:be:a7:7a:06:39:ea:3b:ba:83:ca:48:b2:
70:ba:ea:e4:7e:f0:e4:1a:ac:1a:03:66:14:0b:01:d4:de:71:
31:44:68:fd:5a:be:55:53:63:e3:11:2c:f0:82:49:d7:1e:91:
4b:a6:67:65:2a:56:aa:60:a0:22:a7:2d:86:a4:f9:74:4d:36:
ff:bd:80:3f:a9:b6:04:4d:77:a3:46:aa:37:a1:01:c9:d2:6f:
ae:5a:81:1c:f9:73:31:63:69:2e:e2:f9:bc:35:b6:05:ca:ed:
26:51:42:9e:d6:f4:c8:4a:bc:f1:0d:0b:00:70:3d:97:ce:c9:
9c:ec:5f:6c:04:a6:75:f9:32:44:de:9e:d7:d9:05:d6:ea:89:
5c:b8:d4:5a:b9:95:7d:e7:7f:1b:e5:7b:99:12:9c:80:41:66:
7f:4e:d3:87:0f:15:98:58:07:02:1b:9e:87:43:3c:97:bf:4f:
55:6e:8c:ff:d4:99:7d:18:2e:72:66:74:97:e8:65:a0:bb:4a:
c3:71:75:6e:28:9d:6a:11:94:c1:d3:83:b7:4f:bd:af:2a:6c:
fa:62:5f:cd:c9:30:b1:9e:d3:7a:82:b3:21:6a:54:96:26:a5:
74:a6:e3:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10J+BCIzHh58J5Wgf4Hk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh
MGZmNDMwHhcNMjUwODA0MTYwMTAzWhcNMjUwODA1MTYwMTAzWjAzMTEwLwYDVQQD
EygzNmQ1MTBiNzAzY2Y5ZTZmNWMxNDNiMjU2OGIyMWE0NzUyYmFlYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9O7kMrvl0YR+6Owt87FdzfH1Qwgg
M/C63OuhVlJp8QJHzhg/rEtNdPlGOgAbr19+ovgHwFIahdH8HHt8+u1U6fy1lxU/
H7OPSMI/91AlTgkM5Gld6y+QBwCp+IKqKJW/RtR0FeJbqyFaW3nMu6mF1x/xTVpL
H/7a1BmmGNC17ThOouGbQYnku4VlrNLgjJ16Pc9n+kU9OBt/NBGD9s+vK9Rpx0k8
mk32D/b6Mj+l4Tw5LrqRcQtdIT6VFibr0fEcKrqREwmiKnk3uX3n4NavTdzuRerH
rGjcOoQjM0uzzA/QzxgqJpAWze+Mv6KNZxYH9y72lL8UwSH9vFiSxryxVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbVELcDz55vXBQ7JWiyGkdSuuq7MB8GA1UdIwQY
MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt
NmUzZmE2MmNkMmRmLzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm
LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUOCdE/s
Eb+pd8rHbS4e9DNAWmWN9EkKvqd6BjnqO7qDykiycLrq5H7w5BqsGgNmFAsB1N5x
MURo/Vq+VVNj4xEs8IJJ1x6RS6ZnZSpWqmCgIqcthqT5dE02/72AP6m2BE13o0aq
N6EBydJvrlqBHPlzMWNpLuL5vDW2BcrtJlFCntb0yEq88Q0LAHA9l87JnOxfbASm
dfkyRN6e19kF1uqJXLjUWrmVfed/G+V7mRKcgEFmf07Thw8VmFgHAhueh0M8l79P
VW6M/9SZfRgucmZ0l+hloLtKw3F1biidahGUwdODt0+9ryps+mJfzckwsZ7TeoKz
IWpUlialdKbjMg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:32 2025 by rpki-client