Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: 8dmrYb/G9mtjym1sEmkWY1cJYCvr4t1/mrmywYLVQNw=
Subject key identifier: 9B:66:13:46:DC:93:18:00:E8:D4:C3:EE:9D:1D:74:66:6D:02:15:E4
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 019A50E399E252846F9DFF090229952EC5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0C67
Signing time: Tue 04 Nov 2025 22:01:24 +0000
Manifest this update: Tue 04 Nov 2025 22:01:24 +0000
Manifest next update: Wed 05 Nov 2025 22:01:24 +0000
Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: msTMbJQiXAsHldoUt+8qEmiM9g6TbIsId16dulNTjEk=)
2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:99:e2:52:84:6f:9d:ff:09:02:29:95:2e:c5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Nov 4 22:01:24 2025 GMT
Not After : Nov 5 22:01:24 2025 GMT
Subject: CN=9b661346dc931800e8d4c3ee9d1d74666d0215e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:f2:aa:e6:eb:dc:9d:65:77:98:a1:53:e9:
6a:13:5a:43:87:a4:46:b9:b3:ab:a2:ec:3e:f8:ba:
2b:13:e9:c8:4e:d7:39:1f:d1:06:0c:25:9e:30:53:
26:4d:4d:67:81:7b:12:4d:96:fd:49:06:f1:d2:18:
3a:ea:b2:dd:2f:0c:7c:8c:0f:18:21:f0:40:12:70:
44:f6:c1:a3:e3:13:f6:ff:fc:81:4f:c6:24:bd:22:
39:93:36:97:76:20:a9:3c:73:11:76:67:27:f3:84:
58:2b:75:68:68:29:3e:2e:8d:c7:77:ff:16:7b:de:
bb:d7:bb:3f:ad:28:fc:44:9d:c9:8d:3c:4b:37:a1:
a1:d3:ae:d3:91:e7:e9:62:9f:b2:15:55:86:d0:1c:
09:9e:b6:af:15:4f:ef:8c:bf:a0:48:37:1c:ae:24:
14:b6:c5:14:b2:f1:fb:b6:21:0a:7e:6e:79:a7:6d:
6d:da:0e:b5:4a:bf:7c:0a:84:a0:96:78:54:0d:db:
f7:55:e6:5b:a7:37:0b:b3:8c:97:82:cd:8b:0a:fa:
c3:fe:52:e2:c0:56:d0:e6:b9:ae:ed:95:52:94:22:
32:7c:39:10:9a:d9:e1:f6:eb:9f:82:c2:b1:4a:1d:
15:7c:84:d2:1a:83:fc:b0:cd:fe:0b:e6:08:c1:66:
5a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:66:13:46:DC:93:18:00:E8:D4:C3:EE:9D:1D:74:66:6D:02:15:E4
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:13:07:ed:7e:cc:c4:2e:97:bf:3f:59:40:b5:36:62:30:f8:
85:f7:50:83:19:dd:18:b9:3d:b1:35:22:d3:2f:25:5e:a9:19:
ed:79:ac:a1:eb:da:77:13:a6:f6:80:4d:b0:43:28:86:dd:6a:
93:2e:b5:2d:e6:e3:a5:94:9a:e1:48:90:e8:ef:00:ab:db:e0:
79:0f:d1:f1:2f:04:54:2c:f8:a6:c6:20:94:03:80:2c:f8:5e:
02:78:58:60:2a:7e:29:58:7b:c2:81:8b:24:ec:20:1a:ee:8e:
11:c0:a6:b3:3e:55:65:aa:9c:7c:0f:51:d1:f2:33:92:35:4a:
05:67:1b:33:71:50:f2:e8:10:55:d6:85:11:4b:d8:73:74:5e:
2f:61:ab:59:b7:1c:ad:1f:a6:74:1a:50:0b:5d:a0:b8:33:3f:
cd:4a:1c:20:61:91:1d:3b:8d:10:52:a6:c9:73:71:23:41:9b:
d8:e1:f2:09:21:6b:c8:fe:ea:1a:a0:66:b1:41:f2:fb:11:44:
3c:e4:87:fe:d2:3d:36:27:6c:2e:ec:fe:6d:a0:93:3f:b1:2b:
80:9d:e8:ca:1b:3e:1f:ad:49:34:ee:b4:35:d5:65:eb:ff:74:
88:f5:97:9e:e6:7a:5e:3b:cb:f6:df:22:06:2a:0a:14:bb:55:
44:00:33:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:44 2025 by rpki-client