Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: v3hvyYIaswlwTuvfbeHnpEoX9u6/r+eE+GEeOoiAcCc=
Subject key identifier: F1:58:89:43:46:D0:60:44:73:A6:E6:77:84:5E:71:FB:8A:6A:49:C6
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 019873E325E79ECFE711A3AA2BF104744BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 11BF
Signing time: Mon 04 Aug 2025 07:02:02 +0000
Manifest this update: Mon 04 Aug 2025 07:02:02 +0000
Manifest next update: Tue 05 Aug 2025 07:02:02 +0000
Files and hashes: 1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: vx7P6ko9nTsEEODb51GLhnEXgEWG7siC4sUDoTUxRts=)
2: wGg0J5Z28xFGgoF0T-AWE9a8nD0.roa (hash: kGXsD5CJ+k4dwjP4TcCf3ci1gDFHD1TYaxVZBZkFLBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:25:e7:9e:cf:e7:11:a3:aa:2b:f1:04:74:4b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: Aug 4 07:02:02 2025 GMT
Not After : Aug 5 07:02:02 2025 GMT
Subject: CN=f158894346d0604473a6e677845e71fb8a6a49c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:15:0f:d5:ee:48:85:51:8f:4f:cc:1a:1e:8e:
c2:5c:b5:38:ba:d8:53:55:e0:42:d5:42:fe:bf:57:
c1:d2:c8:00:a6:90:c7:e3:43:f8:41:db:30:0d:c1:
3f:c2:50:45:1b:d6:35:d6:91:16:ba:79:cb:36:d9:
3a:88:aa:0d:4a:a3:8e:dc:57:2e:c6:81:25:c3:bb:
fc:3a:b7:d9:a5:d6:e9:83:e4:0a:33:5e:0d:c7:02:
67:0a:ea:72:19:91:c3:96:23:81:29:02:ea:69:a3:
96:4c:39:14:16:6c:93:2c:1f:86:b8:c5:6a:9a:4e:
d9:f9:82:03:e4:9e:d9:03:71:1f:c2:8e:5d:de:e1:
11:57:5c:4a:91:7d:0f:6b:4e:dc:26:ad:6b:d9:58:
3d:e0:a7:db:6d:49:88:b5:5e:3f:fd:88:e1:77:23:
5b:1d:47:fc:4a:9c:4e:76:3a:bd:fa:bf:2a:6a:71:
2f:b8:72:83:5c:28:b5:3a:58:f3:c1:e0:7a:39:ad:
15:9c:98:64:9e:fa:46:1b:6a:fc:7e:12:1b:29:8e:
0c:8f:09:46:96:6c:ac:17:c3:f6:03:41:56:bf:e3:
2e:be:40:b5:87:ea:73:a6:60:24:e3:53:eb:8d:44:
a3:27:b8:35:46:43:3f:2b:4e:63:db:36:57:15:fd:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:58:89:43:46:D0:60:44:73:A6:E6:77:84:5E:71:FB:8A:6A:49:C6
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9d:45:93:21:f3:54:8d:29:d8:ca:74:ab:c8:bd:de:f5:ce:
5a:0c:fd:49:a9:c4:c5:e0:ff:18:43:75:16:e0:6f:00:d8:b6:
06:63:d3:63:6e:01:e5:7d:ac:a6:8e:00:b8:9a:fb:a8:fb:45:
c3:50:29:71:60:df:d6:41:a4:e9:0c:e7:44:44:83:8e:7e:db:
cb:47:6f:62:f5:5f:c1:0a:80:85:9e:f1:8b:ba:41:d1:d3:72:
3b:e2:82:f9:65:02:e1:3b:ad:77:e3:4a:5c:58:d3:c5:01:25:
db:7e:1e:4c:bc:4d:bc:48:6e:04:2e:c7:d0:48:1f:22:fd:01:
19:e1:a3:61:08:fe:74:de:4e:32:f8:14:ba:63:f8:c1:df:03:
5a:f3:81:e2:1c:a2:2a:84:0d:8f:d0:17:0f:35:02:ca:3a:d4:
0f:f4:b5:fc:06:70:7b:4f:2e:89:3a:dc:10:d8:dd:63:e7:e8:
66:bd:0a:a3:06:7b:8d:e6:77:f1:25:21:53:af:89:e5:3e:2b:
cc:94:01:ad:72:d9:9e:c8:6c:65:45:b2:2b:02:a7:74:6e:92:
ca:60:fe:69:71:ac:58:d8:fe:53:cc:e8:dd:40:b1:6e:8c:b5:
45:3c:06:2c:d7:09:56:b1:bc:77:cd:37:f3:74:b0:7c:f1:89:
95:a0:fd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:51 2025 by rpki-client