Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: yHpObObUhXUMYDP17V/Ixx0Kudg+8xTOKU8ssIUy4g8=
Subject key identifier: 89:2A:2B:5C:36:D8:B1:60:60:DD:33:7E:9A:22:72:3D:15:EF:C7:CA
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 01976D3DB0B82B143DACEEB3948045C5F638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 1137
Signing time: Sat 14 Jun 2025 07:00:48 +0000
Manifest this update: Sat 14 Jun 2025 07:00:48 +0000
Manifest next update: Sun 15 Jun 2025 07:00:48 +0000
Files and hashes: 1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: nrf/QKdyzhCZT3JN0AshizXN+m7p8u7CUhczRg/hXmc=)
2: wGg0J5Z28xFGgoF0T-AWE9a8nD0.roa (hash: kGXsD5CJ+k4dwjP4TcCf3ci1gDFHD1TYaxVZBZkFLBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:b0:b8:2b:14:3d:ac:ee:b3:94:80:45:c5:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: Jun 14 07:00:48 2025 GMT
Not After : Jun 15 07:00:48 2025 GMT
Subject: CN=892a2b5c36d8b16060dd337e9a22723d15efc7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:16:b1:2d:0a:1c:6d:88:f4:dc:87:ce:40:
6e:14:6d:8c:72:d6:61:21:5a:06:c1:f1:42:35:00:
3f:0d:6d:f4:f1:fe:ec:15:75:6b:0c:0e:27:50:00:
66:36:9c:d9:90:2e:a0:74:a4:27:4a:20:9b:27:61:
7b:69:bd:9e:52:1e:10:1a:5a:d6:7f:ee:96:26:85:
68:14:65:7c:fd:60:b6:52:68:20:c3:b5:bd:57:00:
0e:02:f4:fd:4c:24:e1:41:08:32:45:96:4a:3e:f2:
f7:dd:1c:e6:9a:20:3e:de:aa:91:9a:a5:3c:db:4f:
25:ea:ca:e2:8f:d4:bf:12:8b:12:ae:dc:d0:4e:01:
59:53:a6:c9:c4:17:07:4d:a2:a4:4a:6a:56:08:26:
32:c8:57:9f:fb:72:b9:4a:18:7a:ad:82:28:a3:1a:
cc:fa:0b:a3:e9:9c:86:08:57:06:70:1b:ef:4f:3d:
a5:9a:79:24:e4:b1:17:77:1d:e0:fb:b8:e3:a9:b3:
3f:30:8d:4f:5e:a8:15:6a:19:4c:0b:a9:af:a4:9a:
6f:d7:c7:af:e4:f6:a4:3f:11:55:97:0c:e3:b6:ab:
9a:7f:c6:dc:bf:e5:b9:29:05:02:a7:e5:83:f0:a7:
08:c2:2b:30:58:20:5c:0b:98:58:39:27:5b:c8:79:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2A:2B:5C:36:D8:B1:60:60:DD:33:7E:9A:22:72:3D:15:EF:C7:CA
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:01:d0:87:cd:af:5f:30:c6:87:de:59:8e:0c:41:6d:dc:ac:
ea:71:ed:30:01:50:92:ee:80:82:95:95:6e:4f:56:f1:63:2b:
51:ae:7f:31:0e:3c:3d:f8:98:41:78:27:c4:71:7b:ab:89:5e:
ea:01:be:5f:03:0d:6f:db:ca:b8:7c:50:05:9a:da:6d:9a:7e:
13:c0:ee:e5:ed:54:f7:bd:cc:c8:21:f1:52:b2:c7:5a:70:38:
9d:6f:b1:72:91:b7:74:14:21:48:ff:fe:1a:7d:25:78:c1:2d:
86:e9:5e:52:91:5d:e2:5c:a5:19:cb:0b:0e:c0:2f:a6:3b:d6:
67:93:f7:d5:ce:ec:36:85:9a:ed:e6:8c:ff:ec:84:da:2b:88:
c2:29:7a:68:32:73:79:85:c1:7a:23:e7:52:fe:cf:6c:15:48:
2e:72:af:20:6f:ad:16:85:3d:31:d7:79:2a:81:0a:80:0c:fe:
de:44:c5:cc:bf:ef:24:94:9e:58:d0:dd:27:8f:fe:b8:94:85:
49:1d:72:87:ff:0f:07:ed:b4:ff:8a:2f:93:4d:25:75:1a:12:
88:28:ce:b1:04:e3:23:8c:37:82:10:59:44:a9:8d:55:28:4b:
34:1c:18:8b:d5:e3:85:62:ca:48:d2:54:b5:e0:13:da:04:84:
76:6e:a1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:11 2025 by rpki-client