Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File: ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier: wSpME9D6DXCamOOPT7W5/ke+ApAd7H488L9K9VozB9E=
Subject key identifier: 91:10:D4:36:EB:D4:7A:04:6E:C8:47:31:A2:ED:6B:E1:F6:AE:5F:64
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial: 0197B74516EAE47A0972AF48BD7E976A7D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number: 0A80
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: wD+7ejs8S8w3asI64y+27uJ1r5PSlegc6f3TJuWxHPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:16:ea:e4:7a:09:72:af:48:bd:7e:97:6a:7d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=9110d436ebd47a046ec84731a2ed6be1f6ae5f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:00:cb:41:0e:c1:25:20:60:d4:ea:30:6d:
4a:99:90:30:00:22:6f:e9:42:a7:7d:a2:03:c2:79:
af:4c:88:c7:92:12:4a:80:aa:b4:1c:ec:0f:1f:43:
bb:91:cc:64:fb:90:bf:15:95:e9:ae:bf:4e:ff:f2:
65:7e:f1:02:f4:5e:1e:3a:05:19:24:6e:f0:cf:30:
21:0b:7f:4c:e4:57:40:bc:5d:12:ca:b3:11:e6:26:
d4:53:95:72:74:99:54:9f:8d:f2:18:41:31:a9:8b:
0e:c9:16:74:3f:59:f1:d2:38:38:8c:c2:d8:b3:30:
82:28:54:6b:7b:01:f6:e6:b9:8f:31:55:00:ef:ad:
0c:93:94:9d:9e:34:c6:4d:f3:26:03:c9:62:8e:ca:
33:35:f8:d1:c6:da:05:61:c9:0f:22:e9:62:f4:61:
f3:6c:6e:01:c9:b3:2d:23:ff:bd:8a:63:2e:57:4d:
e1:5b:84:9c:4b:38:fc:ae:11:b2:a0:ce:3d:8b:75:
4d:66:f9:32:88:58:2d:f9:32:7e:c9:5b:19:8c:05:
d0:e3:ef:7d:ff:25:b4:44:b2:13:c5:ae:33:0f:e7:
c7:cb:67:7b:46:46:fd:05:0e:c8:f5:2c:93:b9:5b:
00:32:e8:49:a9:eb:cb:49:0d:59:05:d0:e4:1b:f3:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:D4:36:EB:D4:7A:04:6E:C8:47:31:A2:ED:6B:E1:F6:AE:5F:64
X509v3 Authority Key Identifier:
keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:34:9d:c3:45:b1:41:0c:3b:36:ae:92:06:59:b0:6c:66:a1:
55:94:e9:54:c3:15:f6:61:26:a4:b4:60:cd:63:ca:a9:ff:73:
7f:bd:fb:24:3d:82:e6:cd:32:5a:cc:e9:15:95:30:d0:ec:11:
b7:5e:43:b3:88:d8:22:ba:25:02:8b:ec:64:46:06:1b:0e:07:
97:2e:9d:5f:e4:05:5c:db:89:c8:f2:84:25:51:4f:77:01:fd:
f3:63:e9:5f:9b:55:c8:43:50:4a:f1:35:47:3d:99:09:99:3f:
77:e0:5a:d3:81:f0:dd:a9:a2:cb:52:e2:cb:7d:32:ed:fe:1b:
e7:46:c5:71:04:7d:c7:81:02:de:52:8c:ba:c2:67:0f:20:a7:
db:3c:b1:9e:67:03:4c:3d:61:79:20:8d:32:4c:11:c2:20:da:
8b:c9:7a:ef:bb:c7:ae:83:9b:b5:08:5a:74:85:1d:c5:af:28:
9a:e4:2b:8b:fc:50:46:e3:3c:27:68:c2:75:46:bc:fd:ba:ec:
b3:1e:7b:30:bc:18:63:89:4a:8d:de:3c:ee:73:64:80:1d:bd:
e8:11:a3:4a:3f:b2:c3:21:fd:41:30:56:25:fe:e1:bd:db:72:
b5:30:8a:e5:d6:4a:9e:f7:38:6b:78:34:43:5c:39:3d:ac:08:
f1:6d:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:21 2025 by rpki-client