
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File: ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier: N91YEYyrygrj8VMwoiAH71TPH3Qc4T5IFWzvGv84wT4=
Subject key identifier: 13:B3:B0:12:4A:6B:4C:6D:49:AA:2B:CF:D4:5C:F3:86:6F:C2:45:CD
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial: 0198D7062B91550E8E1AE2DCD0D87D21FD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number: 0B15
Signing time: Sat 23 Aug 2025 13:02:42 +0000
Manifest this update: Sat 23 Aug 2025 13:02:42 +0000
Manifest next update: Sun 24 Aug 2025 13:02:42 +0000
Files and hashes: 1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: jKQsSO4PB0Z/ToiyfdAaKvd9H125Jhf1R8STNkHtv6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:2b:91:55:0e:8e:1a:e2:dc:d0:d8:7d:21:fd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Validity
Not Before: Aug 23 13:02:42 2025 GMT
Not After : Aug 24 13:02:42 2025 GMT
Subject: CN=13b3b0124a6b4c6d49aa2bcfd45cf3866fc245cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:9b:8c:da:22:47:db:e7:6d:d6:36:33:01:
8b:f6:a1:55:df:13:03:01:da:4e:07:e8:62:67:62:
85:9a:88:f2:b0:d5:d7:68:6b:07:3b:99:e0:47:ae:
9d:9a:bb:ae:cc:7c:1d:74:c4:61:5e:a6:d5:0f:33:
a0:fb:9c:f5:69:56:97:05:b8:e4:66:52:01:d6:26:
4c:84:35:17:55:bd:b9:2e:20:9c:cf:ef:f4:fb:6c:
69:e9:80:3d:c5:9b:87:85:e6:09:8a:1e:90:28:8d:
57:f6:d0:54:fb:d9:2c:1c:32:23:c0:d3:15:cb:99:
b8:42:23:17:56:44:ad:30:c0:b5:1e:fb:d4:86:c2:
5f:12:90:33:70:1a:b8:a3:e7:06:33:88:ff:89:ba:
82:22:b5:9b:7b:20:b0:f0:46:f1:8a:ee:40:d0:df:
56:86:d5:1e:4a:3a:16:75:11:39:e4:4b:20:34:2e:
4d:16:1f:5f:6c:2c:65:a9:71:6b:7e:e0:61:c4:62:
9f:1d:95:37:1f:92:70:88:93:f3:5c:bd:d9:9f:bd:
2d:f8:dc:5c:8c:33:47:5c:27:4d:0c:b6:28:cc:6f:
d0:77:34:63:95:4b:3f:95:03:eb:37:a8:b3:e0:6a:
bd:c4:62:3a:7c:03:40:ed:0f:98:9b:52:ba:6f:27:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B3:B0:12:4A:6B:4C:6D:49:AA:2B:CF:D4:5C:F3:86:6F:C2:45:CD
X509v3 Authority Key Identifier:
keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:eb:0b:41:a3:ce:b4:81:0f:9e:6c:e8:e7:b3:fa:55:83:f4:
49:ce:a2:77:ce:bb:c5:c8:74:da:d5:1b:e2:0d:0c:67:46:bb:
98:1e:46:6c:7d:f8:19:7a:0a:41:4c:75:37:e0:5f:a0:91:0d:
0f:d7:4c:2a:85:8c:12:ea:45:f9:81:14:46:86:ae:8e:e9:12:
12:ff:15:c4:85:95:65:c1:c0:b1:69:64:37:9c:43:7f:9e:43:
ad:b6:b5:16:97:2a:23:0d:e6:c0:07:89:6f:7c:33:da:27:0f:
fc:9c:9c:c0:69:5a:23:a9:c7:d5:df:d0:42:c0:29:57:97:bf:
9d:91:e5:57:68:f6:08:88:01:a0:34:f8:0d:43:4c:70:fa:4e:
2c:82:20:13:df:d4:b6:8d:9f:95:e4:41:9b:a7:59:fd:a4:bb:
48:01:73:5e:c7:54:58:76:62:d3:5b:37:d4:c1:0a:6c:b9:6b:
45:76:58:a0:53:69:ef:95:80:c0:39:68:9b:cd:0b:5e:9b:03:
35:b8:da:c3:71:86:aa:2a:9a:3c:ca:b7:fe:1b:26:b7:05:6a:
81:50:44:64:ad:d2:be:b1:2b:f8:25:2d:a3:0b:ba:b6:c9:74:
f5:e6:df:a6:4b:48:ce:20:9a:75:d3:d9:b5:67:e6:2e:6e:2a:
6f:80:66:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:44:02 2025 by rpki-client