Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File: ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier: St3ck99odE2MCmHXRg5ie152RiZCOLDeuGa1MtXcPvs=
Subject key identifier: 03:94:41:BF:AE:66:BE:5F:D2:DA:C0:DD:11:76:83:36:CE:DE:D5:9B
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial: 0199FC8F414C8B7541A5CB001B90B5F30CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number: 0BAD
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: F9/eTvmxxJCwcu2q0mlf+/FL3K6a2wwFinHAcpqk5CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:41:4c:8b:75:41:a5:cb:00:1b:90:b5:f3:0c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=039441bfae66be5fd2dac0dd11768336ceded59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:4d:24:86:2b:96:7b:9f:31:ca:3c:61:09:
75:c2:c3:47:75:6c:c5:a8:d5:0f:fb:84:d6:89:3a:
73:9a:98:3e:75:68:39:28:84:b0:e5:71:17:a4:fb:
67:58:dd:18:d7:50:e9:c9:df:c6:88:fb:14:10:e2:
7e:b8:2b:fc:73:f8:42:76:96:b7:cb:8b:67:44:20:
a0:76:8a:c3:d8:42:db:26:67:b8:a7:fc:7a:c2:20:
4e:a3:8e:5d:99:fc:88:f4:8b:49:c6:58:c9:fb:77:
34:2c:7a:8a:79:a0:0a:4e:8f:d8:79:6d:31:c9:5b:
43:9c:21:e4:47:fc:f3:1b:e9:19:b6:aa:22:4f:64:
43:46:94:8d:73:3f:45:4f:44:bb:5a:ff:9a:46:a1:
40:3b:db:1e:13:cd:ad:4c:79:e7:07:8b:c5:ad:d7:
98:75:52:b9:2f:ea:4a:32:30:ea:0f:75:c8:7c:9e:
5c:ca:91:74:57:5d:dd:41:be:01:31:77:37:6a:49:
eb:c9:bd:af:2a:66:0b:d7:d8:d2:e2:d1:3c:b2:4d:
13:76:a9:f0:16:5b:db:48:7a:16:86:1f:d9:71:e5:
1a:4b:94:91:28:06:8d:f2:c7:04:90:22:65:ba:8f:
67:d4:42:57:09:b2:e4:1a:54:42:89:a6:31:94:c6:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:41:BF:AE:66:BE:5F:D2:DA:C0:DD:11:76:83:36:CE:DE:D5:9B
X509v3 Authority Key Identifier:
keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5a:62:a6:34:91:70:25:3f:1e:9f:36:f6:b5:a4:93:d2:7c:
ec:b0:2f:89:02:e9:1f:99:44:24:ae:bd:c6:60:38:8a:f7:63:
f2:10:cc:a9:e2:d6:a5:dd:f8:ad:a7:61:07:3a:ed:11:4d:e0:
d2:27:37:7b:6b:d8:bc:08:b7:62:d3:7c:0f:8c:a6:83:ed:86:
71:0b:a1:63:18:f8:67:1a:00:3a:69:66:14:0d:30:13:61:b1:
77:ef:b3:02:d6:62:e8:c9:69:3e:ca:96:fc:91:93:50:7c:ac:
89:0e:67:45:e4:b0:6e:db:8b:78:f1:d8:9e:b1:6f:41:80:d6:
99:94:e1:03:15:59:d9:1d:c5:d5:9c:9a:a3:f4:80:4e:05:37:
0c:e0:1a:f4:93:72:ce:50:e9:12:75:59:59:17:0e:a2:6a:da:
25:db:05:79:56:54:84:67:5e:85:e2:f5:36:84:5b:05:de:7b:
fd:77:aa:e5:4e:57:1d:c5:c3:7d:15:7a:f8:c6:eb:23:bb:f8:
4f:ca:d2:d3:bd:dd:27:d3:2d:c6:ef:a9:98:bf:ee:2e:68:1d:
80:56:da:52:0d:ea:1e:fe:ab:07:33:3a:b3:1f:3c:c0:94:68:
c4:11:79:57:2e:a3:8e:75:88:10:69:e2:f4:6b:d6:23:e3:82:
e3:c7:b8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:38 2025 by rpki-client