Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier: vEF3q3+nIJuTe91mVqhdw8DOz/+mPWYkHIPQ4acjRl0=
Subject key identifier: 53:13:B9:AA:5C:69:95:F9:1B:34:32:33:EC:7B:54:4E:7D:B5:47:3A
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial: 0199FE4775630D230E7E56008675BB1D5292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number: 160E
Signing time: Sun 19 Oct 2025 21:01:59 +0000
Manifest this update: Sun 19 Oct 2025 21:01:59 +0000
Manifest next update: Mon 20 Oct 2025 21:01:59 +0000
Files and hashes: 1: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: WkwpNji8/OIjSsATPhia39hscJk+GHzzK8WtAbUkz1g=)
2: RzHN7Dslblmf2SWetMH6DUd-Es8.roa (hash: 2K0PSVlUZvtFJCr5mNlFcXi4Xq9NSfuA5JwXa1JJxuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:75:63:0d:23:0e:7e:56:00:86:75:bb:1d:52:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Validity
Not Before: Oct 19 21:01:59 2025 GMT
Not After : Oct 20 21:01:59 2025 GMT
Subject: CN=5313b9aa5c6995f91b343233ec7b544e7db5473a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ad:b8:43:34:e0:34:36:26:1e:2c:7c:82:bf:
df:9c:bd:b0:a8:9a:64:84:dd:4c:8a:85:b6:6c:98:
a5:b6:84:a1:bd:e3:37:80:de:dd:a6:4e:3a:0b:62:
e9:42:bc:ac:84:9a:ac:0d:4c:c0:69:c7:97:c4:10:
72:0b:1c:a2:cb:05:d8:cc:ba:37:77:2e:67:e0:38:
71:0b:7a:8f:26:57:d7:b0:0e:49:c4:0e:c2:9c:be:
16:ba:a9:a2:11:a7:7b:c2:a9:92:51:ae:98:af:51:
35:7f:81:7b:4f:ea:f1:d5:89:df:0b:7d:82:06:bc:
db:75:f0:0a:80:70:50:7d:e4:e0:d9:9b:16:2d:08:
ad:01:98:5c:1e:98:d4:ce:9c:b6:65:07:08:74:3c:
b5:a2:28:85:5b:0c:1a:9e:fc:a5:fb:c1:27:cf:78:
b3:38:96:17:77:d9:b4:fb:01:f4:43:ca:88:e9:1a:
6d:b6:ad:21:9d:39:d6:3d:20:3d:21:3a:ef:36:aa:
e6:fd:4f:88:07:be:6f:3b:c6:75:05:9b:52:06:7f:
a7:04:16:fc:bf:57:da:55:d8:96:b8:42:62:9d:7e:
fe:69:83:d3:0c:30:3e:2f:22:f5:af:e5:53:3c:c5:
15:55:c8:f0:db:0d:6e:6c:dd:5b:9a:b2:ee:5c:c7:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:13:B9:AA:5C:69:95:F9:1B:34:32:33:EC:7B:54:4E:7D:B5:47:3A
X509v3 Authority Key Identifier:
keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7d:4f:20:41:be:50:53:ad:ee:70:a7:07:84:c1:f3:8a:eb:
d0:52:1d:3d:0e:a3:ea:4c:2d:d1:8d:5c:b6:99:95:07:09:dd:
f1:6c:2d:2f:11:05:78:5a:00:dd:e3:b4:40:cb:d8:5f:40:66:
a4:1f:b9:3a:f2:cc:87:83:98:ec:9d:97:d1:1c:84:4a:a1:6f:
a8:57:7b:3c:a2:d9:bb:9d:ec:9b:23:bf:53:ec:1b:9c:55:94:
67:a8:0e:df:8b:ee:af:70:07:56:bd:3b:a2:43:9f:14:2f:22:
2f:db:e8:9b:cc:15:98:ab:ce:8b:8f:71:e7:34:9b:eb:c0:71:
77:ad:35:7a:38:0c:d0:b6:b5:10:35:86:f1:25:40:fa:11:13:
dd:57:b1:53:73:69:47:4b:e7:01:24:cf:64:d7:2e:e0:89:b2:
f8:1f:c8:50:e4:d7:64:20:6c:d2:c5:19:9f:4e:74:4c:3e:60:
d5:c7:bc:1e:a7:c7:64:bd:b6:7c:0b:3f:47:18:ba:80:75:bf:
0f:6f:73:23:e8:63:80:4d:c5:77:75:a8:42:18:f7:86:2e:2f:
e7:54:c1:7e:b7:f1:a5:c9:f5:32:14:3f:7e:fb:ba:6d:cd:bb:
4d:db:36:46:3b:2d:22:c7:ed:21:c0:ae:c7:7b:b4:b5:c6:8d:
ba:63:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:08 2025 by rpki-client