Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: 3HnCTMICylV0HdbL0TnyUxOwMAcISgCSaPW8ntrl2os=
Subject key identifier: 09:18:98:4E:4D:29:27:55:58:AB:C0:41:B6:69:2B:2C:AF:FA:17:4B
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 0197B77C5B23CE63658C2D9191DB5E382432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 1248
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: u09QRLPPZkgxUoJqjZE106MYx5d3ROpHz5A4ePpHEzc=)
2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5b:23:ce:63:65:8c:2d:91:91:db:5e:38:24:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=0918984e4d29275558abc041b6692b2caffa174b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:f6:09:34:26:40:4e:34:11:0c:ab:0b:6b:
46:cb:f4:5a:4c:d2:30:cc:ba:fb:df:57:17:43:e5:
79:89:c0:ef:fc:e6:9d:3d:32:13:55:b2:6a:a6:3d:
8d:36:46:7f:75:6c:e1:43:93:ac:5e:9d:f6:2b:d4:
9f:54:f8:d8:a3:3d:74:ba:a0:86:b0:a0:59:1c:42:
3f:b9:37:23:a5:b8:b9:50:cc:0b:87:78:b7:69:89:
47:37:f5:49:cf:3e:a0:18:4b:0f:ad:21:de:d0:01:
f5:6f:dc:e3:44:4f:aa:45:f1:04:16:a4:c0:6b:24:
5b:e0:97:5d:cc:12:5d:1d:5f:a4:4c:92:4d:7b:62:
3f:bb:65:02:89:1e:bf:d1:f2:1e:f4:e0:da:a4:85:
1a:b5:76:48:3f:b9:20:fb:96:af:98:cf:3c:05:12:
60:a8:b7:2f:da:4a:60:3d:bd:74:fe:d8:c0:cf:c1:
cd:af:ac:8b:88:09:ae:95:3e:04:7d:96:64:4b:48:
f3:05:55:3b:9a:71:61:cc:72:4b:cd:d0:a8:b0:80:
18:88:02:a6:dc:c5:9a:74:f0:94:61:c3:b7:12:bb:
cd:ca:88:ef:bc:0f:b5:52:d5:47:19:7a:9f:e2:e2:
e9:9f:ea:d6:ea:38:8c:70:49:09:ff:97:e0:ac:24:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:18:98:4E:4D:29:27:55:58:AB:C0:41:B6:69:2B:2C:AF:FA:17:4B
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5a:26:5f:04:5d:0a:88:a0:37:fe:21:ce:d1:64:0e:32:49:
25:dc:cf:95:32:c2:b8:05:6c:fc:c6:10:d2:cc:76:51:50:c0:
05:47:f3:00:01:cd:7b:21:b4:ab:6e:29:99:76:01:29:dc:af:
9a:b0:78:06:2c:4d:28:f6:6a:ba:fe:30:97:14:c2:84:26:83:
4b:4e:64:f7:2f:17:dd:de:1f:a9:27:7c:53:3b:16:5a:71:ef:
9e:0c:23:87:17:98:6a:c5:4e:47:60:7c:45:67:68:2a:c7:ec:
7f:2d:ee:60:21:f5:e3:c6:47:0d:76:2d:ae:b5:1a:dc:fd:3d:
57:9e:ea:be:56:20:ec:14:db:7c:aa:53:87:ee:a1:9f:17:25:
88:86:37:fa:c0:79:09:d5:ef:5d:13:fd:21:29:b6:7f:ec:82:
68:17:a9:f5:2c:bf:5b:bc:8f:ac:86:03:3b:53:f0:c4:fa:45:
e9:aa:9e:fc:70:2d:52:22:73:6d:ba:18:1c:38:c2:0d:cd:42:
df:f5:44:ea:b0:f5:80:83:1f:0e:ca:73:20:b2:ec:3c:c7:e8:
ed:d7:c9:00:e4:00:6e:8b:00:9e:e1:9d:83:03:a7:03:9a:6b:
c8:c0:18:89:30:11:03:97:92:bb:1d:8e:60:77:4f:9c:f8:9c:
30:d8:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:15 2025 by rpki-client