Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: ohEkpx30+RLWTEpYxY9lZ8uo/tMKWqB/qY1Tswotbl4=
Subject key identifier: F6:D5:DA:65:07:C7:B7:59:29:D5:30:87:D0:A7:EF:A6:3B:95:FD:10
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 0198D54DFCEA41B60AAA3BE6E8D31DDA3649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 05:01:54 +0000
Manifest this update: Sat 23 Aug 2025 05:01:54 +0000
Manifest next update: Sun 24 Aug 2025 05:01:54 +0000
Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: e2LmqhXcCZFFeP8WdUYAwCCcCVfpTnwDKmN79/dztbc=)
2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fc:ea:41:b6:0a:aa:3b:e6:e8:d3:1d:da:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Aug 23 05:01:54 2025 GMT
Not After : Aug 24 05:01:54 2025 GMT
Subject: CN=f6d5da6507c7b75929d53087d0a7efa63b95fd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:49:20:c9:a4:4f:b5:4d:ad:bb:bc:42:93:
ec:2b:4a:ab:0c:3f:54:30:d4:33:2b:d5:b2:ad:44:
ae:69:46:32:94:25:d2:9b:f6:9f:78:19:17:73:4e:
01:9c:ea:3a:d7:e9:07:6a:81:7b:11:39:8d:6c:43:
c2:03:e5:59:93:6c:ff:4c:9e:3a:af:9d:8c:b1:d2:
b3:4a:d9:ac:1d:1c:74:b6:f2:c0:92:89:4a:d5:ac:
e7:62:3f:33:fd:a6:c9:c4:61:46:c7:ce:73:8a:64:
c8:a0:fd:d0:ac:8f:f9:bb:71:74:21:9b:60:88:a7:
57:84:ef:18:9a:fa:26:9f:f8:b9:22:ba:8f:cc:e1:
51:12:69:c1:f3:c6:e0:67:ce:59:ad:2b:95:f2:91:
81:c6:be:03:b1:3f:61:cb:16:f3:19:e7:de:19:9a:
0e:b3:66:3f:97:b9:c2:bf:28:38:5e:39:a0:d3:63:
c0:63:d6:e9:0b:02:a4:0a:71:4b:73:25:d4:e9:b7:
ea:26:de:75:5e:2a:9a:6b:bc:ff:89:29:ef:af:aa:
fe:47:3a:8a:3f:4f:f8:51:4a:6e:1a:73:a3:57:4f:
cd:e9:43:d2:43:b6:66:cf:f1:e7:61:e7:ca:16:dc:
26:eb:fd:e8:77:f7:47:fd:7e:00:a7:82:c3:56:0b:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:DA:65:07:C7:B7:59:29:D5:30:87:D0:A7:EF:A6:3B:95:FD:10
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e1:b9:f4:11:74:d9:cc:5d:e3:07:04:75:b4:25:8b:ef:19:
95:66:d7:ad:51:2c:8e:8b:94:78:6d:db:d7:b9:ba:e4:3b:e2:
16:09:87:22:95:14:c2:d3:b1:7c:2d:9c:95:82:57:ab:39:62:
46:6e:fb:3b:24:52:e4:eb:21:40:9a:63:77:e9:01:b2:a3:03:
52:1c:84:f9:3e:3f:43:ed:b6:6f:71:8a:cc:b0:0a:78:0b:25:
ed:b3:26:f8:b3:26:8c:03:c4:38:59:e1:36:59:d2:3d:94:47:
fb:9e:04:83:70:e0:bb:3f:c6:9d:aa:a8:0e:a1:cf:bd:ba:63:
d6:98:bc:4d:e2:6a:ea:c8:0b:f8:f8:7e:60:7e:a8:c1:f5:a4:
2c:66:5e:6c:04:bd:7f:de:0a:aa:a5:5d:9e:ed:52:a0:67:b0:
4c:07:13:e5:45:1d:89:5f:bb:55:3c:69:8b:04:30:12:da:c1:
1c:bb:1c:8e:d8:19:f9:6d:1a:2a:f9:58:14:c5:49:29:5d:a6:
ff:07:f6:41:56:bb:39:29:d9:c9:ba:be:80:ea:77:35:c2:27:
ac:07:79:6e:d3:f1:4b:89:88:8f:6f:60:da:83:2e:be:1f:f3:
f3:a6:7d:94:68:0a:e3:cf:09:f3:58:93:a3:91:ae:91:98:6c:
b7:12:9e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfzqQbYKqjvm6NMd2jZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZmEyZmMwNmUxYWE5MTM1YzI2MzFiNzNiZWNjNTk1N2Iw
MjNhOTMwHhcNMjUwODIzMDUwMTU0WhcNMjUwODI0MDUwMTU0WjAzMTEwLwYDVQQD
EyhmNmQ1ZGE2NTA3YzdiNzU5MjlkNTMwODdkMGE3ZWZhNjNiOTVmZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXVJIMmkT7VNrbu8QpPsK0qrDD9U
MNQzK9WyrUSuaUYylCXSm/afeBkXc04BnOo61+kHaoF7ETmNbEPCA+VZk2z/TJ46
r52MsdKzStmsHRx0tvLAkolK1aznYj8z/abJxGFGx85zimTIoP3QrI/5u3F0IZtg
iKdXhO8Ymvomn/i5IrqPzOFREmnB88bgZ85ZrSuV8pGBxr4DsT9hyxbzGefeGZoO
s2Y/l7nCvyg4Xjmg02PAY9bpCwKkCnFLcyXU6bfqJt51Xiqaa7z/iSnvr6r+RzqK
P0/4UUpuGnOjV0/N6UPSQ7Zmz/HnYefKFtwm6/3od/dH/X4Ap4LDVguy6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbV2mUHx7dZKdUwh9Cn76Y7lf0QMB8GA1UdIwQY
MBaAFDr6L8BuGqkTXCYxtzvsxZV7AjqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUt
ZWYzOGU4Y2UzM2QxLzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUtZWYzOGU4Y2UzM2Qx
LzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+G59BF0
2cxd4wcEdbQli+8ZlWbXrVEsjouUeG3b17m65DviFgmHIpUUwtOxfC2clYJXqzli
Rm77OyRS5OshQJpjd+kBsqMDUhyE+T4/Q+22b3GKzLAKeAsl7bMm+LMmjAPEOFnh
NlnSPZRH+54Eg3Dguz/GnaqoDqHPvbpj1pi8TeJq6sgL+Ph+YH6owfWkLGZebAS9
f94KqqVdnu1SoGewTAcT5UUdiV+7VTxpiwQwEtrBHLscjtgZ+W0aKvlYFMVJKV2m
/wf2QVa7OSnZybq+gOp3NcInrAd5btPxS4mIj29g2oMuvh/z86Z9lGgK488J81iT
o5GukZhstxKepw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:59 2025 by rpki-client