Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: VhaRjTsQt0NktUUvrQ7u0L40L5mjKPrS1msVwkqNSVA=
Subject key identifier: 1E:DF:0A:A4:0E:3E:AC:12:A2:EC:F8:43:29:B3:7E:CD:E1:2A:75:C6
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 0198D6CD1188AFD5AE3A00A90FAE40B75FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 12:00:20 +0000
Manifest this update: Sat 23 Aug 2025 12:00:20 +0000
Manifest next update: Sun 24 Aug 2025 12:00:20 +0000
Files and hashes: 1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: 6dlIQSzmAo6QH0lmWOY2aZNP9wZojrDUEfoMWpmlwIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:11:88:af:d5:ae:3a:00:a9:0f:ae:40:b7:5f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Aug 23 12:00:20 2025 GMT
Not After : Aug 24 12:00:20 2025 GMT
Subject: CN=1edf0aa40e3eac12a2ecf84329b37ecde12a75c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:13:e9:9d:22:c1:4b:09:0b:4d:f2:92:cd:23:
cb:23:c3:75:c9:23:89:85:b1:be:0c:20:2c:94:7f:
19:60:a8:20:d9:2e:7d:7b:a9:94:0d:db:1d:e6:8d:
48:3a:9d:71:16:12:54:d3:d9:fb:24:43:c9:a0:07:
45:af:14:32:4b:64:1c:8f:eb:b4:2e:1c:df:3d:cb:
cd:9d:08:8a:72:d6:10:f0:ad:af:c2:5b:bb:ba:ee:
67:f8:13:80:45:c1:9a:26:46:17:67:ad:9f:e2:53:
0c:34:55:a2:11:a6:b5:e5:d1:65:58:f7:b4:1c:83:
f2:45:91:9c:a0:11:95:1b:ef:24:ef:4f:ec:80:47:
a1:2f:af:e0:51:40:f6:47:68:1c:a2:75:1e:60:06:
eb:e0:c7:dc:4e:07:1f:4b:0d:e7:f2:7e:f5:a3:35:
7d:d8:d0:b9:48:b5:68:f7:3d:81:44:e0:49:90:79:
91:1f:1f:85:4c:fd:37:0d:3f:93:36:0f:55:64:b5:
df:31:0d:5b:11:59:e6:6e:c4:90:fc:83:c9:2e:88:
9c:8f:fb:f4:36:1e:14:b9:8a:5e:f8:48:1f:95:d6:
cc:ca:3d:53:57:d3:2a:e4:1a:d7:3a:c5:fe:34:47:
e8:c9:f5:21:91:8d:05:93:d8:1f:fb:01:b4:61:f9:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DF:0A:A4:0E:3E:AC:12:A2:EC:F8:43:29:B3:7E:CD:E1:2A:75:C6
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b4:77:89:92:e8:7a:d3:1c:d0:92:1e:5a:56:09:60:f5:88:
13:d8:bb:d8:00:16:2d:9b:fa:8d:fd:4a:09:38:43:c0:32:2a:
96:bf:a2:ea:dc:bb:6e:21:cd:0d:a4:9d:80:43:8d:82:67:cd:
07:80:40:4c:11:b7:8e:2e:cc:64:58:00:3e:9a:d8:fa:13:a3:
ce:be:cb:e2:64:e4:24:e8:af:72:d8:20:eb:fc:96:18:54:42:
7b:7f:a5:c6:ea:de:f9:39:94:46:27:32:45:17:30:31:b9:dd:
35:e3:28:40:39:61:d1:9f:91:94:64:5c:7e:e9:d0:96:25:3e:
14:fd:5f:79:a9:c8:7b:e9:0b:6b:0d:d0:7a:26:a9:af:e2:08:
46:6f:dd:4d:78:7d:97:a5:81:34:0f:39:3e:fc:69:e3:1b:e3:
c5:cd:99:49:e9:22:3e:60:f5:b8:fc:7b:98:a1:22:b7:1c:2c:
6d:07:d6:08:9b:5f:34:35:fa:74:a3:c6:d9:54:74:33:40:1b:
39:14:e4:86:49:44:9c:c4:02:45:04:92:e2:b2:fe:83:4a:53:
45:ad:18:41:71:f4:0a:ae:3e:c0:51:9a:80:ff:10:9e:3d:ca:
69:c6:45:6f:54:1b:af:fd:d3:e2:b6:1e:b8:f3:ee:5a:99:e7:
2e:3a:43:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:20 2025 by rpki-client