Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: VGW2UWpVR/y7B1wvcIB5yziqMWKMKGaJzy1BPCtwYPM=
Subject key identifier: 7B:D2:B1:37:83:EB:89:FF:FF:57:4E:5E:A0:F9:29:D0:CD:72:22:94
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 0197C6818FC3BF069C6BB1A0207B0DA54F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 11B4
Signing time: Tue 01 Jul 2025 15:01:09 +0000
Manifest this update: Tue 01 Jul 2025 15:01:09 +0000
Manifest next update: Wed 02 Jul 2025 15:01:09 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: qHJ1X1fGNtZMmD9ayn/lJa12zzKfTtqCJQy9xWTrSTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:8f:c3:bf:06:9c:6b:b1:a0:20:7b:0d:a5:4f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Jul 1 15:01:09 2025 GMT
Not After : Jul 2 15:01:09 2025 GMT
Subject: CN=7bd2b13783eb89ffff574e5ea0f929d0cd722294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:35:19:2b:42:2e:5c:ad:00:be:03:98:11:
9d:93:26:b2:a4:99:40:1a:6c:cf:99:7e:60:b2:c5:
17:80:ee:87:6c:70:f5:ff:ad:af:e2:bf:ad:e3:b3:
cc:23:ba:6d:d4:b5:ef:01:a5:4b:5b:c2:b6:48:e0:
b2:f4:0a:3b:62:7a:89:3f:c8:7c:f6:8d:14:94:9a:
0a:45:03:ff:bf:5c:0d:da:6c:20:f9:5a:c9:f6:ab:
e7:43:9c:70:f6:a4:d3:98:12:04:09:63:46:47:a6:
e1:af:f7:57:e8:ed:f1:50:71:d7:63:42:b2:d0:b0:
34:15:2c:95:18:eb:e9:67:c3:ee:dd:b0:fe:61:02:
5c:d5:e2:d0:73:dd:fc:ef:8d:9e:79:07:bf:c4:8f:
97:b3:3a:cb:9f:1f:0f:7b:eb:d5:3d:e7:ae:2c:3c:
fb:a6:e2:e5:28:cf:41:e9:da:8c:73:01:ab:43:2b:
9a:ee:5b:57:c5:6d:2e:5a:f1:62:bd:89:58:3e:48:
25:a9:c6:7c:7a:89:a3:45:d9:f4:1b:7b:7b:aa:81:
7b:f9:12:33:5a:29:25:b0:28:6b:fc:56:b5:42:96:
84:b7:9b:c3:55:35:63:2b:68:28:47:1c:43:1c:55:
90:fc:5d:4c:58:02:4e:6e:05:97:41:8c:c2:43:41:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D2:B1:37:83:EB:89:FF:FF:57:4E:5E:A0:F9:29:D0:CD:72:22:94
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:55:c5:09:df:bc:8f:14:e8:4a:c4:1d:a7:03:96:98:1b:3e:
14:67:cf:94:80:2f:6e:78:ea:81:78:86:74:d6:d5:12:61:0f:
58:0d:ca:0d:08:60:72:0f:47:da:97:30:92:6c:7e:fc:86:9c:
10:1c:cc:38:4e:f7:af:4c:a5:28:a3:22:3f:08:f7:be:1f:da:
d4:f8:51:92:a6:de:1f:78:44:00:d0:3d:08:5e:94:68:3c:95:
ac:4e:de:16:d0:a3:84:bf:5f:88:04:2e:31:f5:90:e8:58:b6:
65:ab:a6:a6:ee:17:61:92:7d:69:82:70:d9:9b:52:79:46:62:
b3:26:ac:63:5c:6b:40:36:66:80:09:b4:60:2b:ee:d8:b1:7f:
68:b7:6f:96:90:f1:4c:55:69:b0:84:3a:24:f6:07:97:ca:21:
03:a6:73:ec:94:a0:03:e1:c3:79:20:cb:27:bd:2f:3d:b3:ea:
c9:45:fc:c4:9e:f5:c3:aa:c3:8f:53:b7:9c:50:d8:4e:97:95:
3b:e4:6c:45:bc:72:99:ec:28:46:2f:e8:9d:a4:ba:af:c8:f2:
e8:7a:2c:f4:c3:e7:a3:aa:85:b9:cb:61:2b:6a:11:72:84:cf:
f3:53:79:96:ea:65:95:60:5d:31:c2:0d:2a:4e:0a:f6:6c:fa:
8b:7c:f9:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGgY/Dvwaca7GgIHsNpU+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjZiYzhmMTYzYWY0OWMwM2Q5YWQ2OWU3MTZiNDJjNWI5
NmVlNzkwHhcNMjUwNzAxMTUwMTA5WhcNMjUwNzAyMTUwMTA5WjAzMTEwLwYDVQQD
Eyg3YmQyYjEzNzgzZWI4OWZmZmY1NzRlNWVhMGY5MjlkMGNkNzIyMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4g1GStCLlytAL4DmBGdkyaypJlA
GmzPmX5gssUXgO6HbHD1/62v4r+t47PMI7pt1LXvAaVLW8K2SOCy9Ao7YnqJP8h8
9o0UlJoKRQP/v1wN2mwg+VrJ9qvnQ5xw9qTTmBIECWNGR6bhr/dX6O3xUHHXY0Ky
0LA0FSyVGOvpZ8Pu3bD+YQJc1eLQc938742eeQe/xI+XszrLnx8Pe+vVPeeuLDz7
puLlKM9B6dqMcwGrQyua7ltXxW0uWvFivYlYPkglqcZ8eomjRdn0G3t7qoF7+RIz
WiklsChr/Fa1QpaEt5vDVTVjK2goRxxDHFWQ/F1MWAJObgWXQYzCQ0FyqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvSsTeD64n//1dOXqD5KdDNciKUMB8GA1UdIwQY
MBaAFKL2vI8WOvScA9mtaecWtCxblu55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUt
NTA2YmI2YzY3OWNlLzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUtNTA2YmI2YzY3OWNl
LzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslXFCd+8
jxToSsQdpwOWmBs+FGfPlIAvbnjqgXiGdNbVEmEPWA3KDQhgcg9H2pcwkmx+/Iac
EBzMOE73r0ylKKMiPwj3vh/a1PhRkqbeH3hEANA9CF6UaDyVrE7eFtCjhL9fiAQu
MfWQ6Fi2Zaumpu4XYZJ9aYJw2ZtSeUZisyasY1xrQDZmgAm0YCvu2LF/aLdvlpDx
TFVpsIQ6JPYHl8ohA6Zz7JSgA+HDeSDLJ70vPbPqyUX8xJ71w6rDj1O3nFDYTpeV
O+RsRbxymewoRi/onaS6r8jy6Hos9MPno6qFucthK2oRcoTP81N5lupllWBdMcIN
Kk4K9mz6i3z53g==
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:57:19 2025 by rpki-client