Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: zlg9qbvHey7PP9Jt3Xncd1sirFA+TB2Ot2ibg+vsLJ4=
Subject key identifier: 8B:F1:E8:03:1F:2F:9B:C9:44:54:C5:17:CD:25:51:D8:13:EB:F7:F9
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 0198D4E02BFA18279822470AEC0E0B5D8BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 1240
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: SdeqvJM+qo06djGr1l6XRhURgUJ2hqUGHJsVf3afQTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2b:fa:18:27:98:22:47:0a:ec:0e:0b:5d:8b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=8bf1e8031f2f9bc94454c517cd2551d813ebf7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:c2:ad:82:d9:49:d8:9a:e2:27:af:76:f3:
fb:c7:ff:be:f5:62:51:4b:de:a9:28:54:52:9c:c8:
70:cb:5b:2a:e3:c4:66:1d:5d:68:f7:f2:44:ca:86:
b1:99:42:4f:ed:7e:ea:9b:48:b9:75:9c:31:06:fb:
90:f4:a9:88:09:9f:a9:04:6d:8c:d8:f4:98:23:69:
0e:4f:84:e5:67:7b:dc:14:94:78:b6:1d:96:ad:ff:
87:53:6c:79:7f:03:7e:93:67:e9:83:b6:0b:00:15:
d1:8e:05:01:1b:cf:b7:71:12:10:79:98:e3:fb:38:
77:0c:e2:24:8b:08:59:87:67:aa:c8:51:a5:91:e1:
56:1d:69:49:f9:14:3b:79:5e:33:7e:3a:7f:44:1b:
74:da:16:c2:6a:27:c9:40:6e:c3:60:5e:83:19:10:
0a:87:39:4d:4d:81:60:6b:7b:3b:f4:28:12:9c:40:
79:eb:bb:69:de:f7:f7:4e:d1:30:11:13:04:4f:a2:
67:f0:be:da:f5:c7:3f:72:8a:eb:19:9b:f4:69:20:
b6:29:2b:a7:66:54:2b:cb:87:e7:42:1d:2b:20:63:
fc:61:3b:64:de:7f:c5:de:50:e4:28:74:d4:32:4d:
02:2b:0d:a3:a9:11:7d:83:08:13:b6:30:11:89:fe:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F1:E8:03:1F:2F:9B:C9:44:54:C5:17:CD:25:51:D8:13:EB:F7:F9
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:40:b4:73:26:6d:70:42:52:92:e2:3a:10:2e:ef:87:a6:a4:
09:68:83:39:3f:8a:35:34:53:dc:6a:aa:04:87:88:d5:cd:c4:
a9:f7:27:63:10:33:15:5c:72:64:f3:ea:9a:cb:e2:3a:c7:d4:
78:2c:09:d6:fc:31:41:ad:78:eb:4d:fb:c6:eb:50:f0:f7:cf:
f4:81:e7:5e:2f:52:6a:9e:95:3b:af:5c:db:73:c9:c4:9f:87:
ec:34:c3:ee:07:10:4f:f4:9e:8b:15:a4:4c:8d:8d:87:48:2c:
9f:4c:79:91:18:ce:ea:75:31:24:03:1b:f5:5a:7c:78:8f:d7:
99:21:62:96:2d:0b:c9:64:38:0c:b7:37:28:ec:49:cb:20:db:
a0:27:f8:e0:48:e5:e2:4c:da:6c:5b:aa:dc:e8:87:97:55:91:
8b:7d:66:ea:1e:c3:a2:e6:1f:b8:8a:b4:3b:e7:6e:aa:8c:c7:
87:d4:2a:4a:b3:5d:54:21:ab:f1:e9:3b:ed:c2:bb:63:f2:c0:
ea:20:9d:c5:ad:41:a7:7f:e7:d1:e9:68:46:82:7b:4b:fa:81:
57:7a:d1:8d:78:aa:aa:a6:55:f4:85:0a:87:59:89:d0:07:99:
60:44:61:e6:77:4e:91:62:9a:5d:4c:8d:9b:47:fc:97:aa:4d:
b2:c0:c8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:08 2025 by rpki-client