Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
File: OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json)
Hash identifier: nYZJMQIon12g87Uo1PJN0RK1WqT+XKnuPTGErDjWrw4=
Subject key identifier: E2:2D:6B:D7:61:B5:CB:C0:8C:91:EA:1C:79:90:DB:51:87:67:01:43
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 0199FE0FD7C8DD9A4DB9AD32A337DEDBAEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
Manifest number: 0C1F
Signing time: Sun 19 Oct 2025 20:01:14 +0000
Manifest this update: Sun 19 Oct 2025 20:01:14 +0000
Manifest next update: Mon 20 Oct 2025 20:01:14 +0000
Files and hashes: 1: 1-5V6RXgQOXjxU3mO34q_0PmmYk4.roa (hash: UBzppXP3Ubih2qJBoeebTWZSAjaul2dwW+uHzrrKrpI=)
2: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: e+kzAqoNMPTg3vHi5dPqQx7SfM1cp8NWqP0H6ctQbl8=)
3: XSqKcr4vohHwUX7C_jwkOz3T4S8.roa (hash: S5RGDFj4AygaOQ9nMJnUMnAW4DmVGX2kAbpxmhv1Nxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:d7:c8:dd:9a:4d:b9:ad:32:a3:37:de:db:ae:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Oct 19 20:01:14 2025 GMT
Not After : Oct 20 20:01:14 2025 GMT
Subject: CN=e22d6bd761b5cbc08c91ea1c7990db5187670143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:64:8b:de:4f:15:44:2f:f6:e2:a2:8e:39:
e5:6f:1e:b7:69:97:f4:d6:f5:ac:83:d3:b3:32:92:
8e:c7:8d:45:18:3f:6b:8c:5c:6f:95:91:58:61:4b:
96:38:71:62:84:b0:c5:30:63:64:e4:d2:ce:2f:4b:
b0:15:f9:b2:32:51:56:62:5f:7d:f1:c9:ee:35:02:
7d:fc:c2:a3:2e:b9:22:8d:f2:32:01:c4:24:3e:af:
0a:90:20:51:85:aa:10:d1:41:ff:ee:02:77:18:6c:
6f:a9:65:e5:2e:b6:1c:82:ff:e7:fb:9b:fb:96:11:
6d:0e:b7:b9:23:67:2b:48:56:8b:e3:c2:c7:60:13:
6a:f1:44:6c:e0:2d:0d:62:d2:7e:12:14:ba:2d:90:
3c:c8:dc:49:19:86:50:7d:e1:75:53:1f:ed:b1:4b:
66:98:14:71:ec:5a:b7:82:69:60:e5:9b:55:14:0c:
f9:41:63:bf:aa:9c:cc:8c:c9:b9:12:29:38:74:3d:
9f:4f:a6:46:9e:1c:df:e2:fa:93:97:53:cf:11:51:
43:d2:5f:4d:8d:49:8f:3a:dc:9e:e3:6c:c3:b4:b4:
67:e3:11:ca:41:2f:41:ab:19:3a:76:ce:a9:76:7b:
93:c0:19:8f:b3:7b:cd:54:f9:e3:8c:14:1d:56:57:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2D:6B:D7:61:B5:CB:C0:8C:91:EA:1C:79:90:DB:51:87:67:01:43
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bc:fb:38:a0:82:53:c4:c5:77:85:d4:16:54:ad:ed:52:da:
e1:22:0c:1e:c0:54:57:82:c9:a3:63:c7:fe:c0:c4:24:fa:b5:
51:1e:b3:46:4d:71:59:6b:f1:d2:0d:60:be:ec:0b:a7:2b:03:
c7:76:6d:30:d4:ec:cd:97:3b:ff:01:10:d0:86:c9:96:ee:80:
c0:71:c3:93:09:ff:56:0e:e9:ff:17:73:d8:c0:f9:bb:89:45:
5c:a2:12:1b:f2:3e:83:1f:ec:0a:13:2e:91:9b:2e:bb:5c:96:
cb:1d:59:f2:54:80:19:ce:fb:bd:93:db:ce:12:10:9a:07:4c:
bc:f9:80:ed:09:18:d6:0d:a6:d9:cf:3b:6e:de:36:d7:81:ef:
5c:10:c1:cd:c0:7f:7d:94:58:90:62:59:f6:b5:2b:63:ed:a3:
4e:08:cf:f0:0d:f9:b5:cf:6e:54:cd:32:e8:68:6e:d5:c7:6d:
d6:57:e8:b7:e3:77:b7:4a:af:40:dd:71:70:a7:04:d1:82:11:
c3:2e:a9:be:e5:b6:bd:87:1a:1d:96:14:59:90:4d:f6:dd:98:
72:84:9b:df:71:42:34:68:f5:cc:d8:64:fb:de:38:89:d1:75:
b1:61:c5:dc:ec:98:d7:c7:23:2b:14:96:56:bc:ac:d8:21:3f:
72:cd:03:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:25 2025 by rpki-client