Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
File: OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json)
Hash identifier: wQCtMb6HsUtEgEyWJqYGprKsa4lmpBHOheFEYcaHoqA=
Subject key identifier: D0:2F:FC:1B:39:01:A5:1C:F4:69:CE:A4:D6:5B:6B:7B:44:59:0B:7E
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 0198D4A81F7B238AC45C0EE211FC44068A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
Manifest number: 0B85
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: 1-5V6RXgQOXjxU3mO34q_0PmmYk4.roa (hash: UBzppXP3Ubih2qJBoeebTWZSAjaul2dwW+uHzrrKrpI=)
2: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: Mpneck2nXMKC67xRBefq4B0DOE/I8wfHB4bzWa93cPk=)
3: XSqKcr4vohHwUX7C_jwkOz3T4S8.roa (hash: S5RGDFj4AygaOQ9nMJnUMnAW4DmVGX2kAbpxmhv1Nxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1f:7b:23:8a:c4:5c:0e:e2:11:fc:44:06:8a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=d02ffc1b3901a51cf469cea4d65b6b7b44590b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:12:c2:e2:a9:29:03:f0:66:42:d2:82:5e:
9a:88:7d:d1:02:bb:3e:6e:28:5a:98:09:58:be:26:
c2:ec:42:35:04:b0:00:86:b4:ff:95:e1:0e:2c:f4:
bc:46:29:71:5b:0b:71:ea:87:8d:f9:be:7d:9e:7b:
3c:cd:75:e3:68:9f:95:66:a7:f0:58:8e:36:12:42:
0d:5c:b8:0a:f4:57:a6:b7:0c:07:31:99:18:c4:66:
4a:1e:9f:99:74:a1:4f:8b:23:36:d6:ae:02:45:00:
36:71:59:2e:78:2b:c8:e8:a6:8d:d8:44:e7:ee:7d:
18:fc:c5:61:24:f0:1b:7d:aa:23:ab:ee:ee:94:c2:
54:f4:b2:f9:52:1c:e4:2e:d4:a2:cf:be:96:38:b6:
2e:dd:cb:f0:4b:ba:6f:71:29:9d:ca:b1:a6:20:6a:
e2:4a:97:f7:24:32:c7:ba:cc:13:08:74:4e:c7:35:
5a:64:78:f8:ff:58:2b:2a:07:09:ac:4b:6e:76:c6:
d9:c2:9e:66:99:f0:0e:c7:c0:be:58:44:ba:ab:a1:
77:da:75:51:9c:9a:10:96:1c:7f:16:d7:77:ee:dc:
01:00:08:d0:24:84:7b:11:6a:f2:fa:1c:ab:ed:56:
ba:6a:11:10:3b:63:8b:3e:22:f9:bf:fc:8b:04:11:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2F:FC:1B:39:01:A5:1C:F4:69:CE:A4:D6:5B:6B:7B:44:59:0B:7E
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f3:0e:2f:a2:27:db:d8:f6:eb:5e:ca:e5:87:4b:e0:03:09:
4c:06:92:4d:a2:ef:5d:e4:c4:ca:78:04:c3:ec:65:1e:c9:d1:
46:c5:16:44:1a:90:d6:d3:e3:dc:32:ae:70:21:2e:d2:73:87:
c0:34:a3:1e:03:e8:cc:94:37:3c:99:82:25:5e:65:b3:75:f1:
99:35:91:6d:51:b7:4e:54:a6:43:06:d2:90:c7:a9:df:e7:93:
52:ef:27:e7:cd:8f:34:9b:a2:f5:6f:33:ed:61:ac:f5:59:50:
8c:c6:02:00:94:55:2f:25:ec:d8:3f:a7:04:54:9c:b1:f8:c7:
19:c4:d4:95:b4:06:c3:f9:ce:fc:a9:e4:23:83:91:3b:d6:54:
fd:c1:13:21:d5:27:ca:7e:dc:bd:2f:0d:67:ea:bd:49:07:24:
cf:00:10:98:4f:40:75:68:f0:ec:42:50:6e:dd:e6:5b:d8:b3:
04:eb:61:89:f5:3c:bc:a9:f7:11:a6:bd:7a:fe:13:5d:05:0e:
b9:2e:b1:19:0d:55:e9:a5:8d:48:fa:d1:cd:53:02:9e:24:6f:
8c:43:bd:7c:d7:c3:a5:70:c5:a5:ec:84:57:10:e8:e8:1c:39:
12:04:76:24:9a:83:2d:63:86:11:ae:ce:07:3d:91:f1:ed:f6:
21:c5:b2:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqB97I4rEXA7iEfxEBooPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjc3MTBkZjhhZGQ2NGJiOTY4OGUwZjQ1ODFiZWE2N2U0
MDJjNjYwHhcNMjUwODIzMDIwMDQ0WhcNMjUwODI0MDIwMDQ0WjAzMTEwLwYDVQQD
EyhkMDJmZmMxYjM5MDFhNTFjZjQ2OWNlYTRkNjViNmI3YjQ0NTkwYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SkSwuKpKQPwZkLSgl6aiH3RArs+
bihamAlYvibC7EI1BLAAhrT/leEOLPS8RilxWwtx6oeN+b59nns8zXXjaJ+VZqfw
WI42EkINXLgK9FemtwwHMZkYxGZKHp+ZdKFPiyM21q4CRQA2cVkueCvI6KaN2ETn
7n0Y/MVhJPAbfaojq+7ulMJU9LL5UhzkLtSiz76WOLYu3cvwS7pvcSmdyrGmIGri
Spf3JDLHuswTCHROxzVaZHj4/1grKgcJrEtudsbZwp5mmfAOx8C+WES6q6F32nVR
nJoQlhx/Ftd37twBAAjQJIR7EWry+hyr7Va6ahEQO2OLPiL5v/yLBBGh/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAv/Bs5AaUc9GnOpNZba3tEWQt+MB8GA1UdIwQY
MBaAFDr3cQ34rdZLuWiOD0WBvqZ+QCxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZkeERmaXQxa3U1YUk0UFJZRy1wbjVBTEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNTlmZTMtOTU2ZS00OTM3LTg1OGQt
ZWVjNDE2YTg4NmY3LzEvT3ZkeERmaXQxa3U1YUk0UFJZRy1wbjVBTEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNTlmZTMtOTU2ZS00OTM3LTg1OGQtZWVjNDE2YTg4NmY3
LzEvT3ZkeERmaXQxa3U1YUk0UFJZRy1wbjVBTEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvMOL6In
29j2617K5YdL4AMJTAaSTaLvXeTEyngEw+xlHsnRRsUWRBqQ1tPj3DKucCEu0nOH
wDSjHgPozJQ3PJmCJV5ls3XxmTWRbVG3TlSmQwbSkMep3+eTUu8n582PNJui9W8z
7WGs9VlQjMYCAJRVLyXs2D+nBFScsfjHGcTUlbQGw/nO/KnkI4ORO9ZU/cETIdUn
yn7cvS8NZ+q9SQckzwAQmE9AdWjw7EJQbt3mW9izBOthifU8vKn3Eaa9ev4TXQUO
uS6xGQ1V6aWNSPrRzVMCniRvjEO9fNfDpXDFpeyEVxDo6Bw5EgR2JJqDLWOGEa7O
Bz2R8e32IcWyXg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:27 2025 by rpki-client