Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
File: OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json)
Hash identifier: le9GaWGUM4rDyVI2uvtsKijVjDKvq+8W9JZQV8hz7r8=
Subject key identifier: E8:4E:D2:EE:96:82:25:53:F5:16:C4:88:DC:04:A9:AF:2D:EB:78:10
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 0197B88F03B7F349CA2D1256076F69E4DE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
Manifest number: 0AF1
Signing time: Sat 28 Jun 2025 22:01:09 +0000
Manifest this update: Sat 28 Jun 2025 22:01:09 +0000
Manifest next update: Sun 29 Jun 2025 22:01:09 +0000
Files and hashes: 1: 1-5V6RXgQOXjxU3mO34q_0PmmYk4.roa (hash: UBzppXP3Ubih2qJBoeebTWZSAjaul2dwW+uHzrrKrpI=)
2: EyL9qIdoOkum4j70O97owcKKNdo.roa (hash: CPup2t2Dcwh/1Zx2zcdDGMOwGKKSbKozTe/yHf2vibg=)
3: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: VdBZ2FkafOqKooC+5mQcCrxEZAttbsf4X+OYlO/H7EQ=)
4: R9lxjYdjsKxlvanBaxZtqFtiK5M.roa (hash: EAnasKsXxwBwZXC0ThjWuRnRdndnASQeOuSOk8haA34=)
5: aPO8bO2clWLS21EZQlESI-7wVLc.roa (hash: rSz4ITdo+EiO9fypHJWegkZR9JDiu5BYFVF3ikj1u3A=)
6: mdUceimjZwfVVG0REiUEooQJhAE.roa (hash: LzFwucR3C7CoRMDtQiS0SQDDS6RSOm6dTPZ+EmCdgOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:03:b7:f3:49:ca:2d:12:56:07:6f:69:e4:de:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Jun 28 22:01:09 2025 GMT
Not After : Jun 29 22:01:09 2025 GMT
Subject: CN=e84ed2ee96822553f516c488dc04a9af2deb7810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:50:9f:58:17:d6:24:28:bb:30:4b:5f:e6:
8d:fc:16:f0:36:ff:92:18:69:f7:99:5b:c5:a5:74:
14:ba:c9:ca:80:52:5b:42:92:8b:9d:32:a3:59:c4:
77:de:ca:07:28:8f:66:0d:ac:6e:31:2b:8f:2b:a6:
c8:bf:2f:d6:48:1b:c3:2c:ee:38:cd:2d:78:02:8d:
5f:f7:4b:2c:7a:db:e2:95:3a:37:bb:95:9a:3f:b6:
16:66:79:39:8d:f9:ad:b7:62:6f:5e:78:60:62:04:
04:57:d1:14:57:f0:4e:08:45:98:58:e8:28:4d:a3:
0f:cb:c6:a1:74:62:c6:ef:5f:22:77:1f:ac:f1:86:
a4:5f:2b:ac:ff:7d:17:2e:3a:7b:d9:10:c7:b7:0f:
03:bd:dd:d7:be:13:4e:1f:ce:c0:28:8d:47:59:81:
5f:c4:c8:fd:65:bd:10:14:e3:e7:b1:5d:ad:a3:f0:
5b:c5:4c:b1:47:d0:bf:dd:a8:a9:c6:64:f9:4e:45:
1c:87:78:8e:e3:9b:39:eb:2e:52:fb:d8:ee:2f:28:
65:5e:ef:35:4e:c8:12:44:30:08:bb:9a:6e:b3:57:
94:47:aa:ca:72:f2:10:92:27:a8:f4:50:0f:ac:c4:
65:ab:86:1e:d9:47:b0:6a:31:26:b2:a7:48:ca:1d:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4E:D2:EE:96:82:25:53:F5:16:C4:88:DC:04:A9:AF:2D:EB:78:10
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bc:fe:63:e3:23:be:83:c8:de:96:2a:27:4e:4f:5c:fa:cb:
a1:e9:49:26:5d:49:8d:89:3f:51:bf:78:c4:16:a7:2d:fc:02:
53:ea:fe:01:6f:2b:07:a0:eb:b9:4e:fe:2a:08:e5:ca:cd:be:
2d:37:ec:74:32:78:d1:2d:f9:a7:ed:7f:c9:9a:02:bf:53:09:
77:95:f0:9c:03:f3:45:c3:94:4d:d3:da:66:a2:43:b3:e0:94:
29:d7:03:ba:bd:61:28:39:3c:29:e7:55:e0:77:95:68:b7:6c:
61:0e:c7:c5:a2:f0:b4:39:c8:c7:16:4d:70:46:27:42:3f:b3:
1d:f7:d3:c3:9d:be:22:8f:bc:fb:7e:31:a0:ac:fe:48:1a:09:
47:d4:53:c4:a2:47:78:28:7d:1d:ce:36:62:d1:f1:8f:5c:d9:
d4:de:3d:18:e6:ce:46:fc:05:0d:42:1b:8c:45:8e:e8:c6:3e:
4e:f3:7a:91:ba:58:53:1e:46:7b:c4:ac:64:11:de:8b:15:87:
5c:39:f2:1c:3d:3e:28:b9:38:aa:f5:8f:f9:87:1f:e7:f4:d8:
bf:77:7f:1e:9f:a0:2e:c6:62:38:de:4b:e3:a7:e0:77:75:07:
53:63:18:fe:79:15:8f:bd:d5:38:3f:58:0f:4e:ac:ba:f9:8e:
0b:fc:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:15 2025 by rpki-client