Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: 88+ErpTgEA5AfQW9m7Y9DL7uJmmKR/VvBp4wq+BiwJM=
Subject key identifier: 52:EF:E1:93:EC:9F:4F:57:0D:F4:2B:2F:36:77:1A:4B:5C:DF:77:02
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 0199FDD9E4529127F3247B3F952C60EA50B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0C3C
Signing time: Sun 19 Oct 2025 19:02:19 +0000
Manifest this update: Sun 19 Oct 2025 19:02:19 +0000
Manifest next update: Mon 20 Oct 2025 19:02:19 +0000
Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: 34Cwdy9ffBymQl8h8st6S8iWmr/4e1traYa5NilFUTI=)
2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e4:52:91:27:f3:24:7b:3f:95:2c:60:ea:50:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Oct 19 19:02:19 2025 GMT
Not After : Oct 20 19:02:19 2025 GMT
Subject: CN=52efe193ec9f4f570df42b2f36771a4b5cdf7702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:d7:a8:79:4f:01:c4:75:c4:3f:5a:82:e4:
58:e6:23:ae:39:ca:62:22:14:3e:d7:f4:94:c1:a6:
c2:f7:62:2a:64:9a:72:fb:a5:22:c7:b0:cb:40:0f:
13:bf:e2:44:20:1a:c0:f7:ec:93:fb:55:a5:ba:eb:
00:ed:83:56:0d:f8:49:b5:ec:1c:96:37:6e:38:04:
29:bb:79:c9:06:d2:0f:39:62:46:4e:f9:cd:20:e9:
cd:43:1c:b2:fc:af:4e:e8:29:e9:25:5b:e3:a3:d4:
19:e1:8f:61:a1:cf:66:96:bf:10:f6:ac:d5:2e:7b:
51:12:94:59:30:b2:7c:31:08:ba:8b:a5:bb:26:93:
e7:21:10:e5:66:06:9e:6b:d6:92:b1:04:15:39:65:
67:82:34:82:de:89:2a:da:ce:3f:09:2a:40:92:e8:
6c:63:c6:21:9f:6c:72:34:22:08:ef:b1:d1:05:cd:
d3:62:64:6e:7b:d9:7d:6f:65:a1:22:0c:f9:0f:d2:
03:1a:48:ff:77:13:84:5a:70:e3:c3:43:02:85:14:
d4:ed:e0:28:f3:9f:cc:b8:17:dc:a8:d7:48:04:f8:
fc:6d:a3:6a:45:72:51:6c:c9:8e:41:cb:bd:99:99:
d2:80:ba:4a:24:3c:1a:ae:9a:fd:83:61:66:9f:81:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EF:E1:93:EC:9F:4F:57:0D:F4:2B:2F:36:77:1A:4B:5C:DF:77:02
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4e:bc:40:69:7e:d6:bd:5b:b8:ff:55:d3:49:5f:67:27:e9:
6b:a5:f1:b7:2e:81:e9:2b:64:5b:e6:23:cc:37:f0:0b:a2:42:
84:6d:c7:2e:e9:4f:7a:f3:21:17:6f:d3:c4:e5:fa:a7:ee:e7:
ea:28:9b:1a:1a:6b:5e:fb:67:b4:d8:33:33:91:50:fc:2d:07:
ad:69:cc:84:5e:2c:3d:4f:e8:8f:ce:8b:fe:a3:3e:1e:62:72:
3a:67:35:ee:53:46:50:94:1d:f4:b7:7e:7a:c8:0e:c3:bb:23:
72:23:cb:7e:3f:9d:88:33:4b:e6:7e:2e:09:fc:38:d1:4d:7f:
ea:22:19:83:dc:af:a7:d3:0d:66:b6:d9:a3:bc:5e:ab:71:9f:
8e:74:09:8f:5c:b6:4f:02:f1:35:e8:77:b3:a6:ac:13:ae:c9:
33:e9:69:96:47:23:64:96:8d:35:f5:5c:f2:79:6f:26:0c:13:
ad:6f:26:04:be:25:97:61:f2:49:ba:f2:55:b2:3c:36:50:1d:
5a:fa:69:88:ad:9f:a3:52:ec:44:f3:67:e4:0e:33:45:d3:8e:
21:b6:1f:00:39:c1:59:fe:36:61:4e:2e:b7:4b:9b:0b:d3:3a:
18:7a:55:1c:29:98:a4:79:df:ba:9d:30:08:fd:ae:d2:7e:29:
6b:4e:b7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:46 2025 by rpki-client