Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: OtUEaKZQaQ+Lmt6r23NFmRvNrV4EqknRIW/NOAROBvc=
Subject key identifier: 57:03:D0:B8:3F:0B:E2:AE:69:AD:26:12:B1:81:48:66:09:17:72:B6
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 0198D660E6CE480E387E6706F16EEE97C453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0BA3
Signing time: Sat 23 Aug 2025 10:02:11 +0000
Manifest this update: Sat 23 Aug 2025 10:02:11 +0000
Manifest next update: Sun 24 Aug 2025 10:02:11 +0000
Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: UcDw7Q6xZXBMdsFibIkLx4pGVz4sQdbQ9ZNisPFJSrc=)
2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e6:ce:48:0e:38:7e:67:06:f1:6e:ee:97:c4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Aug 23 10:02:11 2025 GMT
Not After : Aug 24 10:02:11 2025 GMT
Subject: CN=5703d0b83f0be2ae69ad2612b1814866091772b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:97:4c:16:c5:61:88:e6:e9:a4:91:58:7f:
cd:1c:37:d9:87:c3:b5:5e:41:ea:4a:2b:0a:84:c4:
f3:cb:f9:75:6b:be:72:06:54:56:cf:d0:3e:5c:84:
d7:17:24:c7:ed:da:8a:6f:b0:07:c0:b4:c9:80:36:
a3:af:1e:a8:85:5f:57:ab:41:10:73:27:79:2b:c5:
c4:a9:09:ca:84:6d:6c:0a:45:06:8e:7f:2d:2e:0a:
e5:66:92:29:1b:e3:c4:65:33:cd:34:53:b1:08:8b:
3c:0a:0d:59:a3:60:fb:dc:5b:27:f5:57:e0:ac:a9:
06:77:a4:90:62:f3:50:8d:6d:f1:df:0b:79:d5:e8:
f5:95:1d:b4:c9:b4:b6:c4:7b:c3:36:ea:85:8c:74:
a0:11:23:53:3b:04:9d:ce:8b:51:d8:8f:e1:d3:14:
f1:4b:21:ee:1c:53:c7:04:a4:1a:5e:a2:3f:3a:b4:
bc:e8:dc:94:8c:57:5a:78:e9:67:60:76:d2:e3:23:
8a:f5:13:f3:94:cb:5b:cc:c5:59:8b:94:99:d7:25:
25:8a:4e:52:7d:dd:23:ba:67:f6:47:b1:90:f9:5c:
5e:26:83:56:0a:51:43:06:3c:e1:6f:c6:54:ce:82:
b7:e4:a7:da:de:00:12:2b:12:24:68:92:14:a2:94:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:03:D0:B8:3F:0B:E2:AE:69:AD:26:12:B1:81:48:66:09:17:72:B6
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:57:b2:dd:bc:41:f5:42:ef:81:68:e8:55:7a:7b:34:65:af:
6b:a1:e0:7e:63:7d:31:03:5f:7d:9b:c2:d5:4b:5d:fb:f0:ae:
1f:88:14:1f:e3:52:fc:98:9a:19:b5:ef:4a:4d:92:46:11:f1:
0d:75:f2:fa:9e:dd:ce:44:af:a2:17:6e:4c:98:cc:77:62:30:
fb:05:d3:6b:d3:88:8a:17:55:14:52:d5:66:3d:f8:fb:a6:d7:
50:ae:04:41:fb:49:2b:2a:de:f4:43:12:0f:24:6b:d0:1e:fb:
85:37:6b:ca:c1:d9:b5:38:48:e7:31:64:d5:f2:ee:ba:69:27:
bf:30:03:5b:5d:6d:62:ef:d1:39:51:48:37:11:48:e5:11:ac:
e5:ba:89:3d:66:5f:a0:45:4d:31:66:b3:ea:89:f8:44:79:32:
38:18:64:c2:c2:da:77:f9:19:43:f6:0c:59:7f:d9:42:3a:dd:
c3:03:4c:e4:15:86:33:4c:44:11:da:8f:80:a6:d0:5a:d2:9f:
46:76:05:86:23:f0:ec:a5:fd:fc:25:f6:a2:a9:2b:fc:e9:82:
83:3a:bf:c9:82:18:d2:27:f8:56:3b:9f:b0:38:4d:f1:79:12:
0b:c3:dd:ae:7f:81:c4:f9:14:e0:82:b4:6d:e3:c0:c7:eb:4c:
bb:8d:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:02 2025 by rpki-client