Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: q1ne1u1oTyaOZQ2WrNpyB/mrCkOBfgwKuDdbUakcEKQ=
Subject key identifier: CA:BF:38:0B:A1:C3:4B:86:3B:68:C5:87:66:0E:E7:91:A5:71:E8:B6
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 0197B6A0B7C6D64661C7A9B0062D0406F3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0B0E
Signing time: Sat 28 Jun 2025 13:01:15 +0000
Manifest this update: Sat 28 Jun 2025 13:01:15 +0000
Manifest next update: Sun 29 Jun 2025 13:01:15 +0000
Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: QPuKHgIkpbvuAyp92ULFy11Q3xpjB7MFm4D1NQyRmq8=)
2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b7:c6:d6:46:61:c7:a9:b0:06:2d:04:06:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Jun 28 13:01:15 2025 GMT
Not After : Jun 29 13:01:15 2025 GMT
Subject: CN=cabf380ba1c34b863b68c587660ee791a571e8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:c4:88:69:7b:d1:81:d3:79:3c:3d:8d:cf:
c2:37:02:0b:0b:f3:68:68:a1:6f:c1:a8:f9:9a:3c:
91:f1:9b:5a:72:f8:91:ef:a3:af:ee:df:68:56:c0:
5e:f7:85:ce:83:25:11:e6:07:0d:5b:a3:60:b8:86:
57:74:60:64:dd:e3:e4:ff:eb:c1:69:6e:b5:2b:41:
d5:fb:10:f7:15:a7:a4:e7:c4:1c:f2:55:62:be:a4:
5d:a9:b9:9a:3f:d5:0d:d4:62:c0:08:30:d6:b3:ea:
4e:70:e9:a2:e2:dd:d1:e1:16:02:d1:55:35:4b:36:
88:2e:cb:6d:76:f1:e7:f9:fb:d6:7f:67:ad:dc:c5:
70:21:25:b8:cf:3b:ea:5c:6d:4a:5a:22:48:8a:8d:
b7:d6:d3:4b:3b:9d:3d:19:d9:11:a3:74:7b:27:66:
10:09:d0:6b:bb:b0:ff:32:48:13:1a:c2:aa:fe:98:
97:dd:05:2a:7e:ff:51:2c:33:85:3c:a2:bb:8c:68:
e1:ad:3e:7f:49:d5:a5:6f:0c:41:43:c0:39:2e:68:
88:75:d6:7c:4a:15:c5:fb:dc:56:3f:f8:22:fc:d5:
3e:11:15:45:8a:ea:a5:a2:c1:25:62:43:4a:8d:06:
d9:f9:37:3f:55:18:a8:ef:f7:d7:2b:d1:9e:37:19:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BF:38:0B:A1:C3:4B:86:3B:68:C5:87:66:0E:E7:91:A5:71:E8:B6
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:eb:12:e4:f2:1c:2e:a2:25:09:3a:8d:20:e7:01:d6:7a:9e:
83:89:74:ec:bc:8b:40:30:62:73:5d:89:6e:92:57:d6:63:ad:
17:6e:63:61:8f:61:3d:1a:60:f1:8f:e4:7f:01:e1:83:fe:45:
a8:ac:60:37:c6:b6:a1:52:11:2c:c0:87:58:94:0d:77:bc:ea:
97:a9:b0:fd:b3:82:b8:d1:b9:e3:74:47:f6:72:d3:0d:70:dd:
c4:54:f3:41:4d:6f:e6:41:7f:02:f1:e0:2f:9d:27:37:b4:4e:
94:65:33:89:c5:23:36:b4:56:ca:49:76:9b:da:da:c9:eb:5e:
5e:38:82:cc:f5:24:52:e3:19:97:a7:fd:e5:1c:0c:3e:c0:9a:
a7:9a:1b:1f:18:83:7c:5f:23:4f:d8:c9:73:a1:2b:c2:a6:42:
96:d7:99:ad:91:44:60:1d:02:d5:34:6c:8b:46:0e:61:76:b1:
04:e9:23:74:1f:4c:3a:53:89:3b:db:2e:73:26:3b:25:69:0f:
53:b9:ac:7f:05:ba:12:75:f6:35:ce:58:04:17:d4:54:35:95:
91:73:eb:43:8a:89:e3:09:b3:ab:2a:94:b5:a2:ab:06:b0:6f:
42:2e:d5:de:2e:af:fe:85:8c:2c:fd:69:38:f1:0b:a5:ff:e6:
c6:b8:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:55 2025 by rpki-client