Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: lnhw/zRq2ApoceJvM7BEAYhh0IpRQ0sL24x6FXiRGgI=
Subject key identifier: 21:FD:67:9F:6C:DF:87:D7:EE:2A:67:88:23:58:F8:92:4E:BC:4F:1F
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 0198D473D6F2F9C98E6FA43E7C0E7DE5901F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 11F1
Signing time: Sat 23 Aug 2025 01:03:38 +0000
Manifest this update: Sat 23 Aug 2025 01:03:38 +0000
Manifest next update: Sun 24 Aug 2025 01:03:38 +0000
Files and hashes: 1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: 7x/SZyLFWnF6YSvGghdTWuwLAXOrGemIOUa0EeG3ZfE=)
2: wGg0J5Z28xFGgoF0T-AWE9a8nD0.roa (hash: kGXsD5CJ+k4dwjP4TcCf3ci1gDFHD1TYaxVZBZkFLBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d6:f2:f9:c9:8e:6f:a4:3e:7c:0e:7d:e5:90:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: Aug 23 01:03:38 2025 GMT
Not After : Aug 24 01:03:38 2025 GMT
Subject: CN=21fd679f6cdf87d7ee2a67882358f8924ebc4f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:47:69:1b:fd:73:21:cf:65:d2:e7:aa:58:
14:97:bb:42:b1:e8:60:d3:be:b6:44:0f:e2:93:5d:
24:1b:75:c7:0e:27:e7:80:0f:b7:8f:ee:e1:31:bc:
d5:08:92:48:29:8f:08:26:3b:19:ab:6d:8d:9f:b5:
25:4c:cb:ba:da:3d:37:f4:07:fd:ec:b8:9e:f4:1c:
88:9e:cd:33:7a:be:a0:d2:89:2a:0a:f1:3a:7b:df:
a2:e8:42:b1:af:ae:8f:c4:53:bc:b4:e5:1d:df:eb:
4d:43:71:fe:45:aa:8d:96:a6:fd:d2:8b:19:9d:94:
12:ca:25:e1:b0:03:5f:44:4e:4d:e8:78:65:cc:6d:
7e:00:d5:bc:d4:7e:a3:42:b0:da:79:89:e4:c3:67:
eb:9e:a4:94:56:4f:9f:df:e9:03:c6:61:69:c9:cb:
38:14:87:1b:e4:65:d6:b8:71:15:12:ca:90:88:ca:
88:d0:44:d1:30:16:52:af:11:da:06:60:f1:86:2d:
99:5b:5e:d2:68:88:61:3f:22:b9:1c:fa:1f:e1:61:
87:58:22:b2:79:41:5c:a3:2e:d7:02:c0:30:4d:8b:
fb:d7:a8:43:aa:c1:bb:66:14:5f:6c:4c:e6:07:a0:
3d:25:a4:63:71:8b:c4:e7:12:ce:d1:b3:03:26:b5:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:67:9F:6C:DF:87:D7:EE:2A:67:88:23:58:F8:92:4E:BC:4F:1F
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:61:fb:21:5e:87:29:c8:29:78:6a:66:31:57:45:91:3a:8c:
69:e8:c0:69:e4:58:41:ec:bd:b6:f3:f0:d9:2e:a8:c8:28:94:
98:ed:ad:ed:b7:38:5c:7b:9f:66:56:d8:62:fd:b5:b9:25:9c:
7b:89:d4:96:0b:3e:e1:c1:61:e8:80:78:85:50:1d:bd:1b:26:
ac:26:dc:64:cb:04:fc:74:c6:29:e1:4a:dd:ee:d2:b6:3a:39:
ae:ef:65:95:d2:13:a0:e7:f7:4f:de:c2:75:34:0a:04:a8:19:
20:ef:e9:98:c7:69:c3:5f:c5:70:6d:0a:c0:09:8e:cc:d3:63:
53:d8:74:ac:a1:2a:b5:f9:d2:2b:c1:4c:28:49:51:5f:6a:1d:
5d:52:7b:19:db:c2:fc:bc:a3:54:b6:de:6e:cc:8d:21:89:27:
91:56:1f:7e:09:44:c0:60:aa:b1:23:cb:b4:e4:da:87:db:b2:
11:52:b1:f1:e7:3c:e6:46:c4:3e:dd:82:58:23:c3:56:5e:d8:
f7:95:19:3f:e2:f7:a5:a0:f3:e0:08:b7:d7:b6:dd:a0:97:fb:
67:21:23:15:b0:99:89:a4:ee:56:72:c6:d9:f3:2e:34:5b:89:
d6:66:8d:72:25:53:7b:52:5b:ef:2c:84:d5:a2:8c:d8:c6:48:
1f:72:ea:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:27 2025 by rpki-client