
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: pPP+qTKL8s9WyvuEWfkJ2qaOkqEwWJew/2wJucY0yqM=
Subject key identifier: A8:5C:A7:B7:7F:24:30:D8:AE:BC:95:FB:AE:8F:33:D7:A4:47:57:60
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 0199FBEBAF76DD53F2850315D2DA4859DC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 128A
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: Bbyzg+ftJOoq6X2tlQKGfSM96UHCHLFGHhy5bBKA/W8=)
2: wGg0J5Z28xFGgoF0T-AWE9a8nD0.roa (hash: kGXsD5CJ+k4dwjP4TcCf3ci1gDFHD1TYaxVZBZkFLBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:af:76:dd:53:f2:85:03:15:d2:da:48:59:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=a85ca7b77f2430d8aebc95fbae8f33d7a4475760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:94:19:52:ff:e3:7d:a7:4e:a4:2d:aa:2c:
98:69:ab:27:da:b9:88:3d:d1:88:b5:11:6d:99:2c:
be:19:10:43:f8:cb:4c:f3:92:55:b8:93:22:02:66:
ab:26:97:31:2f:91:64:ff:f7:1b:54:be:90:a0:1d:
e5:ff:16:8a:8b:a5:b3:a4:cc:cc:b7:eb:d7:fc:f9:
f3:78:84:af:19:3f:e7:7f:62:16:50:03:9b:7d:55:
fb:ef:0c:58:3c:b7:df:45:91:ff:3b:a8:0f:a5:4a:
27:73:f4:1d:ff:c4:c1:05:26:03:f8:3b:1e:98:19:
48:3b:b1:ed:10:f4:3b:d8:d6:c1:6f:26:71:7e:59:
2e:6f:ce:b9:ab:d1:29:d2:db:df:1c:47:46:40:d5:
59:cd:42:d4:a4:07:47:06:f3:c9:7f:7e:50:49:c9:
44:28:93:29:fa:1d:f0:ad:0f:fd:a2:f6:41:07:c6:
4d:3d:2f:ea:ec:21:ab:0a:06:eb:fb:65:c6:33:66:
fb:cc:79:6d:7d:bf:0a:f9:ed:71:18:40:a9:f4:e2:
aa:cd:7e:c6:60:9b:b3:8f:b4:09:58:3f:3f:6d:75:
06:c1:38:d4:18:ca:83:39:dc:2e:ba:ec:30:1e:4a:
bf:6a:36:9d:4a:02:ca:f9:ab:59:6f:29:4e:51:da:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5C:A7:B7:7F:24:30:D8:AE:BC:95:FB:AE:8F:33:D7:A4:47:57:60
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5a:7b:bf:87:01:0b:39:2a:98:87:5b:1b:4a:1c:98:6d:5c:
a4:1e:c2:99:27:f1:41:9b:a2:d6:e5:68:c4:a4:6a:e6:fc:ed:
a1:d2:09:a6:bc:91:53:d1:ce:24:96:f5:27:d5:ae:0c:51:2a:
2d:2a:fd:45:fb:68:58:b7:99:a0:df:cb:11:99:a5:66:f6:2c:
d0:7b:83:2c:69:45:14:0b:96:55:f5:22:22:df:20:ed:5e:3b:
f8:6e:d5:01:43:9c:37:e2:72:48:96:c6:cc:18:a2:3f:33:a1:
5d:33:6d:79:72:f8:2d:67:1f:9f:6a:b8:e8:5b:b4:f4:d3:f5:
b0:c6:53:ef:1e:e0:ac:2d:bd:1f:e0:91:45:18:e9:12:02:c7:
46:89:90:78:4d:8c:e6:d4:af:bd:c1:49:9a:48:a2:74:a8:b9:
e2:b2:94:13:61:4a:84:34:e2:54:75:c1:91:21:76:08:b7:9e:
e5:b4:63:80:ab:29:0c:7b:ed:97:dd:67:b7:9c:7e:3b:4a:38:
0c:20:7d:d9:d8:26:c1:dc:55:dc:27:a6:9b:7e:8a:1a:19:03:
9e:92:03:3d:73:59:c2:9c:cc:d3:3f:88:a6:4d:11:4c:93:ec:
ce:ed:38:a9:8c:40:70:cb:ff:62:91:2e:a9:0a:04:6d:26:d7:
93:13:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:56 2025 by rpki-client