Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: lg/NBYEcAY5TElk0HAxCXiVIYwkVE0Mz8FW6s219yOM=
Subject key identifier: 34:A2:9F:EE:06:7D:17:63:D3:4E:DB:0F:E8:CE:89:D6:FE:74:56:C8
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 0196A6542341C9E2EB64091451403092CA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 10D0
Signing time: Tue 06 May 2025 16:00:53 +0000
Manifest this update: Tue 06 May 2025 16:00:53 +0000
Manifest next update: Wed 07 May 2025 16:00:53 +0000
Files and hashes: 1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: VI7pQCo6XUJhxiWWeDGbN1If3xCM+E2FHJ7Awr87q+E=)
2: wGg0J5Z28xFGgoF0T-AWE9a8nD0.roa (hash: kGXsD5CJ+k4dwjP4TcCf3ci1gDFHD1TYaxVZBZkFLBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:23:41:c9:e2:eb:64:09:14:51:40:30:92:ca:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: May 6 16:00:53 2025 GMT
Not After : May 7 16:00:53 2025 GMT
Subject: CN=34a29fee067d1763d34edb0fe8ce89d6fe7456c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:71:a1:5a:33:b8:8c:9e:6b:81:f3:67:df:
26:69:6b:c1:75:a6:ce:e5:39:6c:d8:a3:8a:d3:ec:
98:99:45:4b:01:15:83:15:e4:80:84:bd:c0:85:f6:
33:34:29:60:ba:54:ae:0f:12:43:0d:16:9c:d9:5e:
43:da:0b:ee:6a:07:b7:28:7f:4c:23:a7:2e:95:d5:
f1:3c:36:2c:39:af:9a:a1:5e:78:1c:52:6c:33:03:
8f:ab:b7:c1:78:b5:27:78:98:0d:32:33:1a:43:e6:
bc:47:9b:de:8e:92:67:49:14:1c:3f:2a:d6:30:50:
73:9a:19:ff:94:c9:15:16:bf:7a:40:92:04:1b:f8:
62:a4:80:46:1e:a5:64:97:7d:a5:1c:01:c1:1f:7e:
2d:e8:38:4e:8b:3d:75:bb:ee:7b:46:5c:e9:61:f5:
79:74:31:75:b2:5b:d6:11:7f:3d:35:7a:c6:7f:e9:
40:0c:f1:bd:25:ce:5c:31:df:5a:1c:8b:82:9b:0b:
54:db:8c:5b:a1:24:cc:d0:d0:78:90:2e:85:0d:fb:
b7:7a:27:eb:40:39:ea:8a:fd:73:01:79:0e:b1:5a:
20:0a:b4:a6:57:2e:99:79:e7:33:81:c3:29:69:4b:
58:42:dd:63:13:f0:72:77:b5:6f:f4:32:df:9a:17:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:9F:EE:06:7D:17:63:D3:4E:DB:0F:E8:CE:89:D6:FE:74:56:C8
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:de:99:d5:62:d3:8f:46:0f:33:47:b9:83:c1:f4:7a:9c:e4:
e2:c6:e6:1c:66:12:0d:52:af:7a:16:d9:70:c2:35:1d:5d:68:
0e:77:ed:5d:af:1f:eb:d9:b5:73:f0:04:b4:4f:5d:8f:7f:4c:
19:7f:bc:15:82:48:e1:ba:a6:09:25:0f:54:64:ad:42:8a:c2:
b5:83:38:25:9f:aa:2e:0f:15:11:b8:48:d3:2d:b4:b6:a0:e2:
38:be:a3:dd:b4:d7:83:1a:1f:67:50:4d:f4:30:3e:fb:c9:6a:
64:34:23:07:c5:39:27:d2:f5:c5:d4:38:8a:db:6f:87:7f:ff:
0c:f9:9a:43:0c:cf:d7:e3:47:8c:71:30:b7:88:76:3f:a0:be:
54:b7:79:6a:76:b3:a2:91:9e:4f:bc:21:ae:f6:26:08:c9:de:
29:5a:b5:f3:2e:8d:c4:7c:b4:b3:c8:f7:35:81:61:26:f8:5c:
83:86:2b:57:95:75:d8:f9:de:1f:fa:9b:ff:81:57:7b:27:8f:
08:3d:33:ce:c4:f0:9b:a2:1c:68:09:4c:63:f1:bc:11:83:fc:
9d:c9:8d:a4:82:32:49:a6:66:e1:45:93:23:ec:4c:f7:69:a9:
29:37:2d:6a:2c:35:01:6b:3f:f9:7c:7c:3e:a9:f4:0b:b8:52:
8d:09:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:18:19 2025 by rpki-client