Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File: ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier: 1DCfiowWTaz/WefE8AvAcv3IT8y1xomeLeDxhIfqgrc=
Subject key identifier: AD:3B:3A:9B:7A:39:70:55:98:07:87:CA:D9:27:9C:C3:F8:63:EE:28
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial: 019653EE25F33A393D6AA3BF6C46AF1FCD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number: 09C8
Signing time: Sun 20 Apr 2025 16:00:38 +0000
Manifest this update: Sun 20 Apr 2025 16:00:38 +0000
Manifest next update: Mon 21 Apr 2025 16:00:38 +0000
Files and hashes: 1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: ZRK6joGQrhH/uicZppRm8Gm5qsRHfVRceDHE9AVlI1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:25:f3:3a:39:3d:6a:a3:bf:6c:46:af:1f:cd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Validity
Not Before: Apr 20 16:00:38 2025 GMT
Not After : Apr 21 16:00:38 2025 GMT
Subject: CN=ad3b3a9b7a397055980787cad9279cc3f863ee28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:b5:05:7a:75:87:b1:7f:37:61:57:82:5b:
15:cf:62:a5:98:c9:fc:13:11:17:36:82:16:d9:34:
12:6c:4d:dd:55:a0:5e:7c:28:a4:85:f2:d8:8c:4d:
54:13:a1:0d:37:3a:df:4c:b3:3b:8c:91:7b:fc:1b:
a8:73:5d:6a:e5:c0:c5:71:9e:64:94:f5:69:d2:2c:
5d:26:ae:01:43:c5:a0:25:0d:b6:09:08:36:d2:1e:
ed:90:6b:92:2e:14:19:10:96:41:34:50:fb:45:0d:
e6:3a:f4:78:79:df:6e:82:ab:b1:40:67:81:73:9c:
1e:56:1d:b4:b7:5c:d0:1b:4c:b7:f4:52:43:20:d2:
3d:b4:47:2e:9f:ea:48:bb:0a:cd:7c:bd:e2:1b:e7:
f2:eb:91:fe:fb:6a:8e:a0:15:00:fc:0a:63:15:6f:
f5:3f:7f:bb:fe:a1:29:5d:a2:41:45:1f:40:8b:05:
e3:c6:1a:ce:46:fa:2f:5b:1f:22:68:64:92:6f:47:
51:2d:9b:87:1e:67:a5:8b:1d:76:48:c0:4d:70:8f:
f7:6c:71:8a:ea:f5:1e:98:c0:fc:e5:83:06:29:09:
68:7d:d7:41:e1:1c:78:d3:37:cf:34:de:87:0d:94:
c3:dd:88:ce:b1:81:89:42:3e:2b:06:1e:90:07:1d:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:3A:9B:7A:39:70:55:98:07:87:CA:D9:27:9C:C3:F8:63:EE:28
X509v3 Authority Key Identifier:
keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:52:38:8a:44:83:72:74:17:3b:ff:1b:87:32:d0:f5:e1:66:
ba:e0:72:c5:49:8e:d2:bb:0c:ff:78:88:55:15:90:62:28:4f:
46:d7:e3:81:d5:09:d6:0b:e1:b8:af:50:b9:96:ea:53:4c:0f:
76:95:35:f9:dc:32:ee:92:e4:2e:85:52:33:03:17:af:9d:a2:
8c:25:f3:a9:8a:a0:c2:9f:c6:75:6e:54:3d:c7:e0:0b:e5:12:
57:af:5a:d4:f5:26:80:a2:3a:89:4f:5d:60:57:ed:11:68:58:
fc:bf:a8:03:4b:66:51:f9:0d:35:f2:6e:53:dd:f1:c7:e2:78:
50:82:70:11:51:36:6f:9d:fb:57:c4:67:64:9c:e3:9a:b6:79:
08:cc:0b:4d:ae:50:e9:77:27:8c:51:5f:65:bb:a2:d5:6d:f8:
24:cf:28:74:bd:0a:53:01:c0:59:49:7f:12:a7:94:64:63:8d:
cc:50:cd:04:fe:70:9f:1d:a3:91:5e:75:4a:d6:8e:e9:c9:b8:
45:95:b5:d2:b2:a3:b3:4a:85:15:74:f5:1e:3a:cc:c6:54:b4:
18:d3:57:54:a5:e2:a3:19:81:16:08:a5:21:b0:66:1b:5f:e0:
54:19:ec:87:89:5e:5a:37:2c:5a:f9:c6:f3:d4:7c:44:66:ad:
3e:d5:aa:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7iXzOjk9aqO/bEavH81LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjk3NGVmYjUwZTcyOWM5ZTAxNWE4YmMyYjZjMmIwNjE5
ZGZjODQwHhcNMjUwNDIwMTYwMDM4WhcNMjUwNDIxMTYwMDM4WjAzMTEwLwYDVQQD
EyhhZDNiM2E5YjdhMzk3MDU1OTgwNzg3Y2FkOTI3OWNjM2Y4NjNlZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfy1BXp1h7F/N2FXglsVz2KlmMn8
ExEXNoIW2TQSbE3dVaBefCikhfLYjE1UE6ENNzrfTLM7jJF7/Buoc11q5cDFcZ5k
lPVp0ixdJq4BQ8WgJQ22CQg20h7tkGuSLhQZEJZBNFD7RQ3mOvR4ed9ugquxQGeB
c5weVh20t1zQG0y39FJDINI9tEcun+pIuwrNfL3iG+fy65H++2qOoBUA/ApjFW/1
P3+7/qEpXaJBRR9AiwXjxhrORvovWx8iaGSSb0dRLZuHHmelix12SMBNcI/3bHGK
6vUemMD85YMGKQlofddB4Rx40zfPNN6HDZTD3YjOsYGJQj4rBh6QBx0ctQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK07Opt6OXBVmAeHytknnMP4Y+4oMB8GA1UdIwQY
MBaAFKL5dO+1DnKcngFai8K2wrBhnfyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZsMDc3VU9jcHllQVZxTHdyYkNzR0dkX0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82NjgzNDUtZjViYy00YTNmLWI2ZmYt
MTBkZjQ5ZjY1NjE2LzEvb3ZsMDc3VU9jcHllQVZxTHdyYkNzR0dkX0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82NjgzNDUtZjViYy00YTNmLWI2ZmYtMTBkZjQ5ZjY1NjE2
LzEvb3ZsMDc3VU9jcHllQVZxTHdyYkNzR0dkX0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlI4ikSD
cnQXO/8bhzLQ9eFmuuByxUmO0rsM/3iIVRWQYihPRtfjgdUJ1gvhuK9QuZbqU0wP
dpU1+dwy7pLkLoVSMwMXr52ijCXzqYqgwp/GdW5UPcfgC+USV69a1PUmgKI6iU9d
YFftEWhY/L+oA0tmUfkNNfJuU93xx+J4UIJwEVE2b537V8RnZJzjmrZ5CMwLTa5Q
6XcnjFFfZbui1W34JM8odL0KUwHAWUl/EqeUZGONzFDNBP5wnx2jkV51StaO6cm4
RZW10rKjs0qFFXT1HjrMxlS0GNNXVKXioxmBFgilIbBmG1/gVBnsh4leWjcsWvnG
89R8RGatPtWqQA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:46:35 2025 by rpki-client