Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier: tX+OIT9XK3AdsFN4SEzO5y/Dtn7cX3p2TRbfyBHeP6c=
Subject key identifier: C8:FC:38:43:23:7C:96:5F:75:B4:AC:11:30:E2:0F:8D:22:71:43:F4
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial: 01984BC16EF9816490505169FDEAAB43FDEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number: 152D
Signing time: Sun 27 Jul 2025 12:00:24 +0000
Manifest this update: Sun 27 Jul 2025 12:00:24 +0000
Manifest next update: Mon 28 Jul 2025 12:00:24 +0000
Files and hashes: 1: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: x+L41+pPNrPYvpyq4Ufp0AlWNI+ycLCqWCc7SBuxNg4=)
2: RzHN7Dslblmf2SWetMH6DUd-Es8.roa (hash: 2K0PSVlUZvtFJCr5mNlFcXi4Xq9NSfuA5JwXa1JJxuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:6e:f9:81:64:90:50:51:69:fd:ea:ab:43:fd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Validity
Not Before: Jul 27 12:00:24 2025 GMT
Not After : Jul 28 12:00:24 2025 GMT
Subject: CN=c8fc3843237c965f75b4ac1130e20f8d227143f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:aa:9c:80:59:11:5e:d7:4b:09:cd:ee:cd:
d7:9e:85:88:4b:c0:72:00:b8:da:6d:e0:ac:40:75:
12:08:aa:df:ad:38:7c:0e:99:aa:00:c9:8e:b3:62:
a6:06:62:94:23:11:a8:d2:7f:a1:75:04:4f:1c:d0:
24:cc:54:43:69:d5:1f:cc:7d:77:bc:d0:05:40:8e:
f4:a8:7a:0d:03:42:7e:e3:61:77:71:c4:74:8b:b5:
0b:5f:5d:1b:49:3a:07:f2:29:7a:2e:d6:9d:d1:5b:
05:2c:de:ef:fc:cc:17:05:69:4b:b5:bd:19:4d:64:
57:1b:4f:f5:7b:1c:68:18:2f:91:dc:7f:b2:5e:a5:
24:b6:df:f2:8a:57:7d:ca:7e:f3:8c:78:ab:cf:5e:
d8:24:92:e0:ea:58:2c:c3:d3:12:e5:50:9b:1d:36:
c3:dd:32:ef:c5:b2:d5:a6:40:06:77:f9:1b:22:09:
af:87:3f:e2:e3:6f:b4:2c:ba:16:c9:0f:29:25:fc:
a2:56:9f:bb:e1:2d:4e:6c:02:c9:a3:44:62:ea:e2:
bd:7a:63:03:d3:15:d6:bb:ee:6b:4e:62:ca:8d:15:
64:96:fe:fe:30:56:8b:3e:b9:b9:bf:b8:b9:ef:bc:
5e:d3:9b:1e:b8:42:d2:85:98:47:ef:5d:b4:73:4e:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FC:38:43:23:7C:96:5F:75:B4:AC:11:30:E2:0F:8D:22:71:43:F4
X509v3 Authority Key Identifier:
keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e9:7e:ea:36:f2:4c:9e:43:0f:ae:f4:58:78:95:c4:46:93:
8c:7f:5c:6e:a3:ba:55:30:2c:06:1f:58:1d:8a:29:eb:e6:78:
d0:3d:18:18:f5:52:fc:4c:39:40:b6:a7:26:64:8f:76:b8:3a:
dd:3d:26:cf:92:76:ea:d4:93:0d:ce:57:fb:d8:12:0e:fd:32:
19:cc:40:88:d3:cf:bf:14:9d:ea:df:ed:3e:ed:c6:53:bf:e3:
a0:48:88:f9:1d:ed:9c:4f:dd:24:a0:99:23:03:a3:55:8d:b0:
59:a9:40:bc:c4:eb:b8:ed:de:ed:a5:ed:d1:35:7f:91:62:f0:
18:e2:59:57:58:a1:25:40:04:2a:ad:2e:aa:72:2a:4c:a8:70:
ae:48:3a:f8:02:60:31:d9:68:88:d9:ed:35:54:03:d4:20:eb:
38:3a:30:54:d8:fb:28:dc:38:af:f2:af:7f:cf:97:22:53:e9:
1a:0b:69:fc:e6:e1:45:99:95:0c:f1:af:bc:7d:26:91:a8:f8:
3c:70:26:44:51:4c:6b:11:c4:5f:62:69:2b:48:1a:52:40:61:
f5:66:f7:7c:c2:91:f2:2e:0f:ce:29:14:28:b2:45:09:1c:67:
74:38:75:d3:3e:f4:ab:26:62:f9:d1:a7:a7:9a:d1:31:e5:b1:
c2:49:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:13:18 2025 by rpki-client