Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: pgWRDELmiIONqOdcdA4vCRZQERiqrFi47ham7z0Rbec=
Subject key identifier: F1:56:62:AA:FD:3C:08:92:77:11:D0:87:92:E2:68:E4:21:DA:E7:AB
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 01964A0FC0E219DDDF7D2710DAED9FF6420B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 18:01:08 +0000
Manifest this update: Fri 18 Apr 2025 18:01:08 +0000
Manifest next update: Sat 19 Apr 2025 18:01:08 +0000
Files and hashes: 1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: lB3UOB9vtyixrv3UZ1XC2PVCOXDdNOlV73+AWsnuQvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:c0:e2:19:dd:df:7d:27:10:da:ed:9f:f6:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Apr 18 18:01:08 2025 GMT
Not After : Apr 19 18:01:08 2025 GMT
Subject: CN=f15662aafd3c08927711d08792e268e421dae7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:88:a5:06:22:17:03:f9:92:86:66:c8:85:
76:7d:84:36:ed:d8:bf:14:59:c1:cc:63:40:ec:17:
07:6d:5f:83:74:0c:24:b4:b6:67:35:01:5b:ef:b3:
b6:9b:ca:83:46:a0:58:b0:1f:f5:b6:2a:65:53:bb:
df:86:2f:00:49:98:98:34:99:a0:9f:2e:ca:0e:4c:
9b:3f:b1:35:07:09:d6:f6:7c:d7:41:a1:79:e4:4c:
74:c0:1e:13:1d:76:24:92:22:51:e9:23:36:8f:00:
9e:15:32:fe:a3:f0:a5:62:f0:6f:14:52:48:42:df:
8f:95:11:09:7f:bb:a5:b7:17:78:16:7d:46:68:f1:
5f:ad:78:53:e1:01:82:44:c0:4f:12:f0:82:f5:58:
13:cf:1a:50:43:df:7f:29:ed:fd:b8:9e:03:65:0d:
a5:c7:1a:3b:59:f8:00:c8:fc:6d:09:af:5f:a2:01:
9d:49:72:4e:57:7f:76:d2:85:53:d7:b1:0e:fa:6a:
72:c8:dd:00:dc:fd:73:51:3c:fd:68:7f:c8:40:1f:
8e:d8:e5:90:ab:d4:d7:2a:23:bf:51:60:e5:d7:4c:
31:28:2b:ba:4d:c6:81:37:07:d4:e0:ad:78:da:5b:
f0:9d:e9:ac:21:b3:96:fa:96:bf:af:85:be:a6:fa:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:62:AA:FD:3C:08:92:77:11:D0:87:92:E2:68:E4:21:DA:E7:AB
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0f:91:35:05:1e:25:ad:d2:a5:a9:fd:88:94:a8:c1:68:69:
27:b5:64:ba:23:a3:e0:63:e4:02:64:83:c0:ac:1c:1a:a0:60:
ec:ee:72:05:57:f5:d1:d4:f5:fd:24:c4:f9:f8:a8:72:39:5e:
30:46:4c:b6:76:50:2c:7b:44:39:f5:7e:6f:73:03:c9:6d:ec:
ed:fc:49:31:cd:2b:8e:2e:ae:4c:cf:74:86:19:ec:03:49:10:
d4:06:2a:b1:d3:57:61:9d:62:e1:ec:2e:af:ca:bb:72:76:a1:
4b:24:6b:06:ab:5f:31:02:df:a2:20:7f:41:f7:c9:32:8f:2b:
46:70:8e:bb:e3:e7:c8:6e:2a:72:08:3d:9c:ef:c4:e0:c3:8d:
02:f4:6c:dc:fa:2e:4e:4b:d8:6d:f0:b0:3e:9b:b0:1b:7b:4e:
4c:f9:e1:52:30:b7:7e:3c:79:7b:53:9b:21:7e:7a:2c:d0:f9:
3c:c5:fa:03:d9:2e:19:99:56:62:96:2b:c2:4d:f1:28:e4:ab:
8f:45:23:b9:a8:ba:4e:6c:15:84:73:99:4c:ea:ff:2e:c7:49:
4f:a6:c2:f2:f9:bf:be:ba:07:1e:03:a7:99:13:40:0c:19:3e:
98:cb:30:e0:8c:b9:6c:68:02:13:e6:1c:f0:30:20:fa:83:38:
a1:25:ce:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKD8DiGd3ffScQ2u2f9kILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZmFjNzVmMzkwZTg4MDUyODMzN2RkMGJkY2RjNzc5MzRi
OGRmM2MwHhcNMjUwNDE4MTgwMTA4WhcNMjUwNDE5MTgwMTA4WjAzMTEwLwYDVQQD
EyhmMTU2NjJhYWZkM2MwODkyNzcxMWQwODc5MmUyNjhlNDIxZGFlN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAyIpQYiFwP5koZmyIV2fYQ27di/
FFnBzGNA7BcHbV+DdAwktLZnNQFb77O2m8qDRqBYsB/1tiplU7vfhi8ASZiYNJmg
ny7KDkybP7E1BwnW9nzXQaF55Ex0wB4THXYkkiJR6SM2jwCeFTL+o/ClYvBvFFJI
Qt+PlREJf7ultxd4Fn1GaPFfrXhT4QGCRMBPEvCC9VgTzxpQQ99/Ke39uJ4DZQ2l
xxo7WfgAyPxtCa9fogGdSXJOV3920oVT17EO+mpyyN0A3P1zUTz9aH/IQB+O2OWQ
q9TXKiO/UWDl10wxKCu6TcaBNwfU4K142lvwnemsIbOW+pa/r4W+pvqjYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFWYqr9PAiSdxHQh5LiaOQh2uerMB8GA1UdIwQY
MBaAFKL6x185DogFKDN90L3Nx3k0uN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYt
NzYyMjU5YWI5NTAwLzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYtNzYyMjU5YWI5NTAw
LzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQ+RNQUe
Ja3Span9iJSowWhpJ7VkuiOj4GPkAmSDwKwcGqBg7O5yBVf10dT1/STE+fiocjle
MEZMtnZQLHtEOfV+b3MDyW3s7fxJMc0rji6uTM90hhnsA0kQ1AYqsdNXYZ1i4ewu
r8q7cnahSyRrBqtfMQLfoiB/QffJMo8rRnCOu+PnyG4qcgg9nO/E4MONAvRs3Pou
TkvYbfCwPpuwG3tOTPnhUjC3fjx5e1ObIX56LND5PMX6A9kuGZlWYpYrwk3xKOSr
j0Ujuai6TmwVhHOZTOr/LsdJT6bC8vm/vroHHgOnmRNADBk+mMsw4Iy5bGgCE+Yc
8DAg+oM4oSXO5w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:07:19 2025 by rpki-client