Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: 5Mi9/KdxMT3xBQn/w3aB+605+dja2pPhMzErp7EaOxg=
Subject key identifier: 20:90:B4:5F:5A:81:7B:C1:11:9F:3C:EC:FF:4B:EA:1F:E0:3D:6A:37
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 019849D38C0D32D8D2DF4A8B122D40BD6CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 03:00:57 +0000
Manifest this update: Sun 27 Jul 2025 03:00:57 +0000
Manifest next update: Mon 28 Jul 2025 03:00:57 +0000
Files and hashes: 1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: OfsbF9wraYpGjwYakIKxEkttV8pvUbPHYlG4syBDARo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8c:0d:32:d8:d2:df:4a:8b:12:2d:40:bd:6c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Jul 27 03:00:57 2025 GMT
Not After : Jul 28 03:00:57 2025 GMT
Subject: CN=2090b45f5a817bc1119f3cecff4bea1fe03d6a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:5c:c6:1a:f2:86:c0:cb:82:c0:b2:98:3d:
2a:03:12:7b:b8:03:d7:09:1b:20:fa:00:bf:fd:95:
8d:5b:de:ad:aa:2d:db:9b:88:9d:e4:a9:a6:34:0b:
f1:e3:5f:c9:ba:45:68:d8:00:ac:79:f9:9d:26:c6:
2c:49:76:dc:03:df:23:83:62:3f:97:8a:17:29:a2:
af:e9:98:82:eb:07:94:44:ae:6c:51:a2:91:f1:e9:
d5:cb:05:03:64:f7:22:a8:d5:f2:c1:89:e8:e6:73:
0a:2b:b1:5d:1b:7d:c5:9e:5a:fb:3e:d9:87:42:f7:
dd:b5:2d:54:db:8f:0a:97:57:b9:4a:1e:61:1f:5f:
a4:41:ec:f1:17:a1:8c:cf:10:e7:e0:c3:10:c4:78:
5e:3b:ea:d3:f7:47:54:02:48:d8:47:fb:5e:d3:98:
a6:4f:2d:ee:f3:f0:c2:bd:a2:0f:38:3b:b5:3d:74:
a4:f5:80:6f:d0:df:ab:bc:5e:32:09:8d:b4:10:0f:
67:93:d8:cb:3c:ea:fd:af:4e:6c:cf:c5:59:2f:46:
e6:ba:54:46:af:24:f2:9e:64:8c:e4:8b:52:2a:5b:
81:8a:7a:66:9a:98:25:4c:06:56:7a:15:e1:84:14:
ac:46:3c:f4:1d:3e:43:57:80:f0:da:65:18:13:ce:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:B4:5F:5A:81:7B:C1:11:9F:3C:EC:FF:4B:EA:1F:E0:3D:6A:37
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:49:b6:bc:88:0d:47:d0:5f:f9:aa:d6:f9:3c:8e:c9:19:03:
a7:1a:b4:9f:a9:07:f7:fd:39:8e:9b:f3:fa:07:f9:03:68:76:
a6:9a:3f:fb:7c:36:b7:bb:e5:62:6a:e9:c0:45:7b:20:22:86:
de:cb:5d:93:b9:96:78:71:f9:02:80:c4:5f:e8:28:e7:6e:b5:
ed:7f:4f:2c:9b:7d:ab:40:b2:85:5b:4d:1b:90:d3:84:be:a6:
31:65:c0:4c:73:a5:02:43:98:ab:da:f8:79:82:60:b2:54:c8:
64:32:c9:84:b9:de:66:ee:60:03:29:05:af:d8:cf:c3:23:83:
27:2a:2a:12:33:59:74:be:4a:7a:f2:24:93:4f:0c:79:bf:5a:
68:a9:53:00:de:9e:66:0b:89:b5:f2:16:59:2f:8b:4f:12:75:
98:7d:de:b0:9f:76:85:9e:1d:0c:85:b4:8c:46:29:c6:05:39:
81:cd:bd:fe:c0:6b:5f:3a:a6:a4:53:be:41:f9:42:07:bc:8a:
d5:d7:15:81:ae:5b:d6:70:bd:52:74:b9:27:3c:5e:d5:a5:63:
24:ac:b2:43:8a:41:f5:bc:11:20:13:f4:73:42:73:4e:fd:0f:
51:b0:d3:61:cf:7d:dc:a7:06:6d:60:96:39:73:ab:4f:08:52:
ad:b2:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:46 2025 by rpki-client