Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: 4WU8lSv2HEmcwdV9Ud82e2YHaL9jYfM5c9dScp4MN04=
Subject key identifier: 4B:0D:B8:95:9A:DD:F8:3C:06:CB:5B:FB:22:A0:24:5B:27:3C:3B:84
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 01965B7137AD50BBDFE729E35EAA5CCA5121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 10F8
Signing time: Tue 22 Apr 2025 03:01:08 +0000
Manifest this update: Tue 22 Apr 2025 03:01:08 +0000
Manifest next update: Wed 23 Apr 2025 03:01:08 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: d2QHzu+r79RM/2Svi1Xt6ob10si126j5N5UAV3fDVIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:37:ad:50:bb:df:e7:29:e3:5e:aa:5c:ca:51:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Apr 22 03:01:08 2025 GMT
Not After : Apr 23 03:01:08 2025 GMT
Subject: CN=4b0db8959addf83c06cb5bfb22a0245b273c3b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:97:d9:9b:26:92:72:ee:f3:f3:ef:c2:e5:
07:7b:a0:fb:e8:59:40:f4:c6:a1:0b:c9:78:25:57:
f2:55:a4:31:6f:b5:f1:8f:e8:7f:98:4b:f6:d3:2e:
70:93:a6:19:c0:cc:c2:2b:8a:9e:24:22:eb:b0:8f:
6f:1a:91:64:58:c9:16:10:97:ad:08:ee:ca:72:61:
ee:34:a8:52:f8:a9:49:7d:b3:18:b7:eb:de:0e:56:
21:fd:6b:2e:b6:88:42:32:b8:ec:7a:f9:38:4e:ab:
0d:d5:ba:36:84:6d:e8:7c:de:84:4b:4b:da:6e:8b:
f2:60:61:b0:07:15:2d:63:92:bd:28:e3:6a:ec:fd:
33:4b:9b:e2:d8:33:e6:02:3d:ef:ea:59:bc:74:a0:
52:fa:49:7c:16:e2:6d:b4:04:b2:f1:f5:08:75:3a:
77:53:fb:d9:8e:50:82:66:2a:31:fb:20:26:97:eb:
41:7c:3a:18:98:96:d3:f8:73:59:5e:da:12:8d:a6:
cc:ee:b4:fc:06:4c:4e:2d:5a:98:2f:8e:b1:f5:6f:
6d:ed:55:6c:cc:8b:60:7a:b6:e2:03:92:d4:5c:5f:
54:5b:b4:e4:25:ee:e4:8b:2e:c9:12:b1:17:74:fe:
7b:a9:48:d9:01:56:33:f5:74:b8:b1:38:29:48:7c:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:B8:95:9A:DD:F8:3C:06:CB:5B:FB:22:A0:24:5B:27:3C:3B:84
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:08:10:14:60:bf:3b:9a:43:f5:33:88:8f:a2:2e:1d:6c:32:
7c:79:8c:25:67:32:5e:9b:2e:c3:f9:7d:21:3d:f7:fd:0c:d2:
69:b3:29:33:e0:ae:8e:7b:91:a2:45:e9:f1:22:25:39:ab:69:
76:d8:c6:6d:92:ef:8e:2a:6b:da:0d:7a:2a:b4:a3:79:2d:f4:
1d:e6:62:0d:eb:fa:31:a1:de:dc:56:64:68:bf:1f:82:18:b3:
a2:8b:3d:18:a3:18:f0:31:72:1b:ec:9e:09:67:da:8e:88:e0:
89:b5:17:71:5a:1e:f7:d0:02:09:36:9c:95:20:12:ef:97:6f:
32:5c:30:a8:21:1c:5d:18:06:30:df:e0:26:3f:be:7f:aa:4c:
f3:33:c4:71:9d:bc:8c:6a:fc:b0:b0:3e:52:14:35:69:e8:b4:
b8:bc:9f:da:c1:4e:df:19:79:9a:aa:1c:1a:61:df:a8:e8:4e:
ee:91:46:8f:f5:09:8c:c3:f1:58:02:45:8b:d9:51:67:49:53:
bb:85:61:5a:c0:73:b9:4d:bf:41:77:07:15:ef:69:11:bb:59:
36:b7:9f:6f:e9:ad:91:d2:8e:9a:28:6e:27:40:dc:f9:20:6b:
71:71:9a:8c:c4:b3:75:12:a7:a4:bf:db:a1:b9:9b:b7:21:c2:
d6:2f:76:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:05:06 2025 by rpki-client