
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: 5sVz57RsDYPfi49tG4HLEza+AdaEtuXHOqXBcG+jd5I=
Subject key identifier: 3F:EE:50:B2:CF:8E:E3:0B:CC:5A:0B:05:16:D6:B2:47:C1:A2:8A:1E
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 0198530ECB9AFADA76F64E85A9A607DFD7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0B5F
Signing time: Mon 28 Jul 2025 22:02:15 +0000
Manifest this update: Mon 28 Jul 2025 22:02:15 +0000
Manifest next update: Tue 29 Jul 2025 22:02:15 +0000
Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: i5weYyPFj5n1Er8UL4gSXVJ1P6x3/LLp0Zjaf2ZQnLE=)
2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:cb:9a:fa:da:76:f6:4e:85:a9:a6:07:df:d7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Jul 28 22:02:15 2025 GMT
Not After : Jul 29 22:02:15 2025 GMT
Subject: CN=3fee50b2cf8ee30bcc5a0b0516d6b247c1a28a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:31:5f:3a:c1:03:36:57:c4:93:62:0a:cd:
e5:7e:86:7c:90:4b:88:05:83:b4:3d:5d:c3:15:b1:
c1:ae:d1:db:0e:e2:aa:55:a3:97:58:60:6f:e8:fc:
85:ef:b3:1b:88:fd:90:7a:bb:75:13:ec:92:fc:90:
bc:b1:21:07:2d:35:1e:df:7e:7c:1a:2a:d1:d3:3c:
3f:59:19:64:4c:87:39:a3:38:36:92:9f:99:be:ca:
80:d2:be:05:4f:bb:90:6f:32:98:ff:41:f9:3a:f7:
c5:69:fa:54:4f:92:5c:ac:2d:99:98:ab:e3:46:fb:
72:30:49:21:6c:1b:79:a8:ea:8c:3e:0f:28:3b:46:
34:d6:13:b2:a0:6b:a7:d2:0a:d2:ae:25:33:0c:d6:
04:67:79:cc:32:3c:ca:84:16:c9:62:cf:2e:5f:c3:
1b:37:49:bb:fb:2b:0d:80:f2:1d:16:9a:17:23:ee:
7f:2d:d2:ee:2f:b8:9a:b7:1c:7b:22:25:2f:86:0a:
f1:ac:33:68:4e:54:eb:57:f8:82:bc:1f:05:a3:11:
f7:bd:66:6b:03:12:f3:28:fe:87:10:b4:23:fa:96:
78:9e:be:4d:cb:e1:eb:f0:ee:15:75:29:12:5e:a2:
d1:82:a6:7e:c1:45:bf:4c:ae:3c:02:ec:30:6e:f3:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EE:50:B2:CF:8E:E3:0B:CC:5A:0B:05:16:D6:B2:47:C1:A2:8A:1E
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:80:9a:db:88:ce:15:93:f7:2d:bf:03:df:e6:13:7c:35:54:
9d:97:34:76:a1:b1:de:e3:bc:03:cf:ff:cb:1a:ff:09:e5:64:
fc:4f:ce:3a:3f:e8:de:09:19:08:63:94:7b:f7:46:c7:8b:ca:
60:75:0d:1a:9c:19:d2:98:ea:20:82:0d:71:7d:d4:be:cb:55:
7c:3b:37:99:67:bf:9c:dd:2c:f4:f8:bd:c7:b1:ed:28:66:73:
6a:39:25:e6:73:78:79:fa:44:a5:1c:01:9d:fd:51:3f:76:cf:
a7:22:57:9e:c5:2e:fa:1b:0b:62:b9:61:08:a5:3e:f4:aa:31:
90:c3:0b:40:8c:d3:b3:2b:f3:2b:50:64:94:05:f8:33:10:03:
49:37:db:1a:b0:5e:d6:cd:02:61:58:29:23:e6:5a:a4:af:83:
ba:5a:63:2c:9a:c1:85:6d:12:61:f1:08:82:24:95:a6:eb:5b:
2a:7d:00:61:45:ba:18:65:b4:8e:e7:4c:85:bc:46:bf:23:00:
37:6e:0c:85:a7:ae:90:1d:b1:3e:d5:3f:c1:6d:58:24:9d:4b:
f3:b0:ac:f8:02:5c:3d:05:62:ba:29:45:91:d9:89:39:ce:1a:
9e:b7:7d:d7:56:7f:71:8c:5a:06:d8:5d:a7:f3:b5:fa:52:13:
a3:91:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:38 2025 by rpki-client