Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier: WJ190QjAQW2ShgG9wAdUWNLYNP+Y5Xgse7iPm/UBAOU=
Subject key identifier: EF:EF:6E:6D:58:56:2B:18:90:CF:13:FD:8A:C4:EE:DB:24:D4:4F:72
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial: 019A7225FCCC785939302A3C7EA08CB2EF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number: 164A
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: EHW1Vo/i+t3jHV9vzSddQukoWik3jAwcBS58DZ1DzQE=)
2: RzHN7Dslblmf2SWetMH6DUd-Es8.roa (hash: 2K0PSVlUZvtFJCr5mNlFcXi4Xq9NSfuA5JwXa1JJxuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fc:cc:78:59:39:30:2a:3c:7e:a0:8c:b2:ef:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=efef6e6d58562b1890cf13fd8ac4eedb24d44f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:b1:7a:d8:ef:b6:1b:f6:bd:cc:69:22:a4:
e3:15:e5:f7:c7:08:72:d7:b5:8f:4d:aa:ec:0d:43:
58:18:2d:d3:9b:88:55:43:ac:cf:07:7c:cb:6f:dd:
b4:1e:20:8a:2e:90:a0:34:84:60:35:6b:35:91:e4:
db:db:25:5f:96:fb:25:2a:70:cb:7a:e1:be:ad:e3:
f3:13:3c:13:68:68:0c:75:8a:53:c9:ea:38:98:8f:
0e:fa:21:5f:b3:33:01:31:80:ae:f9:a9:cd:4b:24:
2f:ed:3e:c5:55:02:2b:ed:12:dc:d5:a2:66:1b:63:
e9:19:89:95:d1:e0:22:72:b6:0b:4e:94:81:ac:b4:
7c:ff:1d:33:ce:c7:81:9e:8d:c0:a3:60:0a:fb:09:
ae:aa:29:3e:ef:2b:a5:c5:23:b7:69:ce:18:20:fe:
ed:66:17:a9:41:d9:23:11:de:6f:0e:05:00:5c:22:
a0:ec:45:ac:22:02:e9:ca:63:55:dd:5b:b6:85:1c:
61:8b:0c:10:89:19:22:4f:33:0f:e7:51:32:27:50:
be:3d:2e:e9:f6:40:1b:28:71:09:69:58:94:84:1d:
0f:32:a8:1b:57:98:c3:f0:41:81:4b:57:e0:d1:4d:
4b:b5:11:9d:95:e7:0c:70:94:2d:3f:86:c5:da:d9:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:6E:6D:58:56:2B:18:90:CF:13:FD:8A:C4:EE:DB:24:D4:4F:72
X509v3 Authority Key Identifier:
keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:40:93:4c:94:a0:58:66:fe:6b:d5:2d:58:cf:d0:61:79:be:
87:67:09:da:18:25:23:9b:eb:fc:64:a1:87:a7:02:fb:4b:e9:
9d:17:a3:3f:b2:45:40:c7:57:e2:20:6f:61:0c:05:0e:20:d1:
bc:8e:33:3f:cb:40:9e:87:b9:43:f8:46:44:36:2c:b0:91:62:
18:38:ac:d1:9d:64:bc:6c:4d:88:58:82:ae:0c:e5:d6:85:e3:
58:ec:70:26:99:8b:4b:84:8a:99:9b:3b:4b:26:fa:df:0c:2e:
80:46:cf:f9:27:17:08:19:9f:d3:67:cd:7d:45:f3:c5:5d:70:
f5:ff:f0:c3:9d:65:e0:37:a8:df:58:42:3a:42:b0:f1:43:1a:
0e:db:97:70:92:ee:6d:02:ed:f6:c5:49:cc:fd:6f:3a:f1:9e:
6d:1f:67:bc:73:5c:a8:9c:7d:38:8c:78:94:ba:c5:d3:44:56:
a2:10:68:72:71:40:01:db:4a:1b:9b:ea:64:11:d1:2f:2e:dc:
3d:e3:80:68:7c:8a:8b:b7:20:a4:b0:6e:ee:b8:e3:5c:e5:1b:
90:ea:2e:7e:b9:1f:9d:34:e4:b4:a1:8b:dc:b3:cf:cc:25:c9:
d5:70:92:fd:94:a3:f7:46:dd:ae:eb:56:3e:31:48:5f:99:aa:
3d:bc:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:34 2025 by rpki-client