Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier: dfqIG8dHf1DH8NxhlEgklmEXPqfccEReE06UHkkIO2s=
Subject key identifier: 86:4D:AA:1D:A9:D6:D6:56:1B:6C:BD:A5:CC:43:E8:5D:E3:F8:55:02
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial: 0197470BDD4CE6DAAACFCB2C91ACED0B0725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number: 14A6
Signing time: Fri 06 Jun 2025 21:00:49 +0000
Manifest this update: Fri 06 Jun 2025 21:00:49 +0000
Manifest next update: Sat 07 Jun 2025 21:00:49 +0000
Files and hashes: 1: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: 2EesCGA4dnLlRgEJvOU7mzuA5MvCRWjdzVNHnd5DzCg=)
2: RzHN7Dslblmf2SWetMH6DUd-Es8.roa (hash: 2K0PSVlUZvtFJCr5mNlFcXi4Xq9NSfuA5JwXa1JJxuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:dd:4c:e6:da:aa:cf:cb:2c:91:ac:ed:0b:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Validity
Not Before: Jun 6 21:00:49 2025 GMT
Not After : Jun 7 21:00:49 2025 GMT
Subject: CN=864daa1da9d6d6561b6cbda5cc43e85de3f85502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:ad:4a:99:df:9a:7a:c6:1e:9a:43:f1:7b:
26:27:91:42:7e:62:e2:f4:7e:80:32:d6:c0:ca:b6:
ca:3c:b3:c4:ab:27:1a:f9:22:b5:e9:6d:80:5c:76:
67:0d:27:ef:30:73:d9:bd:52:32:ed:13:39:08:3f:
10:57:b0:db:e0:b8:13:f9:af:8b:0b:5f:ca:42:21:
9a:37:51:b3:e5:86:33:fa:d3:dd:5b:ac:5f:6b:a8:
26:a7:b0:ba:0e:e7:32:a5:db:4c:a3:c4:b0:14:86:
e5:3f:e1:47:a2:1d:bc:2f:81:e0:d7:69:da:1f:57:
63:4a:1b:65:3c:67:ea:88:02:b1:4e:ab:b5:0c:94:
d4:47:dd:23:96:67:f5:e6:07:bc:ed:ee:56:db:40:
a1:fe:30:cc:b1:d6:7b:2f:1e:b8:26:29:31:e7:1f:
d9:20:c9:5b:59:6d:16:37:99:2e:40:ee:e1:db:50:
66:22:d7:df:1e:35:f7:43:d9:33:0f:dc:c4:7e:c7:
b5:ec:c9:71:0c:eb:61:7e:27:53:64:43:9c:83:ca:
c0:d0:50:e0:f5:19:3c:6e:a7:6e:6d:ce:f2:cc:d5:
49:b4:25:11:03:8a:e6:68:08:82:27:4e:a2:3f:ce:
0d:1b:6e:fd:99:1f:70:1b:65:bf:68:ca:04:e8:57:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4D:AA:1D:A9:D6:D6:56:1B:6C:BD:A5:CC:43:E8:5D:E3:F8:55:02
X509v3 Authority Key Identifier:
keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4b:e8:ca:3c:3b:b7:73:3c:a1:4f:d4:5b:ff:a9:3d:b4:3b:
6c:7d:c9:e0:e1:54:bd:07:14:ac:19:df:2f:0f:2c:54:bd:e7:
9e:a3:ab:52:f5:f0:58:04:80:03:48:2f:e2:c9:92:58:d0:02:
90:58:63:8b:49:39:e6:55:e5:d7:e4:20:f4:4f:e6:be:55:d9:
ae:87:db:6d:2f:5b:3b:de:b6:98:28:6a:55:d3:54:80:35:bb:
57:13:59:dc:fa:4e:63:55:60:7e:01:fb:35:13:df:d2:f4:f8:
43:d6:c2:26:59:42:80:ef:79:71:d4:19:5c:0f:75:27:a4:5a:
2d:c8:17:dd:07:99:55:2c:5b:5e:60:dc:83:9f:7e:30:19:99:
be:89:78:d9:81:ce:25:76:58:14:ae:20:62:50:81:51:03:a7:
3d:2c:4b:87:b8:b4:07:f4:0c:eb:f2:63:09:ee:47:7c:b1:e2:
f2:b9:09:5c:bd:13:46:c6:53:58:c0:fb:d7:89:9d:61:a4:14:
0c:1b:82:1f:8a:4d:4f:78:9d:0a:09:3d:06:88:5e:35:66:19:
32:6e:d4:cf:b4:47:e7:0b:4a:4e:b5:05:82:dd:aa:a4:08:d1:
99:43:32:1d:81:6e:b4:40:4c:ca:36:fb:b1:ba:44:9f:33:81:
67:e9:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:37 2025 by rpki-client