Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: uJHMdVlgUp6PkbWOsmUuuraXP81KRI8H3e7Y6VrXkjE=
Subject key identifier: AF:43:3D:24:E6:C8:A2:62:4D:20:80:A6:7D:EC:1B:4D:35:EC:BA:EB
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 019A0C38B6FB01CBB21E238EE1DB24B9E799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 137D
Signing time: Wed 22 Oct 2025 14:00:34 +0000
Manifest this update: Wed 22 Oct 2025 14:00:34 +0000
Manifest next update: Thu 23 Oct 2025 14:00:34 +0000
Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: TrSRFYymxJgQfKl0HLB1igZGuyaniJ5ZDnqt4WZB74Y=)
2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:b6:fb:01:cb:b2:1e:23:8e:e1:db:24:b9:e7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Oct 22 14:00:34 2025 GMT
Not After : Oct 23 14:00:34 2025 GMT
Subject: CN=af433d24e6c8a2624d2080a67dec1b4d35ecbaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:39:b4:9c:2c:90:e5:bb:84:34:25:6e:af:
c6:36:37:95:f6:ac:59:1f:ed:62:b0:ee:fb:19:88:
46:79:49:e7:d3:86:7c:f3:ef:f7:fa:3a:61:2f:81:
62:13:d5:01:6c:86:89:31:9b:d3:59:87:e2:bb:fa:
c6:f3:65:6f:24:e6:58:f5:96:bc:eb:46:c4:90:23:
8c:99:2e:7e:b7:8b:31:b3:36:a3:d3:0e:43:4d:d2:
3c:14:88:80:de:15:b4:04:45:08:14:fe:09:eb:ee:
90:e0:0b:f7:a4:31:c8:3c:ff:a7:fe:81:9a:fe:cc:
eb:bd:e5:53:00:b6:b6:bf:a5:5e:1e:e8:8f:69:dc:
87:c3:41:08:d4:9b:ba:14:f6:f1:31:70:51:a8:38:
4c:6d:6c:47:d8:74:3a:27:dd:ba:41:e1:d3:ad:3f:
59:d2:bf:b9:77:de:4c:c2:2e:0e:bd:88:70:c1:ae:
fa:55:00:42:50:15:cd:8e:58:15:dd:c6:8c:bc:77:
08:69:9e:71:d5:cf:86:7b:ed:11:0a:d5:1f:6f:60:
54:a3:fa:ab:af:17:49:8c:1d:3f:ac:cf:0c:d9:48:
1e:99:65:85:48:57:90:24:8c:cd:f2:a9:d6:af:06:
5d:5d:35:7a:91:6e:58:7b:e7:c4:b9:7a:19:4a:11:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:43:3D:24:E6:C8:A2:62:4D:20:80:A6:7D:EC:1B:4D:35:EC:BA:EB
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:bf:cf:e1:d2:fc:c8:d0:3c:d8:59:f1:8e:48:58:f6:fd:e0:
b2:ff:d2:df:9e:17:7c:3b:05:86:74:14:1b:41:27:32:00:5a:
b5:73:ed:5a:b7:59:56:9b:4c:90:88:b2:3e:66:6c:e9:08:c3:
e1:d2:9b:f2:a8:d0:1d:e9:40:ec:ce:bf:46:94:c7:65:84:c1:
bb:22:d6:a2:76:26:27:45:4e:9f:d0:52:08:df:95:4b:20:2e:
b3:f4:46:66:26:a4:36:65:a2:29:ce:72:3f:82:a1:50:f1:e5:
b5:97:99:74:c9:8b:a7:a4:75:ba:dd:bf:0c:2b:aa:e6:82:ba:
c4:b0:0c:a8:4c:9a:c1:9c:7a:52:da:cf:14:7e:43:e6:30:0c:
3d:c6:21:ca:08:0b:1c:59:0d:01:4b:32:d2:1e:25:a7:f4:b4:
f8:cd:9b:80:8f:4a:7c:ab:3b:1d:c0:ca:3a:a5:ef:b1:a6:1b:
d5:ac:97:4a:29:5f:84:7f:e4:4f:d4:71:a4:63:f3:42:65:ac:
f2:04:b2:f1:1c:77:a6:25:27:3b:c5:8b:1d:06:d2:ca:e4:e3:
cd:4b:69:a9:dd:21:91:3f:68:e4:73:e4:db:11:3f:10:17:86:
86:8d:c1:94:25:a5:91:10:c3:83:1d:47:3e:2f:4e:61:4d:23:
7f:10:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:46:21 2025 by rpki-client