Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: 1z+SoF2fnS1DxCNZV5+p27da50lKe60Xo0EfmRZJ9IM=
Subject key identifier: 8F:FD:71:F2:37:05:F4:D5:D3:B7:68:2F:2E:DF:64:40:7C:5E:AD:21
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 019750B4231531456A2AF16A1780CD1F4696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 18:01:11 +0000
Manifest this update: Sun 08 Jun 2025 18:01:11 +0000
Manifest next update: Mon 09 Jun 2025 18:01:11 +0000
Files and hashes: 1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: yO/KywToZ9fOKPG7HHJbzt9eDEHKtX9A+iSc+sMzwl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:23:15:31:45:6a:2a:f1:6a:17:80:cd:1f:46:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Jun 8 18:01:11 2025 GMT
Not After : Jun 9 18:01:11 2025 GMT
Subject: CN=8ffd71f23705f4d5d3b7682f2edf64407c5ead21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:f0:b9:e0:68:1e:99:4d:47:79:57:70:04:
28:c8:be:29:e1:a2:47:f3:3b:85:2d:fc:cc:e9:b3:
41:8b:80:89:cd:5d:0c:84:05:3c:98:47:0f:13:d6:
36:e9:b1:a4:6c:62:f7:ea:d9:f4:de:e2:c9:11:bf:
d0:b0:7a:d4:51:e5:fd:23:bc:ec:87:33:08:9f:e7:
30:fd:58:ef:de:9b:b5:fd:d2:07:33:d7:ab:32:21:
21:39:b1:36:24:76:e4:57:eb:29:d1:96:9e:98:a9:
a3:ed:59:92:69:2a:59:19:4f:a2:0c:51:ab:19:5d:
c4:d0:fc:98:29:85:12:c1:35:e1:bf:79:62:5b:01:
da:67:54:a2:0a:18:99:c1:a6:92:59:d8:c2:d1:35:
a1:eb:9d:6d:ae:72:4a:e2:78:36:b0:9d:8f:6b:43:
e6:5e:cb:4e:9c:7a:e5:e7:be:9e:4f:67:88:f6:e3:
02:2d:29:a4:bd:7e:12:7e:46:9a:87:4d:37:4c:23:
79:05:ba:c4:11:d1:ec:ec:09:93:03:a7:f1:14:36:
a2:ec:2f:2c:92:cb:89:b0:e0:dc:65:f1:24:ce:51:
3a:9b:80:55:63:fc:63:15:5e:65:7b:71:da:be:d2:
7b:1f:7f:9b:fc:99:e1:62:71:ea:00:86:b4:71:15:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FD:71:F2:37:05:F4:D5:D3:B7:68:2F:2E:DF:64:40:7C:5E:AD:21
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4f:45:0e:79:54:68:ce:11:36:c1:6e:00:a2:bc:e4:d6:07:
58:d9:a3:40:81:c1:9f:a3:7f:e3:02:07:f3:7d:ed:19:70:96:
0f:4e:6d:12:6c:cd:cc:36:79:4d:46:22:7f:e8:87:de:ed:4f:
22:e7:6f:68:ec:5f:ce:1f:57:8d:93:6b:df:e9:e9:40:75:78:
9f:20:ec:11:08:19:0b:50:b4:47:50:22:c4:4c:2e:ea:e4:08:
ae:67:94:d4:38:d6:fb:ce:8e:af:3b:bd:bb:77:07:9d:31:8f:
3a:ad:d3:36:aa:d8:89:ef:13:a4:70:e6:53:56:af:d0:63:81:
db:0c:df:2e:4b:81:e3:d8:0d:0d:cc:81:10:a6:b3:17:12:77:
f6:ac:b2:22:c7:cc:b7:ef:18:e3:54:15:9b:77:f0:a3:cc:28:
8e:ed:0b:43:33:74:91:96:71:30:4e:b8:8a:d7:d7:b9:0a:2b:
45:3c:3c:a0:79:74:51:0d:1d:f7:fb:d8:c3:12:a4:f1:5f:da:
d4:2c:ae:03:db:bd:e8:a2:20:5b:3d:da:af:4c:4f:e6:13:5a:
38:12:69:21:da:03:87:6e:e5:49:4f:2a:ec:55:66:20:d2:b9:
30:b1:e1:ff:55:f0:e5:d6:5a:c7:c3:79:e1:d1:65:fa:0b:e8:
c7:37:5c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQtCMVMUVqKvFqF4DNH0aWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZmFjNzVmMzkwZTg4MDUyODMzN2RkMGJkY2RjNzc5MzRi
OGRmM2MwHhcNMjUwNjA4MTgwMTExWhcNMjUwNjA5MTgwMTExWjAzMTEwLwYDVQQD
Eyg4ZmZkNzFmMjM3MDVmNGQ1ZDNiNzY4MmYyZWRmNjQ0MDdjNWVhZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/3wueBoHplNR3lXcAQoyL4p4aJH
8zuFLfzM6bNBi4CJzV0MhAU8mEcPE9Y26bGkbGL36tn03uLJEb/QsHrUUeX9I7zs
hzMIn+cw/Vjv3pu1/dIHM9erMiEhObE2JHbkV+sp0ZaemKmj7VmSaSpZGU+iDFGr
GV3E0PyYKYUSwTXhv3liWwHaZ1SiChiZwaaSWdjC0TWh651trnJK4ng2sJ2Pa0Pm
XstOnHrl576eT2eI9uMCLSmkvX4Sfkaah003TCN5BbrEEdHs7AmTA6fxFDai7C8s
ksuJsODcZfEkzlE6m4BVY/xjFV5le3HavtJ7H3+b/JnhYnHqAIa0cRVHkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/9cfI3BfTV07doLy7fZEB8Xq0hMB8GA1UdIwQY
MBaAFKL6x185DogFKDN90L3Nx3k0uN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYt
NzYyMjU5YWI5NTAwLzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYtNzYyMjU5YWI5NTAw
LzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOk9FDnlU
aM4RNsFuAKK85NYHWNmjQIHBn6N/4wIH833tGXCWD05tEmzNzDZ5TUYif+iH3u1P
IudvaOxfzh9XjZNr3+npQHV4nyDsEQgZC1C0R1AixEwu6uQIrmeU1DjW+86Orzu9
u3cHnTGPOq3TNqrYie8TpHDmU1av0GOB2wzfLkuB49gNDcyBEKazFxJ39qyyIsfM
t+8Y41QVm3fwo8woju0LQzN0kZZxME64itfXuQorRTw8oHl0UQ0d9/vYwxKk8V/a
1CyuA9u96KIgWz3ar0xP5hNaOBJpIdoDh27lSU8q7FVmINK5MLHh/1Xw5dZax8N5
4dFl+gvoxzdclA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:51 2025 by rpki-client