Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
File: ov7n60DFpFQ5UC658zG-_qxPjQw.mft (raw, json)
Hash identifier: BeJqCwD8AM5NLzwaf4OL39f8a8cy0+L5h4CroJxYuMc=
Subject key identifier: 6C:56:97:B6:F5:C1:39:B7:B9:90:6F:68:25:12:CF:C8:C7:C9:14:FB
Authority key identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
Certificate issuer: /CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Certificate serial: 019A0C38BFC46301AE02677A3E40A10CE211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
Manifest number: 05
Signing time: Wed 22 Oct 2025 14:00:36 +0000
Manifest this update: Wed 22 Oct 2025 14:00:36 +0000
Manifest next update: Thu 23 Oct 2025 14:00:36 +0000
Files and hashes: 1: cLXJPZRMjACNJWdbzWBHdJk4Gq0.roa (hash: 67waz9BUSl1rmmTlp4M5HuhrKHWIN9dnMCNTzaYDP50=)
2: ov7n60DFpFQ5UC658zG-_qxPjQw.crl (hash: MSdsdXggmGMBcyYFWz+6qorT7TzFu2ZutBvpnmnZjLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:bf:c4:63:01:ae:02:67:7a:3e:40:a1:0c:e2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Validity
Not Before: Oct 22 14:00:36 2025 GMT
Not After : Oct 23 14:00:36 2025 GMT
Subject: CN=6c5697b6f5c139b7b9906f682512cfc8c7c914fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:0d:e0:d8:22:e4:46:27:5d:ae:b8:54:80:
2a:8d:6a:dc:f0:34:d4:54:59:bf:e1:ab:70:47:55:
40:8d:16:c4:13:0b:65:8f:fb:49:15:c2:37:7d:a9:
1e:c2:10:72:73:e8:86:87:cc:70:f9:35:4a:88:dd:
82:91:48:a9:7a:8e:d0:40:c5:16:93:b2:c2:ff:62:
60:02:f7:f5:b5:95:d3:41:6b:79:3b:2e:5e:04:ab:
1b:3d:3f:4f:a3:07:ae:f4:ad:6c:52:6f:89:1e:67:
e5:ee:db:8d:9d:2d:3f:f8:29:14:3a:c6:51:05:23:
8b:1f:6a:47:4f:a9:ca:bd:c1:10:8f:2c:1d:03:6c:
6f:ef:2d:8a:3b:b0:eb:56:3f:6c:52:6e:f1:85:4e:
5d:a4:09:e3:ab:d2:1b:33:38:c9:70:a0:08:a3:5d:
1f:f5:e2:53:5d:b4:34:a9:e3:5c:df:f7:a3:d2:a8:
83:31:a4:07:fd:8c:26:a4:f6:45:4c:bc:b4:f0:51:
16:b4:41:59:74:cd:e1:15:7a:88:c4:df:c7:03:88:
d5:b0:80:26:21:a7:d1:9f:c9:74:fa:af:86:5a:73:
87:46:f3:a9:73:fe:a2:a9:4a:5f:71:db:b2:4a:5f:
9d:ff:dc:4d:68:12:cd:71:e3:b9:4e:5a:ab:6d:8e:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:56:97:B6:F5:C1:39:B7:B9:90:6F:68:25:12:CF:C8:C7:C9:14:FB
X509v3 Authority Key Identifier:
keyid:A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:02:54:00:81:d5:20:88:a9:d2:a0:b7:70:56:bf:84:40:02:
38:fc:70:d4:a0:2a:3e:bd:1c:e4:34:4d:a8:18:1c:0e:33:c4:
48:a3:4d:40:9a:a8:0a:9a:6c:ce:72:d6:ac:62:f0:3d:30:d9:
6b:b7:4c:1f:25:00:b5:21:d1:fc:a2:0e:dc:2e:f1:c4:7d:be:
45:d7:73:b0:3e:ad:92:2b:75:de:8b:d0:20:de:01:9e:43:3f:
ca:7a:6e:2e:2c:99:4e:90:22:37:96:14:e3:1a:02:61:23:e2:
f7:39:37:f7:6a:c4:fa:c2:7a:c7:51:ec:a0:9c:d5:b2:63:14:
85:eb:cc:bb:9f:37:5f:69:c0:c7:a5:fc:24:c1:23:d7:b6:09:
a4:a2:14:fe:63:07:cd:ce:2c:a0:bf:fb:bf:d7:d1:26:80:fd:
6f:90:ef:28:2f:09:19:e2:e2:5d:4e:5e:08:24:9b:0d:7f:7c:
22:d6:89:20:4c:67:06:97:fe:98:51:68:21:4f:66:c5:d0:ea:
b7:f9:72:dc:d5:74:79:e1:cb:c5:56:f7:5c:97:0e:2d:51:dd:
ed:4b:f6:85:91:f9:c2:6c:48:8d:19:76:08:2f:dc:b9:b5:a3:
36:fa:af:ee:c3:54:f1:cd:35:74:c4:7f:d4:e9:38:56:fc:e0:
cb:0e:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:43:58 2025 by rpki-client