Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: m4f0C7PZ7L2skbFbsVaVGbOmMldyzWk2jUch9K2p8Dg=
Subject key identifier: E2:EE:6A:F7:7D:4C:0F:A7:2B:73:DB:60:77:E5:87:2F:6C:9E:A4:A0
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 0198C75B3D1BE2A5D10032A37085C3C82404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 1239
Signing time: Wed 20 Aug 2025 12:01:41 +0000
Manifest this update: Wed 20 Aug 2025 12:01:41 +0000
Manifest next update: Thu 21 Aug 2025 12:01:41 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: Sf3I0xlXZ0l0yxHD3NpqC3KrI5bLANuZuzXzElbnFts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:3d:1b:e2:a5:d1:00:32:a3:70:85:c3:c8:24:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Aug 20 12:01:41 2025 GMT
Not After : Aug 21 12:01:41 2025 GMT
Subject: CN=e2ee6af77d4c0fa72b73db6077e5872f6c9ea4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:a6:b3:bf:f8:54:f0:58:88:d4:ad:df:7d:
5c:f7:34:ac:3d:36:58:2b:f4:41:0d:07:47:a4:33:
33:57:bd:99:c8:89:82:9f:08:d1:85:97:79:ad:f2:
bb:51:18:8c:8f:a7:b2:fd:8f:3b:a3:ed:84:61:e1:
d1:3f:80:18:8f:97:11:f0:50:37:71:ee:bd:88:8e:
a1:c6:94:43:c8:0f:b7:dd:15:45:8a:21:5d:ff:13:
b9:c6:b6:cd:c4:cb:f0:09:ae:df:04:1a:40:7b:ee:
70:db:2a:b8:c6:19:19:01:5e:4d:e9:d4:72:eb:a7:
0d:79:b5:d0:d3:f8:1e:ee:d6:14:77:de:95:cf:ab:
07:72:73:cb:39:83:dd:10:e4:ab:b3:f1:fc:41:cf:
b2:73:7e:85:75:05:02:41:51:71:32:13:f0:28:7e:
6a:02:1f:05:44:4e:22:98:ae:d7:31:ac:dc:41:7b:
05:66:57:98:27:73:50:9e:0d:7f:c9:56:95:96:11:
70:ca:86:8f:92:e3:cc:ea:b6:ef:33:55:4a:67:de:
97:75:a4:27:6b:df:7c:5c:3d:1d:42:66:9a:7c:00:
a4:ed:d4:e8:6e:07:44:24:66:d2:9d:20:18:98:9e:
4c:02:40:57:94:e2:da:55:24:c3:69:3c:ef:52:81:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EE:6A:F7:7D:4C:0F:A7:2B:73:DB:60:77:E5:87:2F:6C:9E:A4:A0
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9d:22:7d:bb:fc:bc:2a:4a:0c:87:ea:5e:c6:ca:72:41:14:
ab:48:db:cd:70:90:a2:e3:5d:b1:38:c9:82:e9:b7:a3:73:eb:
ee:7d:ab:cc:0d:cf:74:c6:aa:69:ee:a9:8a:7d:91:55:50:e1:
9e:26:13:72:ba:f1:eb:17:a6:23:e7:66:13:0a:b8:1a:30:0e:
f3:54:12:a6:f7:d8:17:28:60:14:23:33:8a:89:96:47:da:42:
a6:e5:54:03:f9:f8:53:42:0e:0f:e4:43:2e:a3:03:32:8d:34:
6c:f5:56:e4:12:15:f0:38:c5:85:99:a3:17:a0:67:36:d3:be:
f4:5d:c8:83:25:26:3e:1e:36:c2:e8:75:a6:ad:40:ed:9b:07:
11:e7:75:2e:b6:a3:9f:de:54:0f:8a:d8:ea:40:d5:bd:16:43:
f1:f2:91:d3:45:e8:b7:70:a7:0d:3b:35:aa:8e:9a:38:e3:1b:
a5:6e:2a:4e:83:62:79:af:16:46:13:7d:b2:19:b6:b8:6a:08:
57:5e:d9:e2:f0:2f:4c:12:61:9e:c8:9d:9a:b5:21:43:d9:84:
4c:09:38:78:03:5f:6c:54:4b:00:65:ba:3f:80:a3:63:7d:b3:
bb:6e:7f:ec:81:b9:e8:0e:48:de:1a:71:2e:06:ba:1c:9e:0a:
e7:19:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:52:31 2025 by rpki-client