Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: azelkdH1rV6xxQOZ2Oahyho6S8jpq96QBAGPNKfI0+g=
Subject key identifier: EF:CB:12:5E:76:40:03:B4:E6:5F:28:67:C5:46:BD:F2:2D:44:F6:AE
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 01958CCE317F08FA2C9EB3E7AD7A4DD17768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 108D
Signing time: Thu 13 Mar 2025 00:01:18 +0000
Manifest this update: Thu 13 Mar 2025 00:01:18 +0000
Manifest next update: Fri 14 Mar 2025 00:01:18 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: n4U+ndrtRpHK8tixT7JJrI5Wu4r/yHGJqqIyeAHZHDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:31:7f:08:fa:2c:9e:b3:e7:ad:7a:4d:d1:77:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Mar 13 00:01:18 2025 GMT
Not After : Mar 14 00:01:18 2025 GMT
Subject: CN=efcb125e764003b4e65f2867c546bdf22d44f6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b3:7b:dd:e6:1a:7f:fe:1e:05:99:6f:dd:c6:
2a:0a:40:d9:5a:cf:84:1a:a3:93:6f:9f:14:19:8a:
50:39:87:b8:f8:f3:13:70:77:24:ee:ba:3b:86:2b:
9a:82:20:bb:88:e1:06:09:08:2a:ee:95:14:bb:a6:
f9:53:b6:15:00:60:08:fe:c5:d7:0d:7f:87:cb:34:
b6:8d:7c:d2:2c:9d:fd:71:94:25:c5:1d:f8:4e:74:
78:11:f0:47:1c:78:b8:c3:c7:62:aa:71:cd:f7:73:
05:1d:34:0e:50:e1:b1:f0:85:5b:40:e5:03:6e:7a:
42:4b:0b:8b:2c:f2:18:59:4a:e6:c9:1d:b7:38:c7:
3c:39:55:15:e1:9d:22:72:5a:69:44:38:4f:df:7e:
8b:fb:86:62:b1:31:6c:c8:1b:9d:24:70:15:31:05:
de:8c:95:ae:5b:b3:27:df:30:4f:a8:00:d2:ce:a7:
c2:18:f4:ed:b4:c0:10:f3:88:1c:23:ad:79:50:82:
6f:02:cb:0f:5a:82:36:d1:8c:68:07:90:82:36:87:
b3:2e:74:70:26:90:a6:92:eb:ba:a3:a7:00:e7:21:
81:d7:07:49:0a:53:9a:6e:7d:fe:5f:12:01:f2:5b:
ea:29:f2:dd:92:94:a8:74:f9:b8:2b:03:d0:5a:b0:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:12:5E:76:40:03:B4:E6:5F:28:67:C5:46:BD:F2:2D:44:F6:AE
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a9:93:6c:b7:5e:cf:94:28:ac:ab:83:3b:a3:23:8c:b2:4a:
e4:7e:56:78:49:39:56:87:20:3a:c2:3c:87:eb:7d:59:67:c3:
14:c3:29:8f:71:d2:2c:35:2b:43:25:27:f5:39:82:14:11:fa:
28:45:a5:26:fc:2f:da:06:8c:ba:b8:94:3e:68:3f:98:78:cc:
68:b0:a1:d9:8f:71:a5:4b:40:e1:98:75:57:6a:ab:fb:d0:89:
74:c8:bc:d9:12:2c:50:a1:fa:5d:e2:45:e0:d8:10:c4:08:c6:
93:cb:c5:a6:1e:75:3b:67:7a:ce:2f:d3:83:98:64:20:5d:0c:
69:9a:e2:94:80:07:be:67:86:14:18:6a:e8:6d:e8:60:27:55:
b6:20:12:39:f6:fc:85:00:c5:8c:c7:27:ec:b1:f2:65:92:5c:
e9:14:e7:b2:bc:9a:66:c8:38:2c:75:7d:9c:82:b8:41:c0:1d:
2c:70:4c:2c:aa:ce:5b:07:2c:66:83:23:c8:94:94:78:74:c7:
47:04:4b:8a:ba:c4:c4:fb:41:38:f2:7a:39:d7:67:25:16:db:
1c:40:33:56:e1:3d:6e:09:78:15:9a:89:ed:b2:c4:47:09:4e:
04:c1:c4:4c:28:74:ac:df:5b:d7:5a:e0:9b:45:fe:47:c2:86:
6d:cf:40:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzjF/CPosnrPnrXpN0XdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjZiYzhmMTYzYWY0OWMwM2Q5YWQ2OWU3MTZiNDJjNWI5
NmVlNzkwHhcNMjUwMzEzMDAwMTE4WhcNMjUwMzE0MDAwMTE4WjAzMTEwLwYDVQQD
EyhlZmNiMTI1ZTc2NDAwM2I0ZTY1ZjI4NjdjNTQ2YmRmMjJkNDRmNmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bN73eYaf/4eBZlv3cYqCkDZWs+E
GqOTb58UGYpQOYe4+PMTcHck7ro7hiuagiC7iOEGCQgq7pUUu6b5U7YVAGAI/sXX
DX+HyzS2jXzSLJ39cZQlxR34TnR4EfBHHHi4w8diqnHN93MFHTQOUOGx8IVbQOUD
bnpCSwuLLPIYWUrmyR23OMc8OVUV4Z0iclppRDhP336L+4ZisTFsyBudJHAVMQXe
jJWuW7Mn3zBPqADSzqfCGPTttMAQ84gcI615UIJvAssPWoI20YxoB5CCNoezLnRw
JpCmkuu6o6cA5yGB1wdJClOabn3+XxIB8lvqKfLdkpSodPm4KwPQWrBQyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/LEl52QAO05l8oZ8VGvfItRPauMB8GA1UdIwQY
MBaAFKL2vI8WOvScA9mtaecWtCxblu55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUt
NTA2YmI2YzY3OWNlLzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUtNTA2YmI2YzY3OWNl
LzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKmTbLde
z5QorKuDO6MjjLJK5H5WeEk5VocgOsI8h+t9WWfDFMMpj3HSLDUrQyUn9TmCFBH6
KEWlJvwv2gaMuriUPmg/mHjMaLCh2Y9xpUtA4Zh1V2qr+9CJdMi82RIsUKH6XeJF
4NgQxAjGk8vFph51O2d6zi/Tg5hkIF0MaZrilIAHvmeGFBhq6G3oYCdVtiASOfb8
hQDFjMcn7LHyZZJc6RTnsryaZsg4LHV9nIK4QcAdLHBMLKrOWwcsZoMjyJSUeHTH
RwRLirrExPtBOPJ6OddnJRbbHEAzVuE9bgl4FZqJ7bLERwlOBMHETCh0rN9b11rg
m0X+R8KGbc9AuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:35 2025 by rpki-client