Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: cc7gdK1spsCDh8Dp55O+/wNLr6PFQ4InuqCVNrpP2EI=
Subject key identifier: DC:9E:14:4E:3F:FF:85:FF:BD:57:4F:5D:59:1E:AF:E1:8E:1B:6F:1F
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 0197C2A4C0F51198C24BB4A6CB53E43652A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 11B2
Signing time: Mon 30 Jun 2025 21:01:06 +0000
Manifest this update: Mon 30 Jun 2025 21:01:06 +0000
Manifest next update: Tue 01 Jul 2025 21:01:06 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: GIrcKPLTqxkLd8+DS0redF14ndXxNi3SEzfSDzudhdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a4:c0:f5:11:98:c2:4b:b4:a6:cb:53:e4:36:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Jun 30 21:01:06 2025 GMT
Not After : Jul 1 21:01:06 2025 GMT
Subject: CN=dc9e144e3fff85ffbd574f5d591eafe18e1b6f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fe:d2:a3:65:af:c0:8d:a9:ad:79:03:5d:e5:
f1:fe:81:ad:d1:74:29:6d:18:dc:17:f8:c3:2b:c9:
f4:d8:55:9d:29:eb:f7:ce:3c:98:b6:77:5a:ba:e3:
1c:7a:61:7d:6d:28:bc:6c:12:78:e8:65:f6:a3:77:
e7:c1:be:59:8a:24:f3:67:82:0c:d4:9e:3d:85:7b:
04:3f:b0:6d:25:6d:1c:a7:df:10:75:f1:c4:8b:dc:
0e:74:f1:d6:f3:02:b1:61:1c:70:1a:bc:e0:8f:d8:
61:6d:3a:11:b4:3b:1d:bd:5a:1a:71:a5:07:68:cd:
7d:29:25:4e:5b:94:0c:b2:e4:fa:25:81:df:53:04:
04:f8:d3:ee:a0:ca:2a:26:43:39:c1:44:06:48:90:
74:95:1f:35:b5:d6:82:e9:d9:3a:d2:48:ca:30:90:
14:fe:da:bb:b7:2a:58:59:c7:37:8b:eb:8b:23:b2:
94:af:b3:ee:f5:af:54:4c:3e:19:66:2b:8e:21:63:
85:10:0c:1c:0d:68:10:cc:bc:56:d4:f1:b6:f7:31:
05:a1:06:ae:b2:e7:0b:03:f1:4a:85:b4:b0:fb:f8:
40:7f:bd:51:9d:9b:3b:ad:3b:a2:bc:34:79:f2:37:
ba:e3:83:57:9e:18:3f:74:fa:e3:1c:bd:1f:22:e7:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9E:14:4E:3F:FF:85:FF:BD:57:4F:5D:59:1E:AF:E1:8E:1B:6F:1F
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:27:2b:a4:c4:cc:94:83:9f:86:8a:19:4e:22:6f:fa:89:b6:
7e:ea:96:fd:87:fe:81:10:3b:05:49:db:8d:9a:9f:50:da:99:
21:ef:70:92:3c:22:40:ff:f2:76:70:31:4c:40:b7:05:27:86:
99:70:46:78:f8:62:7a:cf:e5:ef:e4:20:1c:ea:89:14:99:2d:
65:02:35:cf:7f:ea:ac:f3:8c:c4:a4:8a:19:68:08:bb:d0:01:
20:5c:58:70:6b:fd:b5:86:48:2e:e7:cf:ae:0a:89:87:9f:a6:
f5:00:81:c5:54:74:7c:d1:c3:66:81:23:00:c8:4d:df:c3:de:
df:5f:74:6d:7e:e9:f8:39:64:da:ec:1f:3f:80:75:1e:ab:13:
46:05:54:2d:64:29:15:1a:57:d9:b9:71:1f:40:e1:2e:d4:36:
69:ea:cb:f9:ea:d3:37:71:89:aa:e6:7c:ed:33:69:c3:8f:19:
91:73:5a:b1:df:49:34:1e:91:60:74:0e:64:a3:1a:81:2f:a1:
e9:7c:a1:48:03:a8:04:b1:27:ef:90:25:cd:d6:4b:8d:1a:66:
26:d4:b7:8f:90:11:20:28:7d:fe:58:03:b4:4d:0b:74:36:60:
7f:dd:e0:e5:44:70:36:c9:7a:77:99:21:27:38:67:42:e8:85:
41:48:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:38:43 2025 by rpki-client