Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: Dp0i8NOMN5gJRCQdLbJwn7MZJG05psicJxccNz12F1A=
Subject key identifier: 5E:21:87:87:E4:73:5B:41:F4:06:2B:73:AF:54:5D:1D:A5:96:DA:F2
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 01974A7B0B06358F710174D1803D6235FD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 1125
Signing time: Sat 07 Jun 2025 13:01:07 +0000
Manifest this update: Sat 07 Jun 2025 13:01:07 +0000
Manifest next update: Sun 08 Jun 2025 13:01:07 +0000
Files and hashes: 1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: Vn7FgUTxdzgUMUsoP3NtG5NolDkFzIsQ5FxREWKGcS0=)
2: wGg0J5Z28xFGgoF0T-AWE9a8nD0.roa (hash: kGXsD5CJ+k4dwjP4TcCf3ci1gDFHD1TYaxVZBZkFLBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:0b:06:35:8f:71:01:74:d1:80:3d:62:35:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: Jun 7 13:01:07 2025 GMT
Not After : Jun 8 13:01:07 2025 GMT
Subject: CN=5e218787e4735b41f4062b73af545d1da596daf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:f7:26:32:c7:6b:b3:63:f0:f2:11:5c:63:
7b:e0:92:c1:3b:8d:4f:aa:ff:56:ca:c2:38:c6:10:
f1:92:4f:68:43:dc:8d:f1:2d:56:35:da:b0:23:bf:
6d:f4:c3:ef:09:70:05:5e:1a:0f:5b:16:38:a5:87:
d0:05:97:fa:ee:99:b2:b1:8c:6c:47:5e:53:4e:ed:
d3:73:e5:20:df:0a:97:a2:99:b9:3b:c8:56:e5:4a:
34:71:cc:e5:f2:0f:f2:b0:b4:f6:90:76:f6:ce:79:
6e:fb:ad:96:63:44:32:cc:85:2b:f9:71:9c:49:42:
9a:e9:0e:35:e6:50:60:6d:ed:ed:5a:57:20:cd:6b:
1c:d9:10:7c:19:3d:64:04:06:e4:67:75:a7:00:1d:
2a:a5:0d:d0:79:30:ad:b1:62:f4:6f:e6:cd:31:c7:
86:5f:4d:8c:00:43:b2:f8:3f:80:af:65:92:c5:dc:
1e:da:b8:9a:27:02:2d:e1:06:7c:94:25:f0:f2:c6:
83:f0:fa:ce:b9:5c:ca:e0:b5:2a:9a:7d:0a:ae:df:
93:e1:dd:b7:7a:37:e9:3a:a7:0b:e1:7d:5e:0e:fa:
f5:e3:14:e7:44:e0:a8:0a:bd:14:65:71:d4:2c:a1:
88:15:c1:b2:5c:f6:3d:f6:d7:a0:74:64:4e:33:c4:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:21:87:87:E4:73:5B:41:F4:06:2B:73:AF:54:5D:1D:A5:96:DA:F2
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:74:58:20:81:86:6a:1f:03:8e:35:05:7e:ba:6c:fd:1a:1e:
19:70:bb:4d:fd:d3:9d:2c:f3:70:f1:c5:a3:51:cc:44:82:a1:
10:18:c4:43:55:87:36:41:87:22:0b:82:94:34:c2:6a:20:6f:
8e:9e:eb:02:5f:46:8c:02:35:08:81:48:1b:b1:ae:4d:43:2b:
98:2b:af:23:5b:7c:ee:80:d1:a8:f8:06:6a:b6:f9:8c:d2:d6:
37:1d:45:e4:01:59:ea:e2:0f:9d:92:e0:55:c7:78:db:d9:31:
3b:75:50:c2:11:a6:09:99:a2:4c:f4:e4:75:d8:93:95:34:3e:
77:9c:fb:97:66:ea:8b:ea:5c:8f:5a:a1:64:f1:08:dd:f4:34:
9e:5e:4d:48:48:53:e5:ad:28:88:ab:26:67:ac:4e:95:fe:bc:
f5:95:d7:47:97:9e:0e:1e:ed:ca:d7:1b:27:99:bb:0a:d1:77:
a5:a7:b2:e3:64:f8:e3:e2:e7:a7:7c:52:a4:ef:0d:1e:8c:bf:
75:16:b7:af:29:07:e1:5b:e8:34:7c:f4:a2:bd:2c:a0:b1:45:
2d:97:33:8f:43:a8:2d:05:4d:c8:03:57:08:42:79:7c:2b:12:
ba:d2:d8:81:02:b4:4e:d0:b9:23:55:62:4e:a2:e3:8a:37:df:
4f:e4:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:28:12 2025 by rpki-client