Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: pcUzdjx4NBos1Rt2hDeWINnEw0pEzObatXrZuClV2LQ=
Subject key identifier: EB:55:42:B3:38:9C:E2:03:26:04:DB:7C:27:C9:27:33:44:AC:1B:C9
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 019923A05900E8181D2E024568946F2ECC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 121A
Signing time: Sun 07 Sep 2025 10:02:15 +0000
Manifest this update: Sun 07 Sep 2025 10:02:15 +0000
Manifest next update: Mon 08 Sep 2025 10:02:15 +0000
Files and hashes: 1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: WuVZPn5DMyzpVHNqpKGv8L95EIY/Ym25YsEVeMNUCYs=)
2: wGg0J5Z28xFGgoF0T-AWE9a8nD0.roa (hash: kGXsD5CJ+k4dwjP4TcCf3ci1gDFHD1TYaxVZBZkFLBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:59:00:e8:18:1d:2e:02:45:68:94:6f:2e:cc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: Sep 7 10:02:15 2025 GMT
Not After : Sep 8 10:02:15 2025 GMT
Subject: CN=eb5542b3389ce2032604db7c27c9273344ac1bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:91:1d:13:16:19:15:31:ef:9c:65:4a:f5:
67:da:9c:d3:1e:be:8f:27:f2:a8:14:1a:2d:2d:31:
5d:9d:c7:75:f0:69:44:b7:07:ee:95:8b:d5:ac:58:
87:d2:e6:76:d4:df:5c:f0:27:46:bd:3e:5a:a8:fe:
6b:05:50:6e:a9:5a:26:07:25:7f:94:fe:8a:43:31:
22:70:fb:96:12:1f:b5:2c:8f:cb:16:62:5b:31:16:
32:cd:dc:aa:a4:66:b0:0b:ee:db:1b:8f:d5:1d:97:
28:8b:67:95:61:72:31:0f:74:f2:60:f6:0b:11:a5:
51:b8:44:5f:4c:cc:a8:e0:ad:bb:3c:0f:05:66:89:
9b:37:5d:e5:49:ff:55:d4:5d:2c:35:03:c5:c6:77:
2e:00:80:0a:18:64:da:6e:31:29:a1:a9:31:44:1a:
42:e8:b0:54:9b:ca:4b:a2:ba:cd:07:4d:23:88:00:
91:55:df:14:c6:12:16:d8:9a:dc:aa:f7:48:3c:09:
f8:b3:80:f3:5b:c7:30:6d:b0:e6:4c:9a:8e:3c:d0:
21:fa:53:97:3f:f2:53:bb:7b:d9:90:51:0b:fc:98:
01:9c:d8:41:f7:54:bb:1a:5a:28:3a:d9:9b:e3:7b:
ba:be:ff:56:bb:22:38:6c:e6:1a:f1:8f:41:46:b2:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:42:B3:38:9C:E2:03:26:04:DB:7C:27:C9:27:33:44:AC:1B:C9
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:40:f6:ae:06:4b:67:a8:21:d0:8e:56:e9:c1:12:ea:0f:96:
6b:17:f3:05:d9:f7:8a:84:d5:d9:8a:c0:fa:b3:10:7c:bf:d9:
d7:6f:a4:c1:9b:d8:34:7e:87:bc:d5:4f:98:e9:50:19:02:d5:
83:19:d1:21:b3:a9:b8:46:e6:da:1e:17:ed:27:b5:9d:8c:59:
81:a6:3b:bf:8f:56:93:42:f1:0f:44:43:f1:75:64:7e:8e:f2:
09:9d:41:4b:79:81:d9:33:d7:f5:42:7f:ea:05:74:6c:09:05:
5f:b1:9c:48:3a:73:a1:19:76:15:03:61:05:ed:b7:e0:2b:dc:
df:cb:18:57:0a:62:c9:d8:6f:f2:1f:da:e4:f5:9e:cf:98:8b:
e4:b2:88:4d:42:25:32:a0:c4:2d:28:ef:d5:5b:f8:65:56:c6:
04:5d:7c:58:96:43:22:a4:20:6d:89:a4:72:36:fe:53:41:be:
c2:91:8d:1a:40:0e:d2:bf:87:64:35:ad:99:2e:9c:de:a4:45:
0c:80:66:f2:b4:8c:ea:f1:96:d7:11:6c:ef:52:76:55:4b:61:
04:c2:cb:3d:b4:ac:5d:9a:ec:2c:47:05:07:eb:bb:8f:59:58:
74:8e:87:ff:41:2f:a9:d4:ec:ee:75:51:f0:63:a4:1b:03:69:
7c:33:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:39 2025 by rpki-client