Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json)
Hash identifier: ER9S/h5rFUcjYT6apGyFr09NoiMv9lP/WjMRMEJcXng=
Subject key identifier: 3B:08:91:07:E8:5C:D8:F0:2B:3A:7C:A9:95:26:3A:21:18:99:83:71
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial: 0198CACA52D7DFE818B94F11B59613B55387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
Manifest number: 02BA
Signing time: Thu 21 Aug 2025 04:01:53 +0000
Manifest this update: Thu 21 Aug 2025 04:01:53 +0000
Manifest next update: Fri 22 Aug 2025 04:01:53 +0000
Files and hashes: 1: C4fkDspID27_2W7uJ0bDWTiMbsI.roa (hash: IPmvbCiP1dYquC+xxAe/aHEwDNf0L9S57sM644oyMl8=)
2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: PVNjW8Rh2GHtMqrktbevOErS6TkIr72v2mIXN5OhdaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:52:d7:df:e8:18:b9:4f:11:b5:96:13:b5:53:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Validity
Not Before: Aug 21 04:01:53 2025 GMT
Not After : Aug 22 04:01:53 2025 GMT
Subject: CN=3b089107e85cd8f02b3a7ca995263a2118998371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:14:e4:82:13:ec:19:28:87:8d:79:7a:2f:
0f:92:f3:92:45:eb:d5:bf:f3:0e:49:1a:b7:12:65:
94:2d:c8:09:e7:46:04:01:ad:ff:f4:c1:cf:10:ae:
a8:50:cf:5b:c2:d1:c9:e0:1c:41:f2:57:4b:15:e4:
b0:db:a8:0a:d9:26:ca:d3:7e:b3:95:5e:12:bd:d6:
30:7b:92:7b:ee:6b:51:7f:47:f7:3e:25:04:ba:5c:
a2:cf:17:14:92:24:b8:0d:b4:60:93:12:52:a9:68:
20:4b:63:b0:7a:d7:c1:0d:3d:74:9a:28:6b:5f:e8:
c1:98:9f:a5:ed:20:7f:00:f5:83:01:cb:43:01:96:
04:08:70:69:e7:75:95:4c:92:97:6f:94:1c:1e:d4:
f1:5f:67:b4:dc:5b:bf:a2:20:4e:61:93:ec:af:f2:
89:8d:94:46:03:88:e1:d6:65:4c:30:5f:a2:19:4f:
c6:6c:60:e6:24:db:cf:87:7b:59:58:0c:49:9b:28:
a0:64:17:d5:35:ca:e8:90:cd:f7:68:5a:77:51:bf:
ce:49:0b:24:83:ce:13:f7:11:97:11:e2:fe:bd:e7:
7c:61:f8:f2:ed:24:fa:34:ad:30:0f:f2:fc:55:bb:
54:3e:8c:22:b2:29:30:b7:f9:39:3f:e0:8b:31:f7:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:91:07:E8:5C:D8:F0:2B:3A:7C:A9:95:26:3A:21:18:99:83:71
X509v3 Authority Key Identifier:
keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:20:91:c9:58:61:b9:d1:a2:f6:19:74:59:56:39:54:c5:cd:
33:a2:63:7b:3d:d0:f7:9e:c9:91:52:c8:1b:8f:22:8a:25:42:
01:d9:0b:a0:8b:95:76:b1:77:02:6c:ff:8b:4e:9f:b5:41:a2:
e2:50:3b:62:cd:6d:02:42:4b:25:0b:68:7a:45:d0:1c:ad:2b:
8d:58:b7:f8:76:eb:85:c5:33:11:f1:99:e3:f8:9e:a7:d8:c4:
9f:26:9c:80:ab:4b:15:51:3d:fc:c7:a9:1c:ce:50:09:3b:b2:
a0:1d:56:52:7e:cd:be:91:bd:b9:81:50:3b:3b:6f:ba:81:0c:
47:33:31:ba:ce:40:b0:49:65:27:39:ba:a7:db:44:d6:7c:4a:
65:af:5f:fd:e9:cb:d8:fb:2a:15:af:90:78:0b:1e:f6:e7:ce:
ef:0b:0b:10:2e:3e:fd:5c:9a:f9:b1:a0:25:2f:9c:38:1f:ab:
29:8e:a0:4b:a2:1a:38:02:59:ba:4c:58:b7:95:1a:5c:66:3c:
ce:5d:76:21:c7:1b:2d:07:c3:0c:a3:cb:9e:b2:d2:65:f8:94:
86:53:4a:49:76:07:17:cf:1d:4d:06:e8:d1:ba:5c:34:e4:03:
3d:40:c2:81:fa:a1:34:2e:a1:2a:90:e5:27:e3:4d:bb:e4:8d:
e8:d1:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:22:34 2025 by rpki-client