
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json)
Hash identifier: J5StkLLvF7j67qByjnrpzhwX0Y+ogkQyhfEirie3DG8=
Subject key identifier: B5:79:91:59:6D:8F:F4:3B:9D:3B:18:CA:51:29:96:9C:08:33:C1:2E
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial: 0197500F0864EF38C37FF5AC4F70BC36D1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
Manifest number: 01F6
Signing time: Sun 08 Jun 2025 15:00:51 +0000
Manifest this update: Sun 08 Jun 2025 15:00:51 +0000
Manifest next update: Mon 09 Jun 2025 15:00:51 +0000
Files and hashes: 1: C4fkDspID27_2W7uJ0bDWTiMbsI.roa (hash: IPmvbCiP1dYquC+xxAe/aHEwDNf0L9S57sM644oyMl8=)
2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: 3aRajByWn3y39El+FHNL8SbbyS5cVU3LZGS2WqBlKj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:08:64:ef:38:c3:7f:f5:ac:4f:70:bc:36:d1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Validity
Not Before: Jun 8 15:00:51 2025 GMT
Not After : Jun 9 15:00:51 2025 GMT
Subject: CN=b57991596d8ff43b9d3b18ca5129969c0833c12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:4e:52:61:a0:64:f9:3d:79:de:d7:5c:6e:
c9:3d:67:c3:e2:04:28:9c:ff:ec:f9:36:0f:5c:30:
56:fe:2e:28:cf:94:e5:90:cc:0f:0c:e9:e2:66:44:
6f:36:21:cc:9f:de:fb:86:70:fc:89:13:e6:7c:d4:
90:cd:59:02:02:8f:99:ab:58:72:e6:7f:e7:df:e9:
b1:25:e3:5e:69:f3:be:8f:6b:d3:a3:8f:b7:2b:2a:
2d:12:04:b2:3e:59:f4:94:dc:05:ea:47:9e:3a:ce:
82:d2:ba:0c:6e:cc:67:9d:4a:63:13:95:1c:7b:b0:
1b:80:c4:b1:a6:41:c6:26:18:cd:f3:16:0f:f9:00:
b9:28:c3:15:7b:8b:d6:15:87:ab:39:5c:6d:eb:da:
e2:fd:f3:de:c1:3e:cf:14:cb:73:96:3b:84:3f:46:
a6:a8:48:fe:02:19:77:83:4a:8f:c8:4c:d1:24:83:
f7:ee:b2:50:07:3f:fc:18:cc:32:59:2e:d7:28:52:
81:dc:62:d2:d9:d6:58:f7:97:47:0b:29:f0:58:23:
45:7a:7a:d2:f6:b9:db:4f:cd:ab:b4:b6:f8:f9:15:
fc:c7:02:1b:36:95:34:bc:dd:f6:f5:8e:49:34:88:
83:30:87:eb:b8:18:fc:a9:4c:99:a2:4e:94:1d:d8:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:79:91:59:6D:8F:F4:3B:9D:3B:18:CA:51:29:96:9C:08:33:C1:2E
X509v3 Authority Key Identifier:
keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:08:44:aa:8e:48:99:12:a4:8a:9c:82:65:99:a6:7a:70:68:
42:80:84:ab:11:31:98:b0:67:ab:8e:b7:5d:0f:e3:9b:74:1d:
c5:ef:ac:e7:dd:f6:6d:96:11:d2:0f:76:fb:cd:2a:66:5b:1f:
b9:72:1d:50:be:d2:79:1a:d6:b3:3b:8e:38:89:51:45:56:df:
89:ce:7c:c8:1a:bb:97:eb:38:fd:90:dc:e1:7d:b6:13:5c:63:
cb:d5:d8:b3:7b:0d:ee:90:49:cd:7e:1f:be:fb:ae:fa:15:da:
05:61:c1:88:d4:fa:b5:40:d1:5d:48:a6:b2:9b:d7:ab:42:b4:
e9:48:93:47:b7:37:b4:c1:ec:1b:64:f1:c9:1c:15:c3:8c:bd:
f3:67:fb:ce:9d:1b:c6:76:3c:c3:28:4c:7e:06:56:a7:e5:79:
57:61:3c:18:68:27:d9:a8:bb:6b:86:77:b5:1d:2d:96:2c:dc:
0a:27:79:1a:40:c7:82:76:88:b4:94:12:24:2c:bc:f5:62:2b:
36:27:50:1b:d9:74:6b:e3:42:9b:5f:d5:0c:73:a4:8e:e1:31:
19:6b:80:87:62:60:0d:0a:3f:59:06:87:bb:66:78:c9:5f:a9:
8f:5a:ee:91:4f:23:c4:6a:86:88:c1:49:6e:b2:61:90:77:2f:
b3:d1:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:24 2025 by rpki-client