Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File: vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier: 1kHysh8QfltCWPVOA/cofkVwMK6MSci8uPw3VNshmjY=
Subject key identifier: 98:93:B2:64:36:F4:FE:5E:00:06:4D:A5:CD:96:1C:F1:41:4A:7F:4A
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer: /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial: 0198D51635EC001CB807F2AF6B7F63714B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number: 1043
Signing time: Sat 23 Aug 2025 04:00:59 +0000
Manifest this update: Sat 23 Aug 2025 04:00:59 +0000
Manifest next update: Sun 24 Aug 2025 04:00:59 +0000
Files and hashes: 1: EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa (hash: dN8Yi0kIJplgFqGhn/wQEirsJIam2YZVzXUASivGFy0=)
2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: 3PnOC8sMWfv72WXk2eLFpGuR8eBark790HM53ZThfhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:35:ec:00:1c:b8:07:f2:af:6b:7f:63:71:4b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Validity
Not Before: Aug 23 04:00:59 2025 GMT
Not After : Aug 24 04:00:59 2025 GMT
Subject: CN=9893b26436f4fe5e00064da5cd961cf1414a7f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:43:0f:dd:d9:89:35:7a:27:e5:e2:66:ae:
f2:2e:db:5f:04:85:1a:1d:3c:cc:f7:ee:07:ca:17:
09:82:99:2d:55:a1:76:5a:d4:de:c4:07:f8:c1:c9:
5a:0e:e1:9d:bf:d6:46:10:af:fe:d4:67:c1:57:eb:
2c:3a:b3:01:67:11:ce:b3:9f:3e:a7:09:a3:eb:28:
2f:97:f3:ff:c5:c9:4a:7c:c0:23:a2:91:e5:28:dd:
c7:fe:5f:50:95:7e:a8:dd:ce:73:df:b4:a8:ae:a9:
79:a3:a3:40:ff:5f:16:86:7a:7a:a4:44:24:0a:1e:
d5:5e:18:c0:29:e8:ed:5f:89:3c:92:9c:b7:9d:33:
20:3c:b0:62:36:c2:78:f6:31:24:ba:2f:3c:56:09:
35:85:fe:3d:1c:1f:13:e4:d7:79:8b:9a:c3:52:66:
d3:af:72:01:fc:02:c0:f2:58:62:37:14:e0:e8:ae:
af:05:b0:75:be:32:90:04:18:23:c0:81:d2:ff:b8:
9b:a9:98:c7:a5:8b:32:74:7b:d1:03:c0:be:84:01:
82:ea:05:02:b8:01:3e:3a:dc:17:46:75:ee:3d:14:
42:6a:ce:1f:37:71:b4:67:01:0d:14:d4:98:93:3e:
a0:1a:e4:73:1d:32:33:75:53:c7:35:0d:4b:5a:d4:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:93:B2:64:36:F4:FE:5E:00:06:4D:A5:CD:96:1C:F1:41:4A:7F:4A
X509v3 Authority Key Identifier:
keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b3:25:d0:db:90:ef:14:c1:db:4d:a3:9e:6d:5e:b5:6c:b7:
2f:4e:6b:45:03:e3:e8:5c:31:24:a0:34:9e:d2:b7:c1:eb:a4:
1d:65:d5:4a:62:0e:5d:8c:fb:37:cd:aa:b4:97:36:73:65:fc:
b8:94:12:69:d5:53:b4:04:62:6e:73:9d:23:ab:21:fd:b3:5b:
90:b8:82:07:97:0d:6e:d6:6a:de:2f:a4:02:40:b2:17:39:25:
dc:96:d3:8a:34:c9:dd:2d:85:50:5c:09:5a:a3:72:4b:f9:04:
9c:1a:0f:a7:52:07:9b:2d:c8:b9:26:ab:46:51:b3:b5:2e:36:
4f:ab:d4:ce:f1:4f:bc:df:0e:b0:2c:8f:8d:2d:56:b1:df:0c:
6c:a8:95:da:9a:7f:0e:20:4c:b3:ab:85:f6:9b:7a:13:d0:df:
d1:c0:e5:e1:aa:c4:c0:d0:b0:98:c3:ed:3c:82:37:e1:7e:99:
fe:d2:b0:c9:bc:12:e8:43:40:aa:54:7a:66:bf:59:e3:84:c8:
95:70:a6:ae:bf:17:ef:39:ef:d6:bc:5b:4e:ac:ed:41:1d:46:
81:27:17:6f:72:b0:19:7d:67:2c:a2:94:99:43:c4:c8:8c:fd:
91:fe:ab:35:ed:da:a2:d8:cc:60:3d:91:1e:f0:23:26:96:70:
03:2d:16:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:28 2025 by rpki-client