
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File: vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier: r5a6GedqELBjVsM8yCFTJappylgSVgzhQmZUCVxLMrw=
Subject key identifier: 0C:E1:BD:92:9D:55:25:92:13:E3:DE:85:10:2E:3D:AE:3B:83:2E:67
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer: /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial: 0197BEFE9117080E7CC78F1557143A82B923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number: 0FB3
Signing time: Mon 30 Jun 2025 04:00:43 +0000
Manifest this update: Mon 30 Jun 2025 04:00:43 +0000
Manifest next update: Tue 01 Jul 2025 04:00:43 +0000
Files and hashes: 1: EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa (hash: dN8Yi0kIJplgFqGhn/wQEirsJIam2YZVzXUASivGFy0=)
2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: H3kZ+V552Ru2AIA1cBn+7fvMmLop/1ZQ70JBjF9QRWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:fe:91:17:08:0e:7c:c7:8f:15:57:14:3a:82:b9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Validity
Not Before: Jun 30 04:00:43 2025 GMT
Not After : Jul 1 04:00:43 2025 GMT
Subject: CN=0ce1bd929d55259213e3de85102e3dae3b832e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:55:a2:0e:bc:64:b6:be:13:c7:f9:5a:e0:
35:6c:36:1c:bd:60:84:88:7a:5d:f0:3a:ec:74:1d:
10:4d:6b:ee:92:72:21:b6:65:fc:7d:cf:a7:39:0c:
e2:8d:28:1c:3a:03:1f:e3:d5:a3:6a:24:10:e0:96:
01:ac:c8:d7:47:bf:0a:b9:78:f1:3f:16:a7:cf:85:
2a:81:fd:27:42:80:de:2b:29:c6:46:8a:85:c0:a1:
c0:8d:39:25:d9:f1:49:f0:bc:7b:68:e7:c8:b6:5e:
9f:19:1f:1d:92:d1:36:f3:1b:0a:c8:78:c6:05:10:
bb:8b:50:f4:d4:78:14:5d:76:22:10:6b:b1:26:5d:
2a:46:08:21:52:38:0e:f8:54:05:57:d4:b1:0b:f6:
12:56:1e:ad:b2:9f:e1:1b:d0:ac:a0:33:04:4d:1d:
ff:12:cf:bd:31:c5:b8:4a:02:3d:9f:e6:b5:4d:33:
3f:cc:ec:25:49:52:56:9c:45:c3:97:ec:22:13:eb:
f7:b2:8f:4e:72:0e:f6:42:27:20:eb:cf:28:12:9a:
e0:c8:c0:26:61:44:b0:eb:ec:e6:7b:db:2c:08:5a:
52:ff:63:5b:4a:25:c3:c4:37:41:f2:76:d0:3f:07:
5c:20:96:10:4e:b4:d8:a8:4e:27:f8:f1:1b:cd:50:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E1:BD:92:9D:55:25:92:13:E3:DE:85:10:2E:3D:AE:3B:83:2E:67
X509v3 Authority Key Identifier:
keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a3:6c:4d:40:c9:5b:d1:7a:1f:e0:92:27:a9:38:27:c8:5a:
a7:52:ae:71:bd:7d:21:5f:5d:b8:8f:c0:b7:4d:32:00:22:ce:
ee:13:48:e7:cc:c9:d1:84:b7:a8:ee:10:ff:e4:71:97:94:02:
d3:a0:85:d4:3a:f7:8d:39:5f:c0:75:a8:76:28:56:4b:ed:97:
25:ec:5b:5d:de:dc:7b:27:56:1c:58:40:24:7e:34:e3:8f:c2:
57:a4:26:35:b0:97:6c:9e:e3:14:fa:5c:a7:23:73:1c:e1:87:
9d:1c:62:6f:71:cc:49:82:cf:b7:d9:1f:64:c7:9d:1d:14:d9:
42:b2:df:c6:00:06:dd:b6:03:a4:db:3b:f5:06:7a:32:97:4c:
ce:30:79:97:1d:73:62:b0:7f:52:e7:48:75:1d:d8:4d:c5:dc:
95:12:80:33:5a:16:24:be:86:46:84:bf:8e:8b:e3:44:4e:00:
66:a6:b4:1e:be:7a:13:8c:e8:32:c4:38:13:77:77:1d:ad:63:
b6:77:20:cf:08:32:f4:32:56:d7:9f:0a:ff:55:1c:a4:bf:5b:
fb:cc:cb:96:e6:f6:cb:46:97:79:43:0b:49:70:ff:a3:52:f0:
ab:a8:06:af:ea:a1:01:ae:9d:3a:2f:9c:c7:f1:0b:ca:95:9b:
ed:ce:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:55:19 2025 by rpki-client