Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier: ss6Cg07sDDSVY+rdTcdI/AE12mu75ttvfzmrbZ8/f44=
Subject key identifier: D1:3C:46:90:F9:00:31:2D:1C:36:83:5A:0D:9E:67:59:07:25:05:2B
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 0197B96B00EC6563E37E7E84FCF8EE93D2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number: 15BB
Signing time: Sun 29 Jun 2025 02:01:26 +0000
Manifest this update: Sun 29 Jun 2025 02:01:26 +0000
Manifest next update: Mon 30 Jun 2025 02:01:26 +0000
Files and hashes: 1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=)
2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=)
3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=)
4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=)
5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=)
6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=)
7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: xu2r+2hLUbYvV0U6mMWvKt+u5yvcCTDcNtCzK3oitpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:00:ec:65:63:e3:7e:7e:84:fc:f8:ee:93:d2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Jun 29 02:01:26 2025 GMT
Not After : Jun 30 02:01:26 2025 GMT
Subject: CN=d13c4690f900312d1c36835a0d9e67590725052b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:5c:4c:f1:ca:91:d4:f8:e5:b7:da:86:13:
7d:0f:d7:80:f0:09:9e:f1:5f:b1:1f:09:63:a6:be:
23:21:e7:d5:69:da:1a:71:23:d6:2b:80:a3:bb:77:
9e:63:8c:4c:a8:5c:64:ff:88:05:6e:d4:cb:56:e6:
74:8d:91:da:11:b2:bb:54:93:2c:70:95:99:39:ae:
a7:6d:27:2a:42:f6:87:f2:06:ed:82:09:5b:4d:ed:
ea:c2:33:3e:de:98:e9:31:ae:08:80:ba:e1:bc:90:
d0:59:04:0a:a9:af:af:cd:70:47:33:2c:be:81:6d:
a2:fa:85:2d:34:46:4f:a4:7d:3b:bf:a5:11:02:5b:
f9:96:aa:ae:d2:80:32:08:79:c7:38:cf:da:8e:05:
0d:b8:a6:1b:a3:6e:fb:6c:f3:a9:cd:f1:ac:ea:8f:
dd:84:98:0e:00:6e:42:c0:bb:f2:42:09:b6:7b:1b:
a8:00:5d:2b:a7:cd:28:50:1f:5d:37:9f:17:59:af:
04:59:3a:06:55:b0:65:bd:09:f3:f2:31:7f:79:a8:
dc:7f:ea:50:1f:ec:3a:4a:24:86:7d:4e:cd:3d:3c:
42:32:bc:72:b7:ab:4d:dc:d9:f3:ae:13:23:15:34:
1c:9f:cc:4c:8d:13:b7:af:c1:f4:cd:5d:13:50:3a:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3C:46:90:F9:00:31:2D:1C:36:83:5A:0D:9E:67:59:07:25:05:2B
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ef:7e:e5:a5:fd:25:29:72:bf:47:20:8a:42:1f:fa:24:03:
b8:a0:63:19:02:9a:e3:58:11:0b:c2:51:8d:b4:3a:4d:a0:95:
5a:7f:28:55:59:73:10:0c:d8:f5:4c:fa:67:00:74:43:d9:66:
2f:11:1b:02:83:c2:f6:f4:34:f5:24:06:0d:f5:9c:59:d1:84:
ba:51:7c:e4:a1:b0:5e:70:b8:59:cc:1d:be:de:15:0a:48:9a:
62:21:1a:e5:e9:d4:cb:5d:cf:66:d3:14:a9:f3:36:3a:b7:b7:
fa:82:11:32:6d:20:46:46:d2:ae:a1:88:d2:cf:a8:66:b3:f8:
f8:d6:7a:11:1f:7d:ea:15:a4:ab:ab:42:f2:2d:66:0e:f7:56:
06:1c:cd:43:07:c8:7c:ad:3e:fc:26:5e:c1:9d:db:44:26:20:
63:bb:20:2c:d7:27:b8:f3:ad:e5:47:a6:db:dc:88:e9:57:95:
41:6b:62:96:e6:2f:73:3a:a1:3f:34:05:7d:4e:b3:0b:33:bc:
78:3f:3d:5a:96:84:cc:35:7b:5c:33:55:89:ef:27:9c:99:33:
5c:c8:a8:9b:d3:83:1c:02:1a:37:54:73:73:b9:3c:84:02:aa:
60:b7:06:d1:77:c7:16:98:80:b1:51:76:07:69:d2:31:04:7e:
49:df:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:02:55 2025 by rpki-client