Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier: 4WiXqMPthuyCFzeqPaEKE9ly7ml1/HaUXzuFac3N/0o=
Subject key identifier: 54:99:AF:36:05:A1:24:6D:20:17:8B:C9:F8:04:E2:D5:92:51:13:BE
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 0199FCC658DFCDB570C70A3B059CCD88C4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 14:01:21 +0000
Manifest this update: Sun 19 Oct 2025 14:01:21 +0000
Manifest next update: Mon 20 Oct 2025 14:01:21 +0000
Files and hashes: 1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=)
2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=)
3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=)
4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=)
5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=)
6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=)
7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: 2xKyzToa9KjfRAsZLVnFfNODhBAYt11VvGP7te+azKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:58:df:cd:b5:70:c7:0a:3b:05:9c:cd:88:c4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Oct 19 14:01:21 2025 GMT
Not After : Oct 20 14:01:21 2025 GMT
Subject: CN=5499af3605a1246d20178bc9f804e2d5925113be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:a4:4b:24:4d:f8:6f:31:6c:2a:5d:bd:75:
9d:0f:72:f9:da:5c:ab:57:95:23:d6:8e:d9:1f:f4:
18:c4:1c:4d:98:8c:c0:50:b3:94:8d:db:93:f2:46:
db:6b:e6:87:e1:69:d2:d7:51:82:ef:60:ee:04:38:
58:02:5b:49:47:77:39:f4:45:f6:07:d0:78:4f:5a:
cb:3d:31:d0:30:4d:53:b6:32:e7:60:16:33:e8:8a:
c5:3e:3b:b8:ab:d3:8d:02:a8:01:6c:e4:92:ae:8c:
13:51:d9:f6:70:67:f9:d6:44:2a:b5:5a:9e:10:1f:
4f:fc:e2:9a:41:dd:8a:85:fe:86:e2:0c:99:e9:4e:
80:d2:83:c5:b6:f5:75:e8:35:66:c7:d1:bc:e1:ed:
51:44:ad:7b:4a:7a:48:eb:6d:12:a5:a3:7c:0d:cf:
78:1a:e6:e3:fa:b5:8c:d4:ae:e8:21:10:9b:56:74:
ca:74:7a:38:db:f5:30:d5:9c:61:1d:08:92:a8:1c:
67:b9:eb:f9:4f:ba:ba:f9:84:45:90:56:6b:6c:53:
71:58:b2:38:66:ce:eb:40:8c:e3:70:01:fe:41:df:
94:a2:9c:6c:a6:36:da:81:ca:7b:dc:88:c3:83:8c:
15:72:b7:e5:86:cc:eb:b0:32:74:84:45:82:1d:db:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:AF:36:05:A1:24:6D:20:17:8B:C9:F8:04:E2:D5:92:51:13:BE
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:13:41:7f:94:94:e7:37:fc:a1:34:07:3b:56:5c:d5:06:e9:
16:dc:d6:ed:10:65:d1:e8:15:b0:d0:72:5e:a0:8f:04:53:d6:
ba:c8:7a:59:8d:76:cb:08:79:ad:5d:db:aa:e5:6b:af:3e:6b:
55:e8:d5:f9:60:6f:63:af:f3:0f:36:9f:62:48:97:84:1e:b9:
71:25:43:6b:9c:81:a6:bd:e8:66:7d:14:8b:b1:31:7c:a9:78:
5d:fc:48:b5:96:f9:1c:b6:de:79:ca:a5:cf:31:c8:86:6f:78:
7c:b8:0c:0d:22:4f:01:67:cb:96:3d:ab:83:8b:07:45:f6:97:
8f:2b:ed:a0:19:9f:6f:56:72:66:d9:3c:66:74:bf:73:a1:2a:
ae:c7:a4:05:40:b2:65:fc:7b:4b:3b:8c:5c:5c:df:e1:a2:a1:
99:a2:9b:dc:98:73:9c:f1:0c:aa:4a:ea:4c:c4:2a:06:a9:a1:
9f:b4:e0:df:26:74:f3:a5:b8:ae:0c:9f:35:df:a1:d6:99:59:
81:a6:ac:aa:10:18:d1:12:5b:04:f6:3f:f9:15:60:db:2a:38:
9e:b2:1f:1e:03:99:e0:0d:35:df:12:d9:c6:b9:ad:f0:e6:35:
fd:2e:46:ce:73:d3:8b:d3:94:e0:c5:8a:94:05:ac:8d:1a:05:
8c:01:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:55 2025 by rpki-client