Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: z/Dpv0UF0kpPgyiCnKCBBGiWp+xbJVYCxvmyoV0yuXc=
Subject key identifier: 4D:49:A7:AE:3A:1D:CC:98:0E:89:F6:AE:02:3A:A3:81:DB:C8:7D:1E
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 0199FE46C37BD4CC958B0ABED66B97CE40F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 0253
Signing time: Sun 19 Oct 2025 21:01:14 +0000
Manifest this update: Sun 19 Oct 2025 21:01:14 +0000
Manifest next update: Mon 20 Oct 2025 21:01:14 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: B1X2QZVFarcumTdb5XgdNA38Xh95FiGB/FW5SVpjKMg=)
2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c3:7b:d4:cc:95:8b:0a:be:d6:6b:97:ce:40:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Oct 19 21:01:14 2025 GMT
Not After : Oct 20 21:01:14 2025 GMT
Subject: CN=4d49a7ae3a1dcc980e89f6ae023aa381dbc87d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0f:c4:aa:29:ae:aa:ec:c2:39:41:f2:9b:e8:
88:cd:34:67:9c:e6:16:3b:c3:dd:b9:5f:e6:1d:62:
ff:ef:99:cd:1e:ce:c1:96:ed:4d:cc:55:fe:33:5f:
5b:d5:92:1d:6a:98:53:f4:ac:09:4d:0a:7d:79:b7:
0d:e0:dd:c8:32:9d:03:ce:92:6d:02:4b:e6:4f:8a:
26:06:cc:bd:a5:b8:b1:b0:fd:0a:b8:bb:7e:d3:0d:
75:28:d8:ff:17:cd:cc:5f:1d:16:60:3e:c0:a9:9c:
7b:9d:21:5d:1d:1c:c4:a8:61:e8:92:5e:8d:9a:4f:
e9:9f:75:e2:9e:26:b1:ab:72:36:05:85:9d:59:9c:
ff:f3:78:0b:3a:7f:b1:12:99:ba:4c:c3:3c:50:07:
88:7c:7c:ba:69:05:54:24:19:a0:c5:cc:d7:48:85:
57:f9:e6:06:7d:67:83:6d:de:40:d2:ce:9b:f2:78:
18:20:8d:5e:de:78:0d:4c:a5:08:08:a8:65:ba:df:
85:81:3e:c0:57:a2:ff:6d:3b:47:fc:22:8e:6d:62:
05:cc:8c:dd:ca:4b:ef:c0:17:63:5b:6a:eb:ec:a5:
53:6f:19:c1:ed:bd:87:83:55:1d:ae:b8:ff:1a:ff:
32:4b:71:12:04:57:e6:f9:31:2e:81:e1:e4:4d:97:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:49:A7:AE:3A:1D:CC:98:0E:89:F6:AE:02:3A:A3:81:DB:C8:7D:1E
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7f:3c:4c:59:54:de:40:f3:20:40:a8:db:b3:82:b2:a1:db:
a0:0f:3c:e5:70:64:62:65:0b:2d:79:0f:89:07:42:98:ca:1e:
fd:b9:27:1c:2c:f4:0a:3d:d7:7a:72:ef:16:e0:8e:27:82:c9:
05:fb:b6:e2:41:bb:b4:23:0a:e4:15:35:4a:22:b4:6f:32:8b:
f8:e9:e6:a1:70:5a:1e:9e:65:ea:06:cf:9c:7a:a8:6c:de:df:
68:96:fb:95:e3:c3:c4:d0:92:86:ef:1a:01:83:93:5e:92:d4:
32:3a:74:fd:6a:b4:7f:d5:0a:8e:a2:62:45:f0:c4:c2:21:c3:
28:95:b8:4c:05:4f:e9:a2:4c:dd:dc:59:a4:9d:63:87:42:cc:
72:61:92:a4:fc:16:0b:a5:b7:36:2a:6b:2c:ee:8d:f2:61:70:
b1:c5:03:8d:65:07:86:6f:89:d1:c7:ec:07:36:dd:a0:4b:8e:
2e:5b:7b:b9:01:c1:5d:02:80:a0:3d:02:99:1c:b8:57:11:a6:
8a:3e:7b:9a:43:d9:cb:88:89:ad:3f:3c:5a:44:7d:24:6e:2a:
68:32:db:b7:7a:0e:46:e0:6d:74:18:a8:61:55:20:90:0e:d7:
6b:9c:cc:51:ff:ee:89:39:17:ee:28:51:78:03:50:b3:ba:47:
62:b5:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:53 2025 by rpki-client