Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: rM6o/HjWpV99MLPPcVw3slu5dAkuMo5+Z3Y9/7c2pcg=
Subject key identifier: 88:E3:14:5B:4C:0F:83:63:09:31:9F:B2:0A:13:2F:7E:87:E2:71:EA
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 0198D4DFCC47F3A8685D79A049E21D991159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 01B9
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: PvRrJ7sYq1TGnyhVvshc5NUDBxP39oG6pyp1KqPzV/E=)
2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cc:47:f3:a8:68:5d:79:a0:49:e2:1d:99:11:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=88e3145b4c0f836309319fb20a132f7e87e271ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:75:97:c5:71:16:11:8a:c0:80:8d:48:47:
1b:3c:1a:96:94:ac:6c:35:ce:14:77:f9:ff:4d:ca:
12:5e:7e:df:88:c8:55:ab:1f:57:59:26:b6:05:13:
17:59:ce:a7:e4:81:f7:f1:22:cd:53:d1:17:5c:28:
03:90:22:a6:dd:4e:26:8c:66:6a:27:e6:b9:df:e2:
14:ca:d8:c1:6e:b7:ce:59:75:b4:29:7f:ad:a0:31:
c1:4d:c5:b3:bd:f5:61:e5:d1:46:ff:8f:ed:fb:a0:
11:36:50:fe:2b:a1:3a:6c:81:37:aa:4c:fa:5f:71:
34:f1:8c:69:6e:e7:a8:8d:03:b2:4a:78:80:ae:e9:
a1:99:85:e6:f0:11:22:8b:38:6a:f3:c8:24:f6:21:
80:3b:6d:63:1a:f4:ed:3f:b6:05:cc:77:6b:e4:94:
8a:68:c1:d2:fa:27:a2:ef:d1:76:98:72:11:f2:c0:
67:90:27:ea:29:94:c8:ab:0e:5f:af:23:70:bb:76:
4b:18:cc:88:e0:8e:a9:d0:d4:67:35:ef:bf:a5:48:
e4:22:c2:3c:8f:21:e7:40:2b:f2:79:40:93:bb:a4:
4e:0f:62:1f:d0:ee:9c:63:06:e1:21:09:4c:6f:11:
23:0b:28:7f:93:66:2f:b8:3e:cb:f7:4d:ed:82:bc:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E3:14:5B:4C:0F:83:63:09:31:9F:B2:0A:13:2F:7E:87:E2:71:EA
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:51:7f:f2:fd:25:67:d5:77:ad:e0:63:9f:2c:51:c3:bc:43:
43:43:99:ef:26:a1:c1:af:0c:f9:57:e7:ff:a4:1a:8b:58:64:
98:13:ac:e3:2a:8e:34:e4:c1:d4:ad:64:20:31:ab:b9:93:e1:
21:31:79:e6:92:02:d1:4c:65:7a:2e:7c:c6:a1:ce:38:cc:d2:
df:91:ab:68:52:34:b0:57:71:3f:3a:51:fc:dd:a4:38:24:fe:
9e:84:5d:51:28:33:aa:95:49:e2:5a:d3:41:7a:e0:99:11:1f:
f1:86:4a:67:70:34:9f:09:a0:78:4d:25:c3:53:1b:76:d4:ad:
58:9a:48:50:ab:ee:e4:1a:7b:1c:da:8e:0a:55:a3:14:ca:c8:
45:7b:17:60:f2:ce:ab:44:88:20:a5:ad:71:0f:7c:45:87:80:
df:ef:0e:f6:e9:e8:59:44:2e:3e:78:d5:2c:c6:c8:c0:aa:35:
34:0e:5b:64:31:e3:b5:22:5b:0d:42:30:71:d2:50:e1:74:29:
e8:27:8f:a4:d6:a7:ff:65:b9:d0:30:12:da:45:49:59:bb:6b:
21:3d:cd:6f:c9:56:40:d3:cf:4f:60:ab:52:62:eb:56:94:ae:
98:37:81:b5:9f:8f:c1:ea:9d:ff:1a:20:c5:57:fa:a8:52:64:
ed:c2:7b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:12 2025 by rpki-client