Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json)
Hash identifier: +rK5xDvLS5nCiEeepXCm0PBQR4Otvos8MnDwLuvMj74=
Subject key identifier: C9:02:B7:E4:6B:EC:29:A1:AD:11:FD:8D:B1:9D:50:8C:B1:02:97:F8
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 0198D4A81306CBE5E88BBF7B05BD56898239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
Manifest number: 1A
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: vVEBOCrSsu4yCCiRoJkd2WcM4TOquisVNaq2I9N1nng=)
2: d_S_LiTn-5JZ6QbYkJGNQlQwd5g.roa (hash: wiJdaTKeLOoOD2ZMe+ZN1Wuh3uVVfGMcp7ArG5upMbk=)
3: qBjHDY2sXPfYcFMAdrqZb0wk3qo.roa (hash: YJdVl/jAdNP388MpdOeTC60bm9oxrdjXPgN1Q6k8CnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:13:06:cb:e5:e8:8b:bf:7b:05:bd:56:89:82:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=c902b7e46bec29a1ad11fd8db19d508cb10297f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:0b:db:76:36:10:03:f4:33:ab:53:95:a5:
da:f6:de:71:22:b4:a9:b4:e9:bf:d5:3d:c3:3d:76:
32:f4:3b:2e:9f:19:ac:9a:8c:d3:22:97:b2:ef:c4:
3f:15:57:72:b1:41:14:a9:fc:58:f0:19:00:4c:76:
2d:17:74:dd:fa:02:c2:bc:09:85:8b:02:23:f4:69:
8d:f2:5f:bc:68:1e:bd:46:4f:34:07:cd:02:e5:89:
2a:ce:88:50:e0:56:e3:9a:eb:16:5c:3d:ed:e2:c8:
fa:82:c4:71:66:84:66:ef:ac:5d:de:7c:d6:5e:4d:
69:18:ac:21:2d:90:70:fd:8a:8d:d5:62:02:c1:9b:
7a:54:36:14:f1:38:86:bc:bb:6d:76:d5:b2:c1:29:
ce:49:44:97:5e:14:e4:0d:1d:0d:2e:e5:02:fa:ae:
80:27:9e:88:68:74:ac:63:f7:ad:68:ff:08:24:06:
e8:f6:6a:0d:02:d8:dc:ea:6b:7c:c3:02:59:67:e0:
71:c8:aa:29:42:03:3c:48:fa:b8:c3:a3:cf:49:00:
1e:af:36:1f:a6:72:be:28:6e:e6:48:2d:b6:f6:bf:
5f:1a:13:fe:60:42:34:79:d4:d3:b4:84:35:ba:0d:
b0:b5:23:9b:79:5f:a2:4f:93:8e:42:51:d8:67:8a:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:B7:E4:6B:EC:29:A1:AD:11:FD:8D:B1:9D:50:8C:B1:02:97:F8
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:30:21:e6:3d:ea:0b:5f:e4:50:de:d7:30:72:03:62:70:ad:
a6:64:a3:10:ce:2c:6a:95:17:24:75:7f:97:e9:79:c5:f0:54:
c6:a9:c1:82:75:6a:91:07:f6:1f:42:fd:2e:00:a7:a4:4c:dc:
6a:84:06:7e:d4:b7:df:3f:f6:72:2b:ff:e6:5e:6a:da:46:7e:
01:38:2c:62:fd:60:37:04:4c:6c:22:be:9b:c5:79:bc:fb:e5:
c0:5f:c4:0e:ce:a6:66:47:73:6d:2c:7d:b8:a2:24:b9:e8:5b:
cb:eb:fe:99:01:14:fd:c9:56:09:23:8d:bc:b4:16:0f:a2:76:
3b:da:b7:c1:67:9f:33:a2:65:db:1e:f5:ef:93:52:ef:c5:81:
6b:df:dc:b0:f0:eb:50:1a:7c:a3:ad:9e:b5:c9:bb:a5:ed:b9:
92:23:c8:25:e3:52:78:10:f0:40:f2:be:0a:65:41:c0:c9:76:
b3:84:a3:5f:00:ff:3e:d1:e3:73:f8:16:b6:d1:a2:f2:cc:0b:
05:eb:84:86:6c:d5:36:0c:99:75:bb:76:c9:65:76:71:ea:8c:
b6:0a:d9:df:e2:f8:a4:d1:f0:a9:26:97:8d:84:86:2c:a4:4f:
cb:1d:44:35:d7:7c:86:80:47:2c:25:dc:e3:83:5a:87:7e:0e:
fd:ab:75:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqBMGy+Xoi797Bb1WiYI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDczMThhMTMxNDIzM2Y1NjIzYzBmODM1ZmFlMThmOTEy
NjQxMmYwHhcNMjUwODIzMDIwMDQxWhcNMjUwODI0MDIwMDQxWjAzMTEwLwYDVQQD
EyhjOTAyYjdlNDZiZWMyOWExYWQxMWZkOGRiMTlkNTA4Y2IxMDI5N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AIL23Y2EAP0M6tTlaXa9t5xIrSp
tOm/1T3DPXYy9DsunxmsmozTIpey78Q/FVdysUEUqfxY8BkATHYtF3Td+gLCvAmF
iwIj9GmN8l+8aB69Rk80B80C5YkqzohQ4FbjmusWXD3t4sj6gsRxZoRm76xd3nzW
Xk1pGKwhLZBw/YqN1WICwZt6VDYU8TiGvLttdtWywSnOSUSXXhTkDR0NLuUC+q6A
J56IaHSsY/etaP8IJAbo9moNAtjc6mt8wwJZZ+BxyKopQgM8SPq4w6PPSQAerzYf
pnK+KG7mSC229r9fGhP+YEI0edTTtIQ1ug2wtSObeV+iT5OOQlHYZ4p/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkCt+Rr7CmhrRH9jbGdUIyxApf4MB8GA1UdIwQY
MBaAFDoHMYoTFCM/ViPA+DX64Y+RJkEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMt
MDI2YTdiNjU0Zjg4LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMtMDI2YTdiNjU0Zjg4
LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODAh5j3q
C1/kUN7XMHIDYnCtpmSjEM4sapUXJHV/l+l5xfBUxqnBgnVqkQf2H0L9LgCnpEzc
aoQGftS33z/2civ/5l5q2kZ+ATgsYv1gNwRMbCK+m8V5vPvlwF/EDs6mZkdzbSx9
uKIkuehby+v+mQEU/clWCSONvLQWD6J2O9q3wWefM6Jl2x7175NS78WBa9/csPDr
UBp8o62etcm7pe25kiPIJeNSeBDwQPK+CmVBwMl2s4SjXwD/PtHjc/gWttGi8swL
BeuEhmzVNgyZdbt2yWV2ceqMtgrZ3+L4pNHwqSaXjYSGLKRPyx1ENdd8hoBHLCXc
44Nah34O/at1zg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:51 2025 by rpki-client