Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier: sAGja6tTWs+VAmPnhz1t3Z0pm+kCk+CYi19JDu92Mvg=
Subject key identifier: 15:DC:43:03:FF:BC:8E:08:5E:50:02:48:F2:12:39:C2:D1:3F:30:4E
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 0197B6A0766B15DD470DDF34D03C0FF32355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number: 1602
Signing time: Sat 28 Jun 2025 13:00:58 +0000
Manifest this update: Sat 28 Jun 2025 13:00:58 +0000
Manifest next update: Sun 29 Jun 2025 13:00:58 +0000
Files and hashes: 1: 2Zybwhc3Z3EZr0OJWbNK-Ni55bE.roa (hash: GDmIbwApD2xrL9eeuVZLhE7JtQXKOdo8ocZYFN8KNJ4=)
2: 4en9va8jCZNwuV4bW7NKxVamz54.roa (hash: sNZVLTVL9KoD1p+QjvV2CcAfu43CsFx04jNm3+y7/uc=)
3: GjU_mJNlJFzzsuxULbJZ8-sONzg.roa (hash: LEJdYlI/AYNepLga7xbm/431PqVRVWZUyVsc0dPwS2Y=)
4: TRci-7qeDM6r0iGxR0T05lbhE5o.roa (hash: lbwBwoN0WDhRyqqCXFvMsakjDMrXifMYG7v+N6KW0/4=)
5: edWAVfkKeL_p4SOqKwWgAG9qG9o.roa (hash: eesAWNHbi/a4/dOuceKDaMTobB00ZxoBZJAUv+VOUbI=)
6: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: WDI507AsKARqPH5cdHV/UV5mOxpEHhybytxGXF/5b0M=)
7: pbIiqJaS1EGbniEbzOhuiaxLoYs.roa (hash: WUDrXqNFVweqXZgj8CONFBSXhspu+0e8gEJSRHtVtqA=)
8: qrNQe8rAWkRI3Z8qSnzQl59zZ8o.roa (hash: DSjAh8VczrbO+NQYKKNElF6wsdUEFFYXpc6COWia9dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:76:6b:15:dd:47:0d:df:34:d0:3c:0f:f3:23:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jun 28 13:00:58 2025 GMT
Not After : Jun 29 13:00:58 2025 GMT
Subject: CN=15dc4303ffbc8e085e500248f21239c2d13f304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:08:a8:5a:dd:32:13:0a:fb:0e:e9:e1:16:
59:7e:f0:5f:19:28:86:a6:37:e9:18:06:fc:8a:dc:
0f:45:fe:7f:f8:0f:6e:33:b8:15:24:b0:87:d8:41:
3c:f8:44:1b:a9:ad:a8:7c:05:3c:4f:7a:8e:57:b4:
3b:ff:50:8e:b1:44:1f:e1:2f:aa:0b:c5:e6:19:b7:
96:5b:54:aa:33:48:44:d3:28:cd:32:5d:36:41:ad:
9d:9b:02:22:30:52:12:a9:b6:62:35:c6:89:9d:6b:
ac:09:71:e0:a0:80:2f:0c:6a:ac:3a:a4:af:a5:31:
b7:59:c8:ba:17:92:41:32:57:28:87:09:e5:a5:13:
b0:fd:68:d4:b3:47:bf:c4:1a:6a:79:1f:b0:25:20:
3a:54:dc:f3:19:b5:8f:66:63:79:63:b5:7a:40:c4:
1d:9a:c7:b1:68:f1:bb:bc:90:9b:88:e4:08:57:7c:
43:4d:ef:cb:e7:23:7c:44:55:06:83:15:57:2c:20:
67:f7:8e:2d:75:f8:8d:ca:64:a8:26:46:d8:49:9c:
ee:03:45:0e:20:a8:fe:ed:15:70:25:9f:25:e1:36:
cd:ac:cc:b7:d2:47:fc:f2:ad:33:9b:0d:56:5a:54:
cb:7b:af:94:89:49:68:3d:66:28:8b:69:a2:4b:c4:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:43:03:FF:BC:8E:08:5E:50:02:48:F2:12:39:C2:D1:3F:30:4E
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a4:da:fc:28:f0:02:36:a6:9b:97:9e:cc:60:61:5f:ca:db:
61:73:96:8f:36:77:57:69:81:41:69:34:e8:e9:cf:40:a5:48:
0f:6f:09:f8:a9:61:7e:8a:2e:4d:24:9f:5d:38:6b:ab:cc:8e:
83:93:3a:95:7c:b0:d6:7f:d6:3f:a0:45:52:c6:d2:d6:5a:e6:
d6:5a:88:0c:d5:e0:2c:aa:d5:f8:6f:6d:f8:73:9e:33:12:ca:
13:59:9b:79:69:98:5d:0c:da:79:29:8a:d4:bd:b8:74:ad:4a:
92:8c:d8:6b:44:f5:59:68:41:7f:34:c7:92:bd:d5:46:4c:f5:
25:5f:4c:21:0d:43:22:5c:08:35:59:7d:e2:2f:50:b4:e7:f9:
bf:1b:6c:01:ce:a5:80:38:ed:1b:35:4d:47:16:e6:c1:2a:51:
a2:f2:94:67:29:76:ed:09:9c:94:15:bc:f2:7a:a1:ec:68:55:
d3:ce:aa:66:5b:b2:9d:92:4c:5d:e6:6c:f6:cd:15:8e:43:42:
77:58:a1:5d:3c:00:53:94:81:95:2c:86:c5:bd:21:6e:cc:13:
a3:1b:cb:7e:86:b2:66:9a:59:1c:6a:f5:50:90:af:93:57:49:
85:6c:31:26:fa:83:e9:35:86:d0:8c:65:d0:46:c2:ab:1e:75:
4d:94:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:38 2025 by rpki-client