Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
File: OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft (raw, json)
Hash identifier: UhIMoG8bZ189CIqjgE1BqMnP0vHQmZ/yz63e8OFi2/0=
Subject key identifier: E5:A6:88:B0:E4:40:71:CD:54:EA:A9:B9:62:CE:DB:C8:24:83:18:E5
Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858
Certificate serial: 0197B5C4D1B9411621A9A35766B3C7D7583A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 09:01:04 +0000
Manifest this update: Sat 28 Jun 2025 09:01:04 +0000
Manifest next update: Sun 29 Jun 2025 09:01:04 +0000
Files and hashes: 1: I01Lo7qwhvaLI2U54ucZ10pkExs.roa (hash: mTrGRc4f1Skt/0lHfZ3XZbVEvrQ9mBUuWZXJpIXORz4=)
2: OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl (hash: 1aYc16jLnHUfMXtNZMJvTstqelVTfCPbF/Kz3a1aDn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:d1:b9:41:16:21:a9:a3:57:66:b3:c7:d7:58:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858
Validity
Not Before: Jun 28 09:01:04 2025 GMT
Not After : Jun 29 09:01:04 2025 GMT
Subject: CN=e5a688b0e44071cd54eaa9b962cedbc8248318e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:af:ba:70:a3:3b:9d:02:b8:de:2d:05:ba:
b8:be:6c:01:61:24:0e:24:d2:e4:9c:f6:db:56:28:
97:87:33:8c:5d:b9:8e:ca:85:20:bc:c8:76:16:bd:
66:49:63:b4:fc:85:bb:a7:c9:80:f5:0d:12:f9:20:
d0:0d:6e:7f:c5:c2:00:36:13:97:d0:0d:63:00:b0:
81:7d:d8:ac:47:99:67:2c:c3:c0:97:18:74:39:95:
6b:cc:a3:75:0f:e4:6f:b9:bf:b2:5a:8e:11:49:68:
2d:22:8f:30:31:46:11:1c:f4:34:a8:9d:85:52:6c:
4b:ed:83:0b:8b:57:22:d0:44:49:e8:67:88:f1:b5:
2f:10:35:ff:d8:a5:5a:a0:c4:d7:c0:bf:6c:0f:78:
2f:e2:67:1e:bd:64:3d:d8:00:0e:4c:b4:b7:23:42:
b2:68:df:1d:40:b9:e3:73:a8:00:66:2b:cb:92:ec:
d6:84:fc:6b:5a:8d:bb:3d:5e:fe:84:f2:92:b3:de:
d1:0a:79:6c:57:67:32:7f:56:ad:1b:2f:07:03:cb:
90:a1:61:18:5e:b6:39:73:29:3b:a5:f4:b9:a1:10:
bc:cd:54:af:ef:7b:3f:50:89:fe:e8:8e:3e:0c:cb:
fe:54:d0:25:e2:8a:88:b3:18:b4:e6:d9:a9:9e:96:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A6:88:B0:E4:40:71:CD:54:EA:A9:B9:62:CE:DB:C8:24:83:18:E5
X509v3 Authority Key Identifier:
keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:38:64:c4:9a:a4:c1:ed:a0:bb:3d:d3:6b:c6:73:d5:e3:60:
f7:3d:71:b5:ae:fe:77:16:36:56:d1:9a:50:03:b7:e2:be:05:
95:02:ad:30:4f:2d:40:fc:86:5e:d0:b6:d6:3d:a9:6d:53:fd:
5d:ab:04:87:12:d3:3e:80:1c:cb:ac:c1:6d:4c:41:f3:32:46:
da:76:12:a6:65:c1:56:69:c2:82:4e:99:1d:cd:c4:9f:9f:4f:
b4:f1:04:8a:42:8a:af:35:9f:3d:71:86:49:23:f3:ed:72:56:
43:ae:56:44:12:98:19:ef:83:12:00:51:26:65:f4:6c:ad:06:
01:46:d2:e8:1f:3b:bb:fd:1b:68:92:5b:fb:e2:54:fa:44:b2:
0b:64:68:3f:2e:d4:9f:c8:b2:de:31:cd:7b:d0:b8:9c:32:12:
0b:8a:0a:b5:8a:61:b6:7f:bc:91:20:2b:c0:36:ae:b9:6f:72:
1b:8f:ff:1e:73:f5:1a:86:4a:36:90:a0:be:3c:6e:ec:82:ac:
81:fd:4d:c3:96:e0:cf:c3:ca:a9:92:03:74:c1:a1:2c:dc:e9:
f0:94:32:e2:5c:b7:21:fc:ae:71:23:09:ff:27:6f:25:a9:b7:
c6:70:01:dd:48:24:e2:d4:0f:57:1a:28:18:74:ed:dc:cb:87:
3e:a0:1e:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xNG5QRYhqaNXZrPH11g6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NmFiOTcwYmZiNjk0NzU5N2U5N2NlZmI5MTZlYzc2YTBj
NTY4NTgwHhcNMjUwNjI4MDkwMTA0WhcNMjUwNjI5MDkwMTA0WjAzMTEwLwYDVQQD
EyhlNWE2ODhiMGU0NDA3MWNkNTRlYWE5Yjk2MmNlZGJjODI0ODMxOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7qvunCjO50CuN4tBbq4vmwBYSQO
JNLknPbbViiXhzOMXbmOyoUgvMh2Fr1mSWO0/IW7p8mA9Q0S+SDQDW5/xcIANhOX
0A1jALCBfdisR5lnLMPAlxh0OZVrzKN1D+Rvub+yWo4RSWgtIo8wMUYRHPQ0qJ2F
UmxL7YMLi1ci0ERJ6GeI8bUvEDX/2KVaoMTXwL9sD3gv4mcevWQ92AAOTLS3I0Ky
aN8dQLnjc6gAZivLkuzWhPxrWo27PV7+hPKSs97RCnlsV2cyf1atGy8HA8uQoWEY
XrY5cyk7pfS5oRC8zVSv73s/UIn+6I4+DMv+VNAl4oqIsxi05tmpnpbnHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWmiLDkQHHNVOqpuWLO28gkgxjlMB8GA1UdIwQY
MBaAFDhquXC/tpR1l+l877kW7HagxWhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYt
OGQxMTI1N2Q0YWY2LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYtOGQxMTI1N2Q0YWY2
LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzhkxJqk
we2guz3Ta8Zz1eNg9z1xta7+dxY2VtGaUAO34r4FlQKtME8tQPyGXtC21j2pbVP9
XasEhxLTPoAcy6zBbUxB8zJG2nYSpmXBVmnCgk6ZHc3En59PtPEEikKKrzWfPXGG
SSPz7XJWQ65WRBKYGe+DEgBRJmX0bK0GAUbS6B87u/0baJJb++JU+kSyC2RoPy7U
n8iy3jHNe9C4nDISC4oKtYphtn+8kSArwDauuW9yG4//HnP1GoZKNpCgvjxu7IKs
gf1Nw5bgz8PKqZIDdMGhLNzp8JQy4ly3IfyucSMJ/ydvJam3xnAB3Ugk4tQPVxoo
GHTt3MuHPqAeOQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:18 2025 by rpki-client