Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: YmBQoWSJCmZ4y+VRUEbDq1moEh2o3ZrS5bRFBHkXAcM=
Subject key identifier: 04:50:C7:41:98:AC:28:84:82:DD:36:06:CC:40:1B:C3:FA:1B:60:51
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 0199FBEA7B55C5A15B1A4FB916969B612F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 0392
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: yufyYbKm9l4EzHjG5GvOKF3rI+Pfs5QYcnMl4rdD+Co=)
2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7b:55:c5:a1:5b:1a:4f:b9:16:96:9b:61:2f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=0450c74198ac288482dd3606cc401bc3fa1b6051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:a5:e2:85:a7:f3:b7:09:73:36:87:5d:f5:
ce:a2:95:83:7c:fc:52:0a:2b:ee:29:a8:39:02:a8:
31:75:fa:8d:cc:2b:bb:81:e2:10:98:d9:6e:b5:a5:
9f:a1:4e:ea:6a:3c:99:50:58:1d:87:2a:7f:99:27:
02:96:b9:35:1b:af:a9:4a:e7:4c:68:0e:96:16:b3:
ed:60:84:5e:5a:9b:ed:56:04:de:cf:d0:0a:9c:c7:
9c:00:dc:a7:51:93:c5:b8:c4:a6:47:cd:f5:51:02:
46:cc:ba:76:65:62:e2:88:1e:05:3e:2a:2e:cb:33:
6e:fe:c1:ef:bd:0c:d3:07:a5:40:3d:de:cd:8d:f6:
a6:48:ee:1a:c3:fe:3b:2e:80:7e:a6:72:5a:6a:66:
0c:58:77:e8:14:52:71:41:af:8d:21:98:2b:72:d9:
26:29:90:2f:ff:3d:22:c7:6d:2a:73:11:98:6a:22:
38:c5:da:d9:0b:92:3a:21:b6:aa:68:c0:f8:02:86:
ee:46:5f:cc:eb:58:e4:33:3f:3f:72:73:5a:02:9d:
52:cf:c9:a5:e3:b6:e4:db:a1:6c:6d:1f:57:28:5d:
95:72:63:05:8d:13:2f:e5:db:12:4c:af:ca:2a:d4:
dc:e0:70:af:93:50:cd:82:43:29:13:be:4c:f0:e6:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:50:C7:41:98:AC:28:84:82:DD:36:06:CC:40:1B:C3:FA:1B:60:51
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:68:03:d1:0a:fa:03:d0:2f:7e:bf:b4:d1:b4:99:4f:2a:0a:
46:06:82:6c:cc:ee:c1:1e:d0:61:65:86:76:1e:aa:c4:b5:c6:
1b:ad:b1:3a:5b:d1:c7:5d:c1:2e:18:69:7d:ce:85:ec:b0:24:
f1:20:45:b9:cd:43:ff:4f:f4:0e:5c:b8:c9:bd:2e:a1:b1:8e:
9f:57:15:de:1d:c8:73:7a:f8:8b:78:5c:22:37:0a:8c:5d:b6:
a6:6c:00:40:89:f9:26:6d:49:7d:88:56:6c:69:89:2e:e1:05:
de:2d:de:4c:65:6d:70:71:21:63:f6:c8:9e:c0:10:7a:2c:fe:
b5:59:24:e6:27:6e:fc:09:90:65:6e:7a:4d:91:5e:f2:ea:6d:
d8:fe:e9:43:f5:a9:ca:b4:c0:0a:73:f0:07:06:49:fa:ae:19:
0d:25:ef:5a:4a:6b:30:71:ed:a8:11:cc:82:56:15:8f:87:2b:
2c:56:56:63:95:2c:a3:f0:72:3d:8b:d8:f3:6a:39:b5:73:14:
be:b9:1a:e6:d8:e7:96:2c:02:23:a3:11:a9:27:d0:2c:80:7c:
e4:eb:32:e4:2a:99:34:84:6f:f8:70:7b:3b:94:e5:e7:31:97:
a6:5b:13:d9:dd:74:09:a5:81:47:d2:51:51:27:ba:97:dd:47:
ad:43:2b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:31 2025 by rpki-client