Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: uFpAkIxEteLw29BP3jEy+EgU6hx68+CrwfEfggWMdQI=
Subject key identifier: DB:4B:19:CE:89:E8:5E:AE:CD:65:17:E7:7F:F3:B0:07:82:26:A5:9C
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 0198D6CD5BAD29BF39A3BA68382E4F1E6BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0877
Signing time: Sat 23 Aug 2025 12:00:39 +0000
Manifest this update: Sat 23 Aug 2025 12:00:39 +0000
Manifest next update: Sun 24 Aug 2025 12:00:39 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: KvqjpyvelxSNOFaiuLO78lOo/msn6KlAC//8uuOQPSo=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:5b:ad:29:bf:39:a3:ba:68:38:2e:4f:1e:6b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Aug 23 12:00:39 2025 GMT
Not After : Aug 24 12:00:39 2025 GMT
Subject: CN=db4b19ce89e85eaecd6517e77ff3b0078226a59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:6e:a4:dc:d1:84:f0:2b:b7:50:ba:aa:61:
4d:09:12:1e:1b:35:bc:6a:3e:40:12:67:4c:92:12:
1a:8a:3f:93:6a:12:e0:e9:5b:2d:6d:a6:2d:1b:ca:
05:a1:fe:f3:97:30:79:af:66:9c:fc:f0:8d:c9:34:
83:cd:97:b1:be:1f:09:48:ee:da:92:2b:b1:33:6e:
5e:36:20:eb:3c:98:9a:a7:b7:eb:de:54:e7:29:b3:
c8:d0:27:77:8b:6d:a7:2f:aa:b0:6f:8c:3f:48:9e:
e4:bd:74:ca:f3:bd:71:8e:23:d8:f3:b4:54:53:4a:
15:39:17:d1:c5:4a:32:7a:42:67:32:ee:e7:c8:d7:
62:a4:fc:31:61:97:48:d6:7a:85:8b:c4:af:39:ed:
16:fd:d9:4b:73:ef:d2:8e:3d:d5:c3:26:e7:56:86:
3e:ba:f7:1e:84:21:9f:8b:02:1d:ed:18:04:82:5b:
73:44:4e:a0:05:60:fa:e6:0e:75:d6:ee:7e:fa:77:
61:96:9a:ad:3b:85:6d:30:6e:b1:5a:b5:03:36:b9:
a7:67:f9:41:90:26:89:e3:92:4f:0e:d6:5d:22:ec:
0b:af:9c:ce:6e:10:3c:bf:9c:29:6b:00:c9:01:68:
19:8b:a6:d0:b0:74:0c:52:63:ae:2e:49:6f:22:c8:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4B:19:CE:89:E8:5E:AE:CD:65:17:E7:7F:F3:B0:07:82:26:A5:9C
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:80:25:72:ea:11:0b:ac:3a:93:9e:55:66:4d:6b:48:98:f3:
73:fd:8b:3d:7e:44:2b:46:0e:07:ff:79:b8:e8:06:af:04:62:
bf:dd:8d:14:68:e8:90:5a:b6:2e:54:29:15:4f:16:28:74:18:
3e:fb:7c:ca:27:40:4a:47:e0:61:e3:84:8f:46:6e:01:0e:0a:
b4:f6:ac:fa:1a:6b:6e:28:74:9f:8c:78:78:47:7f:ae:c9:9e:
e1:42:7a:8c:af:a2:ad:4b:3f:95:b1:8e:3d:c2:f6:43:54:cd:
25:61:bd:07:53:3e:94:42:0e:e2:35:1b:8d:a8:03:f1:dc:43:
73:de:86:a7:f7:3f:b4:f4:5f:e2:11:6c:51:ef:31:74:5b:4d:
50:9c:f6:b1:37:e4:90:22:63:c0:29:57:92:c2:7e:34:ae:b5:
98:21:36:7f:42:39:94:ec:c0:cb:10:72:bc:6c:eb:b1:39:5e:
e8:5d:2d:11:83:30:bd:74:3b:b2:df:d6:80:0e:e9:95:e5:71:
15:12:16:fb:43:fd:2a:ac:2a:94:f1:2b:01:88:f8:28:7c:b3:
05:68:d2:55:27:16:54:af:9f:6c:69:b3:b3:e3:fa:07:bb:5a:
1c:98:ce:c2:67:b9:35:59:07:88:f8:88:fe:77:cb:2b:55:08:
48:2f:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:16 2025 by rpki-client