
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: UyAnZPr0NBzJcEh4/FyjMvC7g76lWXaQofC5udwIYKQ=
Subject key identifier: CF:C5:79:F7:07:C4:AC:97:43:3C:B0:3B:59:7E:6E:55:F0:AF:2C:57
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 0197B70EB3D074824CAC0E4EA7296CE60FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 07E2
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: C0+THgzMP3jROiKtG86oKRFD/AvAqN7umsO/xsbvEHs=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b3:d0:74:82:4c:ac:0e:4e:a7:29:6c:e6:0f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=cfc579f707c4ac97433cb03b597e6e55f0af2c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:81:4c:93:71:5a:46:96:84:ab:a6:32:54:
8f:65:a3:a7:9d:32:92:8d:be:bd:78:eb:d7:71:f9:
94:30:54:80:58:be:3e:a0:64:9f:09:b6:ce:94:aa:
36:02:40:e9:7d:b0:dd:f5:91:dd:f3:e6:4d:3b:d4:
31:d3:cd:c7:82:0a:fd:7d:13:b3:ca:ef:e2:77:db:
93:e3:38:d4:bf:71:a4:5c:17:b2:22:65:1f:16:68:
a2:51:da:2d:84:1e:34:7a:e5:c1:6e:44:8e:39:38:
09:ab:1a:7f:e2:73:5f:ec:23:f4:7c:47:62:82:f1:
93:89:b7:d4:a8:d6:89:58:62:85:aa:d8:39:89:63:
36:5d:c3:e7:74:d8:8f:1b:6e:6f:a1:80:de:e0:10:
3b:aa:cc:fc:5c:80:ca:bf:dd:7a:c5:10:00:45:fa:
41:76:71:14:a8:3f:c4:8a:36:53:c8:95:dc:26:2e:
ce:c0:d0:c2:4a:2c:49:04:da:4e:73:7d:b4:af:ae:
58:33:6b:ab:d1:07:0a:64:10:94:8f:28:57:27:11:
8a:c0:59:63:2c:0c:44:0c:dd:4f:be:01:58:43:99:
b7:92:7c:fa:51:f1:ce:52:4d:e3:e1:b9:0c:b9:d1:
96:0c:6f:2a:10:83:75:6a:35:e3:25:67:40:a4:1c:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C5:79:F7:07:C4:AC:97:43:3C:B0:3B:59:7E:6E:55:F0:AF:2C:57
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:24:9d:e7:b3:9e:5f:89:71:84:60:7c:96:c7:09:6c:1a:5b:
b4:00:d3:54:ae:13:67:da:ed:16:19:86:30:9d:5f:d4:94:2d:
37:44:1f:f8:73:7c:bc:e1:86:33:34:2c:77:ca:cd:07:b1:80:
9d:54:35:e0:69:18:76:3d:ca:ee:c8:1f:0d:02:97:9a:04:7e:
12:81:7a:e5:2d:8f:84:55:94:2b:4f:28:6a:1a:8b:c0:af:59:
9c:f6:29:f5:4a:5c:a6:96:1b:30:df:9a:0e:bc:9c:8c:6b:a8:
70:80:9d:51:c2:84:9a:dc:ee:9a:50:58:fe:9e:77:a7:41:58:
04:35:22:e6:6d:76:63:bd:27:f2:9c:e2:3e:35:70:88:ef:2c:
90:b1:3c:e0:23:3d:d2:39:5e:77:4c:12:d2:cf:4a:81:11:7f:
0c:eb:4e:69:90:2f:4a:74:aa:d0:02:10:4c:3b:97:47:42:69:
8c:ed:9d:c7:0a:65:e9:90:38:9d:d4:ed:25:f1:87:70:b7:f5:
9b:9e:41:49:d8:08:e8:d6:7a:2e:8f:63:3a:84:f9:07:5f:39:
9a:2b:43:0b:a7:85:d5:cf:c3:da:43:f7:a3:76:15:f4:c8:3e:
c0:c5:41:cd:3f:19:8b:f2:b0:1d:82:f7:82:98:36:7d:cb:29:
17:c4:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:37 2025 by rpki-client