Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: l2/b/oySlD5lJuCmC+dU3b+EW0tyirO7r214Zo9oUF0=
Subject key identifier: C2:58:82:08:18:3E:77:30:76:41:79:21:89:F4:EF:7D:9D:4E:FD:67
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 0197B933D20FC9BF7A8048FEF5B86C99EC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 0309
Signing time: Sun 29 Jun 2025 01:01:10 +0000
Manifest this update: Sun 29 Jun 2025 01:01:10 +0000
Manifest next update: Mon 30 Jun 2025 01:01:10 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: qtAROoUadshO8aTWgaPEQ+tHYTA/HSmlO/X2NNQjR9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:d2:0f:c9:bf:7a:80:48:fe:f5:b8:6c:99:ec:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Jun 29 01:01:10 2025 GMT
Not After : Jun 30 01:01:10 2025 GMT
Subject: CN=c2588208183e77307641792189f4ef7d9d4efd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:8f:54:ab:01:81:ff:5f:a0:d1:59:8d:d6:
b2:50:c3:13:f4:7f:88:2a:df:8a:41:6e:55:25:a7:
83:78:f7:4f:36:6e:2e:0a:66:dd:df:47:db:48:83:
10:13:81:01:74:e5:d1:72:80:cf:17:26:46:91:44:
52:a1:df:8f:a3:21:f3:b9:8b:be:c9:bf:05:42:50:
d4:ee:b4:ad:57:41:3f:bd:cc:03:87:35:59:15:ce:
c2:5c:2c:a8:30:ff:ce:34:77:1b:49:ec:8c:7d:62:
3a:bd:41:b4:51:43:47:b3:f0:8c:2b:9e:95:42:a3:
4e:20:6e:f5:4d:96:ef:0b:37:d3:16:ee:42:08:ea:
2c:90:6a:ed:35:3a:9f:5a:b1:1e:35:66:8f:6b:84:
84:ea:74:bb:52:b3:55:0b:0e:d9:ab:10:08:c1:47:
be:67:b9:81:36:70:02:38:73:61:64:08:7f:15:40:
38:90:d3:36:d4:9a:b3:a9:bf:0e:42:dc:56:d9:4a:
12:64:3b:bb:cb:cb:04:be:1d:89:20:3f:1b:9f:2f:
11:3e:ce:22:3e:7a:f6:e2:46:43:97:dc:89:23:0c:
bb:8a:bb:74:c9:e4:43:28:47:bb:db:f8:23:76:d5:
da:7a:fa:0f:00:b7:f3:49:dd:61:21:79:ca:93:ef:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:82:08:18:3E:77:30:76:41:79:21:89:F4:EF:7D:9D:4E:FD:67
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7f:c4:df:29:f2:93:e2:f9:7c:bb:99:5b:58:36:82:28:b0:
bd:80:e6:41:71:bf:16:f8:21:a5:91:ed:29:a1:65:52:7a:43:
3a:0e:98:e3:df:68:05:66:6a:af:78:74:88:38:34:73:8f:90:
fd:f8:89:dd:82:07:b1:b8:ab:b5:c9:e3:c3:8b:2e:94:7d:27:
e1:f6:0b:57:e2:0d:95:3f:26:02:b2:a1:de:e3:ea:3a:00:21:
43:49:ea:cf:79:af:d5:b3:d6:42:31:59:3f:90:af:b8:15:06:
c5:c3:9c:87:ac:45:2f:1b:43:4e:fc:16:29:ce:84:71:33:50:
85:06:ea:b3:1f:b5:35:27:3a:ca:03:7d:64:51:f0:bf:32:00:
35:e2:58:cc:1c:ae:87:7a:02:ab:63:57:56:75:36:8b:db:74:
24:41:b5:c2:96:79:f9:d7:e4:9d:0b:ef:3a:c5:07:ee:bf:b3:
fa:0f:ac:89:02:18:2f:da:20:00:a8:66:aa:d1:71:b7:90:c5:
1c:01:2e:dc:d0:73:21:7d:90:2b:5a:e0:2e:69:0c:49:f5:e5:
92:37:3e:86:d9:8f:10:64:ff:bc:90:08:77:8e:33:b9:29:2f:
da:66:71:d3:14:22:25:80:69:ec:fc:ca:d6:37:f1:9b:d2:a9:
0f:ee:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:12 2025 by rpki-client