Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: Zt2OA3Ml42lXdPIjymhCx5e9by4q+VX0vG8wIDKYQIw=
Subject key identifier: 72:DA:51:91:B7:AF:BD:A6:D3:5F:0D:5C:FB:C7:CE:7C:DB:62:40:11
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 0199FE7E034851B566629FDBFC1FC1BC65DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 0436
Signing time: Sun 19 Oct 2025 22:01:35 +0000
Manifest this update: Sun 19 Oct 2025 22:01:35 +0000
Manifest next update: Mon 20 Oct 2025 22:01:35 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: epZnG3tQjKdd9nMwRDQcRYD4Zx5wISnceF33DcFX/ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:03:48:51:b5:66:62:9f:db:fc:1f:c1:bc:65:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Oct 19 22:01:35 2025 GMT
Not After : Oct 20 22:01:35 2025 GMT
Subject: CN=72da5191b7afbda6d35f0d5cfbc7ce7cdb624011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:f8:f6:12:a6:a2:77:6c:b3:c1:5d:f9:9f:
cf:bc:e6:67:a8:9a:fb:b4:5c:e8:08:c4:43:6d:be:
16:7c:f6:c8:94:58:a4:a0:2b:e4:00:04:97:5b:78:
4f:c0:b6:cc:47:b1:64:10:ab:bc:98:8c:87:10:9b:
f1:64:af:ef:72:2d:66:52:d4:9d:fa:f6:31:45:1c:
be:b2:0d:62:7e:5f:16:b8:31:46:2f:f0:2a:c0:8b:
81:86:77:5c:67:b3:2e:67:80:b4:b4:98:c1:5e:3b:
41:18:62:84:4f:bd:43:e3:1e:64:05:e0:80:f0:59:
22:07:6b:6f:8a:6f:be:ad:6d:2b:fb:24:67:3d:c7:
5b:a6:b8:a8:ad:26:b7:d5:b9:fe:0c:d9:a5:95:bd:
92:5d:26:7a:06:0e:45:9a:53:f2:73:fb:d4:5c:43:
ce:5f:4c:ce:c2:a3:ad:e5:08:52:93:7c:e7:46:66:
3a:52:b7:75:09:ff:2c:32:59:17:c6:32:63:ba:72:
61:b6:03:ca:21:70:f5:98:7a:21:e0:01:4e:9d:e7:
e5:72:0e:ba:29:8d:11:d6:01:2e:5f:54:78:b1:a9:
dc:55:8f:97:6e:29:c5:e2:67:07:e2:62:9f:29:67:
be:b2:a5:08:5f:53:7d:59:14:0d:67:e6:0b:0e:90:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DA:51:91:B7:AF:BD:A6:D3:5F:0D:5C:FB:C7:CE:7C:DB:62:40:11
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:dd:1a:d3:13:f7:1c:31:c4:1c:84:5b:32:4b:30:3f:c1:52:
95:cc:e8:c3:01:39:b1:c7:b4:38:88:70:9f:d4:88:2c:53:1c:
ba:88:46:5b:42:e7:0a:c6:e0:10:27:9c:80:1e:1f:56:93:66:
76:d4:0e:c1:9f:2f:1c:ad:f3:e9:13:4f:8a:b9:9a:2d:eb:2d:
6f:45:3f:60:3e:aa:35:69:1e:d4:01:cb:b5:9c:42:43:6f:b1:
21:32:ca:55:c7:1e:63:8f:8d:ef:61:d0:c4:00:ca:9e:16:a4:
73:4c:6a:86:f4:27:f5:60:de:ac:a8:85:11:2d:63:2b:aa:2a:
72:43:90:f2:91:c3:93:bb:3f:da:2b:8e:e4:d3:85:4b:87:1a:
ce:3d:d8:4b:46:d4:90:03:1d:8b:58:57:3e:e1:8a:08:d9:1e:
5f:61:67:51:d6:ed:6b:99:37:34:61:c3:e9:42:6f:22:de:0c:
52:1d:4c:dc:c7:e1:5c:ca:e1:27:66:62:07:24:49:8a:30:8f:
b3:cf:3b:5a:ea:b9:60:6e:1b:e5:5a:db:52:56:16:9d:d8:d3:
52:c0:08:07:b2:f4:63:f3:c9:6c:b5:01:de:e8:6c:9e:79:05:
c8:ed:95:9a:1c:df:94:71:60:e7:15:97:48:26:f7:6b:b2:6b:
c3:98:81:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fgNIUbVmYp/b/B/BvGXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTE4ZmFkYWVmNzIzMmQzMTYxODg2YWNiZWE4YWIzMjNj
ZjM1NzAwHhcNMjUxMDE5MjIwMTM1WhcNMjUxMDIwMjIwMTM1WjAzMTEwLwYDVQQD
Eyg3MmRhNTE5MWI3YWZiZGE2ZDM1ZjBkNWNmYmM3Y2U3Y2RiNjI0MDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuof49hKmondss8Fd+Z/PvOZnqJr7
tFzoCMRDbb4WfPbIlFikoCvkAASXW3hPwLbMR7FkEKu8mIyHEJvxZK/vci1mUtSd
+vYxRRy+sg1ifl8WuDFGL/AqwIuBhndcZ7MuZ4C0tJjBXjtBGGKET71D4x5kBeCA
8FkiB2tvim++rW0r+yRnPcdbpriorSa31bn+DNmllb2SXSZ6Bg5FmlPyc/vUXEPO
X0zOwqOt5QhSk3znRmY6Urd1Cf8sMlkXxjJjunJhtgPKIXD1mHoh4AFOneflcg66
KY0R1gEuX1R4sancVY+XbinF4mcH4mKfKWe+sqUIX1N9WRQNZ+YLDpCcPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLaUZG3r72m018NXPvHznzbYkARMB8GA1UdIwQY
MBaAFJjhj62u9yMtMWGIasvqirMjzzVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2Njct
NzIxODg1NTY0NmUzLzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2NjctNzIxODg1NTY0NmUz
LzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAad0a0xP3
HDHEHIRbMkswP8FSlczowwE5sce0OIhwn9SILFMcuohGW0LnCsbgECecgB4fVpNm
dtQOwZ8vHK3z6RNPirmaLestb0U/YD6qNWke1AHLtZxCQ2+xITLKVcceY4+N72HQ
xADKnhakc0xqhvQn9WDerKiFES1jK6oqckOQ8pHDk7s/2iuO5NOFS4cazj3YS0bU
kAMdi1hXPuGKCNkeX2FnUdbta5k3NGHD6UJvIt4MUh1M3MfhXMrhJ2ZiByRJijCP
s887Wuq5YG4b5VrbUlYWndjTUsAIB7L0Y/PJbLUB3uhsnnkFyO2VmhzflHFg5xWX
SCb3a7Jrw5iBpQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:44 2025 by rpki-client