Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: 1EcyeS4jf0JnkhyJuXAH+ZO3rmXwqSFzE+Vn7qjULZE=
Subject key identifier: 5B:A0:D7:13:41:78:14:A6:AF:FF:38:FF:3A:46:2F:00:86:3B:D8:70
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 0198D51589D34350D026093BAAABEFF5C6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 039C
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: ajiTG0GB5pduKvFe2w/dGBECqD9MOHSNMRQNu3xAutk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:89:d3:43:50:d0:26:09:3b:aa:ab:ef:f5:c6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=5ba0d713417814a6afff38ff3a462f00863bd870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:2b:f4:a1:9e:e7:4a:f5:f2:5f:f6:8f:c7:
44:d8:69:e1:c0:86:3f:5a:66:49:0d:ad:62:59:6e:
41:2c:f8:e8:07:73:49:81:7c:ef:2b:0a:21:e4:c9:
61:b5:0b:25:04:b2:50:09:40:32:82:2a:a2:7c:ff:
96:4d:38:d4:31:25:d3:4f:15:94:f0:0d:b9:fe:5e:
6e:13:b1:1c:8a:f4:ab:65:1d:14:66:05:df:00:5b:
0a:a5:a3:79:5b:e2:4c:4f:05:86:15:74:a6:f4:87:
ef:f1:f1:c7:a4:b2:4a:37:cc:98:88:42:3c:8f:2b:
80:8d:e0:e8:76:6c:88:b7:cc:16:09:75:9f:b3:03:
68:e1:70:30:93:0e:16:1e:e7:9c:8c:55:d0:31:d4:
5b:5b:7b:44:70:71:e5:62:53:be:3d:fc:a8:e6:42:
9a:02:1e:97:e5:c4:f6:9f:68:24:34:8b:f3:25:ac:
f9:04:01:e1:12:1c:bc:7d:59:77:5a:6f:83:4c:1a:
db:28:e0:74:77:d3:16:f4:42:e8:43:1e:31:ba:79:
33:76:2d:cf:ac:54:ba:75:4c:08:cb:98:1e:0f:18:
e2:97:c9:0b:29:ad:b0:c6:af:ab:78:b1:6e:48:5f:
17:02:53:eb:c9:b5:07:4b:64:76:0a:11:3e:c3:b6:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A0:D7:13:41:78:14:A6:AF:FF:38:FF:3A:46:2F:00:86:3B:D8:70
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f4:ef:70:87:1a:23:11:c3:56:85:68:2b:41:58:aa:fd:bc:
22:66:92:89:00:dc:86:a8:2f:5a:75:6b:f7:70:30:28:8e:58:
85:c5:80:67:79:ae:19:a7:97:46:5c:09:f5:53:8b:bb:77:41:
f0:ed:0a:de:ac:e6:4a:0c:9d:27:38:8c:f8:f7:72:44:37:6b:
f9:d8:a9:6c:c6:f5:2b:ad:35:aa:69:4c:d4:1f:0a:4f:e6:a4:
14:91:f8:b4:00:b5:c9:a7:9f:4e:1a:c6:ff:1e:d5:40:e7:26:
45:b8:fa:4b:8c:ae:63:0f:f1:72:27:be:85:e3:48:23:f2:df:
62:f4:fb:c6:bb:ed:3b:e3:4a:f0:1b:9a:0e:8c:2c:97:ac:62:
9a:b3:d0:3c:93:18:fc:db:ef:e9:32:94:1d:bc:d0:0c:b0:0e:
bd:1f:fd:b3:b2:c3:92:e9:ec:77:ca:e9:f4:d5:62:52:81:2a:
c3:b3:39:75:ba:64:48:e3:2b:2c:ef:1c:fb:e3:1b:01:b3:7c:
ed:41:4d:84:d7:4e:95:cc:48:68:6d:66:31:b8:c8:24:73:09:
96:2d:25:6b:69:87:27:9f:6a:65:2c:fd:d7:95:d5:d0:15:6f:
94:27:3e:c9:d2:c7:1f:1d:63:c8:e9:80:1b:83:f7:bf:c6:78:
4a:42:78:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:21 2025 by rpki-client