Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: yaOFDobxVGL1FGhsPhe0w9Lc74hVbbzukh2I349j7H8=
Subject key identifier: 91:7A:6B:C8:80:17:DE:FC:73:E1:E0:34:F0:D7:E9:E7:E6:A7:90:C8
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 0199FAD84A96CD59432E47FC1A31C01464DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 03EA
Signing time: Sun 19 Oct 2025 05:01:42 +0000
Manifest this update: Sun 19 Oct 2025 05:01:42 +0000
Manifest next update: Mon 20 Oct 2025 05:01:42 +0000
Files and hashes: 1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: apHihiIm/jOGC3fXDoq4C2pvrhszlVTW0luwpQJgCe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:4a:96:cd:59:43:2e:47:fc:1a:31:c0:14:64:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Oct 19 05:01:42 2025 GMT
Not After : Oct 20 05:01:42 2025 GMT
Subject: CN=917a6bc88017defc73e1e034f0d7e9e7e6a790c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:a2:7f:6e:ca:08:38:46:ca:31:c9:f8:fa:
97:7c:6e:fb:81:7a:33:9e:51:db:89:2c:bb:c8:52:
71:3e:58:28:f3:d8:81:82:fd:28:c7:6c:6a:d1:82:
d5:55:c6:83:af:4a:0b:c7:d3:0d:9c:2f:f0:70:30:
22:50:1a:bb:a7:e6:a6:67:24:dc:74:36:78:6b:5b:
31:c8:88:d3:f2:33:b3:27:5f:3f:a4:be:d0:8e:0b:
87:6b:f9:c0:63:9b:34:35:57:4d:4e:c9:82:9c:df:
d2:3b:7f:cf:c3:ee:f6:14:c1:c4:dc:9d:db:c9:65:
88:1e:62:37:05:35:5c:19:27:1a:de:87:72:8c:3d:
f7:b7:36:65:de:48:02:30:f6:72:50:63:9c:e7:60:
58:2e:1f:40:59:2c:d3:c2:de:d8:25:16:70:c3:e7:
ee:d8:30:42:d1:3d:d8:04:94:2f:4e:59:ca:bc:ed:
35:62:d9:cc:7b:92:1c:55:10:d8:2b:04:82:9b:0c:
84:f6:52:e2:3f:c1:6c:fd:ba:b2:dd:cf:36:45:7b:
17:70:3a:5e:99:6f:05:a8:34:ad:4d:ca:50:d8:a5:
6d:d1:40:74:70:88:0c:be:2f:bb:65:ab:2b:c4:b0:
ea:3a:09:15:d4:19:ed:2f:95:52:42:c2:57:27:f2:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7A:6B:C8:80:17:DE:FC:73:E1:E0:34:F0:D7:E9:E7:E6:A7:90:C8
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:a1:1a:14:2e:15:7e:fa:3a:e0:c3:95:6d:d7:99:5a:f3:b6:
f2:b4:8a:a9:50:d0:9d:7e:0e:73:db:0a:13:e5:58:7b:dd:4f:
17:b9:02:79:82:3d:11:51:a2:18:a3:eb:80:e4:7e:0c:79:d7:
5e:d6:18:4b:46:15:9b:36:77:03:fd:8c:74:1b:c6:76:4d:42:
da:62:7d:98:39:f7:b5:54:11:61:7f:c3:05:44:b9:f5:07:04:
f4:da:ab:69:2d:19:1c:fe:7d:27:41:64:27:ba:a1:b2:44:b7:
96:4f:47:d7:af:24:8b:0a:1b:d7:c0:99:4b:14:18:17:07:f4:
95:6b:f3:2b:51:46:c0:a3:d5:7b:75:c8:32:13:92:e2:8d:9f:
b9:6b:b2:48:12:c5:6a:e0:cf:fa:a0:c2:83:d4:91:b5:2f:47:
6c:6c:60:b8:af:67:26:7a:08:01:bb:ae:84:82:1e:c2:1e:8a:
e9:10:18:63:92:ce:d8:68:9f:67:cc:d8:30:ff:73:8e:99:72:
73:d0:75:8c:2f:ff:92:38:d3:de:7f:5d:88:f4:dd:4a:2d:dc:
43:f7:2a:75:56:6e:7e:99:3e:8b:34:f0:f7:7b:84:b4:91:95:
a1:4e:fc:f2:b4:a4:25:fe:7a:69:02:49:4a:b4:02:c2:8d:ee:
22:5a:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:11 2025 by rpki-client