Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: JOV5fFtRCqtFVjHJRCmQSQa3t/zg3LblkD9m2cjSnYQ=
Subject key identifier: 27:06:2F:80:8B:85:20:36:94:8D:27:A0:67:05:3E:E3:17:B9:90:69
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 0198D54DEB93C12030E1149236058BDFB57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 0352
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: Yy6V3Mfuay2/1JW90xekuCpy/AnXzPSdGVEn7+XptCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:eb:93:c1:20:30:e1:14:92:36:05:8b:df:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=27062f808b852036948d27a067053ee317b99069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:97:41:d3:6e:56:86:72:55:8f:9d:64:ba:
06:7f:7f:a0:ed:0c:40:1c:18:14:67:4a:ac:3a:64:
82:9e:c8:7f:92:2e:1e:5c:8c:3c:ae:71:68:bb:50:
d9:1e:d1:f9:f4:fc:89:bb:5c:c0:91:e0:26:bd:f9:
bf:3c:30:c0:82:42:17:ac:36:be:73:76:47:a1:0f:
94:61:c7:29:e8:e1:8f:59:12:83:b7:b0:56:35:46:
33:fc:64:a3:1b:bc:3c:e6:82:df:73:de:81:04:3d:
89:df:e3:5e:5f:1b:55:f0:43:85:65:8b:be:e0:d9:
27:c4:b8:ed:f1:d9:37:68:57:01:c9:bd:d9:34:54:
54:8c:bc:84:28:80:cf:f8:96:a1:e7:67:6f:b4:cc:
53:fb:90:f2:17:6a:2c:5e:51:fa:0f:b3:a8:66:f0:
c8:a2:0f:f3:28:83:3e:0a:e7:e6:fa:4e:2a:a7:84:
c4:ad:48:29:a5:1b:0a:91:49:0b:08:bd:25:88:f9:
31:7e:1b:9d:89:13:5e:7c:04:b7:cb:3d:26:18:de:
0e:ae:94:74:7e:2e:e0:90:cf:89:74:dd:e0:a3:dd:
79:fc:f1:b4:4c:7b:d2:a1:52:58:cd:14:d6:16:0b:
f8:35:63:c2:19:21:af:ad:05:23:ac:34:45:f9:b1:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:06:2F:80:8B:85:20:36:94:8D:27:A0:67:05:3E:E3:17:B9:90:69
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:0a:9b:d9:28:7a:9a:71:3c:44:a5:7e:eb:05:94:1a:64:e2:
15:16:9a:2f:54:ed:60:ac:55:be:7d:33:3d:57:bf:65:01:7a:
b6:e7:9f:36:2b:cb:39:4f:2c:cf:be:87:9f:00:2f:16:e9:1f:
79:08:3c:3b:00:8c:d5:8c:41:45:87:dd:99:9a:c4:44:b4:1f:
11:66:54:ee:30:f4:cd:74:c9:37:a0:ae:19:7f:4d:9b:a6:1b:
1c:fd:40:5e:83:b3:d6:b4:e1:3c:c7:2b:ac:56:5b:68:8a:85:
31:b2:74:e7:96:ed:52:d9:82:2c:a5:e4:3d:c1:f3:b5:a5:7b:
64:98:8e:8d:7c:1e:65:e6:57:ff:d1:53:8b:dc:23:80:78:c9:
07:85:5b:f4:1f:14:30:ea:0f:8b:58:03:1b:d9:b1:3a:1f:85:
2a:9f:24:49:33:3d:1c:2a:9b:8e:a5:dd:18:86:dd:d5:8e:6a:
58:d2:29:13:f6:53:4f:85:b4:af:d2:bd:b6:8e:26:d0:2b:9a:
c4:79:0f:28:57:0b:09:cf:62:bd:9a:63:93:03:2a:5a:b4:fb:
1b:ea:c1:ef:9d:f3:13:2b:cb:91:fc:c8:c3:ff:e1:0b:3c:18:
83:fb:fd:b6:6b:2d:a1:7e:46:8c:c6:c9:34:c5:7a:bb:6a:0d:
cf:ac:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:17 2025 by rpki-client