Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json)
Hash identifier: KvelUAmRK4zDW9W9IykPMGmKZ0FTL6zddbMD0MCagOg=
Subject key identifier: 28:AC:06:CD:13:3D:77:BD:A5:66:1A:41:DB:2B:3E:BC:A1:B5:47:86
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 0198D629904B3012C3A749093299C144C361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
Manifest number: 5C
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: ZCpl3UyatQkZjsK8z_IxqXu_Sk0.roa (hash: O39VxnKkC8Thbx7rhWEv+PJDcL54U/wq4sE9v+Ry7uQ=)
2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: izwKlINH7i/uOSxWe58H9S7t1pNRqwpCgKyHLJBJQAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:90:4b:30:12:c3:a7:49:09:32:99:c1:44:c3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=28ac06cd133d77bda5661a41db2b3ebca1b54786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:39:1d:c3:f2:4b:e2:f8:3c:22:70:93:50:
e4:44:df:1f:57:47:fa:16:86:a2:0e:e6:79:14:91:
ce:06:0b:76:5b:c1:89:27:40:b2:8a:b1:70:6b:50:
5d:dd:22:e8:c0:b4:20:cf:92:ad:21:3a:17:bd:59:
d6:0f:d4:3b:f8:43:0b:56:53:2e:bb:e7:32:58:ae:
dd:57:d1:3f:da:e5:b1:eb:6b:73:5c:06:ae:52:da:
f9:84:ee:04:4c:22:db:11:bc:1e:48:cc:cc:53:0a:
95:78:ce:f4:2c:6e:0f:5e:e4:45:f3:66:1c:fb:dd:
e0:23:e7:93:45:02:07:57:21:cd:1f:b4:33:7b:fb:
6b:bc:84:92:45:d3:2e:37:8a:8d:c7:0c:85:e1:c0:
f2:2e:89:26:0a:ee:ea:72:a4:87:44:8d:9f:4b:c3:
80:52:c7:61:da:b7:e6:1c:c1:8d:4f:59:e1:98:fa:
d4:6c:94:49:bb:91:2a:b8:8b:82:3a:90:39:1b:eb:
59:d1:78:08:f1:86:dc:7c:2c:0e:4a:82:eb:6d:e7:
04:7a:af:a1:bd:2b:8e:ce:8b:61:4e:38:a8:2d:25:
60:61:03:67:67:e0:47:d0:45:82:59:29:70:c4:c5:
c0:e9:f6:07:ad:83:2d:38:9f:ae:b8:d0:e3:5b:be:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AC:06:CD:13:3D:77:BD:A5:66:1A:41:DB:2B:3E:BC:A1:B5:47:86
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:79:1b:50:61:3d:a3:05:00:f1:a8:20:ad:b7:9e:9e:30:ff:
48:07:d9:62:3f:4b:2d:7a:39:80:e0:8f:72:2a:e3:3d:1d:c9:
1d:cc:91:cd:44:87:c0:ff:9e:39:b0:53:94:f4:1d:3b:fb:11:
36:3e:a0:0d:42:85:39:c9:d8:80:7b:1d:0b:99:8d:65:f4:99:
e6:cf:08:be:1a:e4:32:ca:82:41:d3:86:f2:c2:ef:70:4c:77:
05:97:4f:96:20:79:ec:60:1f:58:3c:8b:2a:d2:be:c2:1e:17:
38:e1:b2:d1:31:43:b2:67:49:ae:83:8d:ae:c4:a7:0d:f3:c0:
69:73:97:67:05:1d:31:b9:9a:7f:c7:27:c5:cc:12:d5:20:49:
e4:ed:be:47:18:ec:1a:71:a4:33:4d:b3:b7:e8:f6:f7:e6:ac:
ad:b7:de:5b:d0:77:07:39:cd:de:f7:bc:5f:d9:16:b3:07:93:
69:f9:eb:8f:9d:30:c7:f6:32:91:9e:25:6c:2b:d4:c5:ad:1f:
08:a4:30:c9:91:1f:a3:0c:94:ed:48:a3:56:95:a5:11:97:17:
dc:2b:bd:b9:16:10:1f:72:73:40:26:37:c8:d5:f1:ec:2a:21:
97:fb:b8:08:86:5f:23:eb:79:2e:07:ca:27:60:4e:35:88:8e:
fe:08:e3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:43 2025 by rpki-client