Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: cK/QgejaJ2fIiIh2XcF9BANajnlnc0eS81+pGtP8Ft8=
Subject key identifier: 05:91:A2:4A:1E:CA:06:87:51:42:78:74:C6:ED:CD:79:C2:06:83:E3
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 0198D4742DF3444EC4DA42F80F0DD1E73FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 10BB
Signing time: Sat 23 Aug 2025 01:04:00 +0000
Manifest this update: Sat 23 Aug 2025 01:04:00 +0000
Manifest next update: Sun 24 Aug 2025 01:04:00 +0000
Files and hashes: 1: 13rU8nhg31f282Ufq4fY9epK_mk.roa (hash: 71Un032C55jpwedQZGjeiCXgaYcH9RkzCt+gCgI2Wak=)
2: DDq525mddfr-xwBo8-T-YcAlqlM.roa (hash: vbBu7r+JS7z7+nPsGEJDbq+t4cp8fYea0z6mgr+ClXE=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: 2X0OsEPbA837w/Y87xzkiW0Y2NvdA6D4wYAmkCop64A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:2d:f3:44:4e:c4:da:42:f8:0f:0d:d1:e7:3f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Aug 23 01:04:00 2025 GMT
Not After : Aug 24 01:04:00 2025 GMT
Subject: CN=0591a24a1eca068751427874c6edcd79c20683e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:9a:e3:e5:e4:a3:2f:1e:d7:2b:2f:ca:ba:
3b:4b:2c:fd:ef:fe:14:07:7d:a3:3c:08:39:ef:33:
0b:6a:d7:75:93:d6:b7:62:ad:34:f4:2d:0f:72:ff:
d3:df:13:7f:38:c0:12:bf:5b:79:7e:52:e3:49:ff:
98:c7:94:9c:51:79:bb:a3:17:80:c7:78:e1:cc:5b:
af:d9:49:91:91:c9:bc:f5:7d:9e:41:0a:4f:aa:91:
8a:72:06:84:09:8f:8d:ba:fd:8c:a8:e1:45:35:16:
b6:3b:3d:30:e6:e4:07:b4:37:ea:12:7a:d9:2d:54:
6e:b4:1e:c8:d1:bf:40:f6:55:7d:33:f2:ee:24:3d:
d8:3a:a0:21:77:18:67:ce:e3:93:be:49:6e:10:22:
aa:e6:23:4e:c3:79:f7:f7:aa:ac:88:fc:c7:5a:22:
96:bf:15:4f:3f:fd:f9:d3:33:0d:93:fb:ef:44:9f:
b6:ed:c6:b7:ee:3f:6c:0f:98:ab:22:a8:d5:59:af:
9f:44:00:cb:32:3c:26:33:2f:60:9a:2c:f8:83:5e:
c0:73:4c:f9:05:8b:e2:93:3f:80:e6:15:43:ac:90:
37:08:9a:b5:90:33:7d:4f:f7:ee:89:8c:a4:9c:50:
b8:52:af:a6:b9:54:6a:ec:56:f0:ef:bc:90:02:3d:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:91:A2:4A:1E:CA:06:87:51:42:78:74:C6:ED:CD:79:C2:06:83:E3
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a8:34:c5:ac:1d:18:6b:fc:96:59:df:77:a4:d3:97:25:6e:
a6:e9:f1:ba:08:38:8e:92:20:94:46:37:82:ba:ee:ea:fe:2e:
80:40:85:70:f1:23:c0:c8:d6:98:f6:30:23:a4:00:61:81:68:
7b:d2:15:57:08:b9:1e:27:e2:09:8d:3c:e9:59:1b:9c:fb:33:
d2:bd:ff:46:85:6d:79:1d:5e:75:c6:cb:26:52:2e:28:ff:c1:
f7:0a:c4:82:5f:a9:cc:81:75:f3:86:ac:ec:b4:87:dd:d8:e3:
5f:94:ba:25:6e:6a:1a:8e:66:69:65:c1:7b:32:b7:37:55:90:
7c:69:43:52:36:f1:3f:51:d3:b1:87:87:85:49:a7:1e:62:0e:
a6:d8:e2:7b:82:f1:ed:75:92:a8:5a:81:22:e1:22:1e:ef:5c:
0d:d0:e3:d3:86:5b:cb:e3:a7:18:cf:b4:42:80:d9:15:16:3c:
3e:d5:22:73:10:d5:68:8f:44:e2:a2:d3:76:13:7d:74:d1:0e:
4f:90:ab:a2:e0:58:7e:e4:03:ed:33:4c:93:11:8a:8f:08:ad:
77:1f:75:3c:59:6b:f9:3a:3c:48:fb:40:08:83:c6:f3:8a:6e:
5f:bc:11:eb:98:02:3c:3f:17:1f:f9:ec:fb:3e:99:d1:02:3b:
80:44:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:01 2025 by rpki-client