Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: /W1ad3znvxB7o8L+7yPzCh/r7mMizabRU+FO+UWmJuc=
Subject key identifier: 94:69:CC:2C:BA:EE:73:D5:D0:E1:73:0A:64:A3:E6:B2:47:31:28:3C
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 0199FDD8D7550C133498F0C13437391581BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 1155
Signing time: Sun 19 Oct 2025 19:01:10 +0000
Manifest this update: Sun 19 Oct 2025 19:01:10 +0000
Manifest next update: Mon 20 Oct 2025 19:01:10 +0000
Files and hashes: 1: 13rU8nhg31f282Ufq4fY9epK_mk.roa (hash: 71Un032C55jpwedQZGjeiCXgaYcH9RkzCt+gCgI2Wak=)
2: DDq525mddfr-xwBo8-T-YcAlqlM.roa (hash: vbBu7r+JS7z7+nPsGEJDbq+t4cp8fYea0z6mgr+ClXE=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: l1vWrRlxk63lBvWB/Rv+8GKlTRDRgCJGSV3izICg8I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d7:55:0c:13:34:98:f0:c1:34:37:39:15:81:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Oct 19 19:01:10 2025 GMT
Not After : Oct 20 19:01:10 2025 GMT
Subject: CN=9469cc2cbaee73d5d0e1730a64a3e6b24731283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:99:30:72:ec:0a:bd:c7:bc:c9:79:97:c6:
fe:5f:83:a4:bc:2b:f7:a8:ce:a3:44:17:e0:21:f2:
72:91:e6:2b:ae:c4:24:ec:fc:61:cf:8e:60:52:5c:
f9:99:6b:6f:de:12:53:d8:3c:c5:85:99:89:fc:1c:
3e:41:02:f9:7a:42:22:e0:1d:36:fb:70:ad:1b:13:
40:f8:9c:b6:51:1d:68:c2:ce:75:1e:5b:6e:4a:39:
36:bd:3e:3b:07:b5:69:76:10:70:68:0a:7b:b9:88:
ed:b6:5d:2f:c7:ae:28:0f:b5:12:6e:b9:10:af:64:
90:f8:d0:d8:01:23:ae:55:5b:b7:60:a3:4e:aa:5d:
fd:8d:89:54:60:45:5c:03:aa:a3:3d:2b:b1:1e:c9:
a4:80:33:7c:93:bd:fd:22:68:46:42:06:ee:64:dd:
ff:60:9d:e9:c6:0d:3c:79:72:2e:0e:ce:4c:59:17:
7d:03:fe:de:ca:13:c2:cc:da:4c:7b:7b:31:08:4e:
e9:f9:cc:f0:6d:5b:37:09:c3:7e:d8:d4:f1:4d:1c:
a1:6d:42:83:58:3b:18:f1:91:0e:53:60:c8:ee:50:
d5:5b:c2:81:ff:76:d7:1d:49:cb:2f:90:03:fb:63:
c8:b2:93:8e:27:c5:04:fb:b7:40:77:73:d3:ef:ac:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:69:CC:2C:BA:EE:73:D5:D0:E1:73:0A:64:A3:E6:B2:47:31:28:3C
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1b:0e:e7:20:43:91:04:45:36:e7:44:91:c7:95:3a:b4:58:
3b:0c:96:ef:e4:4f:6d:6d:4f:79:7a:4e:70:90:4e:c8:7e:e9:
aa:42:a2:b7:2e:75:bc:91:6f:0c:db:9f:af:84:99:f8:60:ae:
dc:15:fb:bb:f2:1e:02:6f:94:91:51:37:db:4a:6d:a0:43:aa:
a1:86:b6:33:3a:b6:de:fa:4d:31:b5:4a:e1:cb:81:48:a9:88:
ef:c7:13:9f:40:8e:44:19:c3:eb:25:d4:16:6a:70:07:d1:8e:
f7:0a:7d:10:a8:c0:78:6a:6a:97:d5:7b:17:c4:d6:6c:60:65:
cd:4e:c3:7e:88:83:bb:fa:15:4a:55:3f:a5:39:9e:5c:e7:6f:
b0:d1:53:1f:49:ae:07:21:b0:f5:e1:8b:ba:48:42:5e:86:a5:
7b:2c:39:ea:5e:c9:97:e8:ad:89:cb:c9:5e:c0:65:ff:54:7b:
47:96:b1:49:7f:46:45:72:5a:b4:d2:d8:0c:15:90:74:11:18:
b3:54:83:93:6a:8c:c4:b6:f5:8e:d7:84:f4:fb:e4:c3:14:09:
a1:73:d9:3f:7f:6c:53:1f:16:ab:a1:71:4a:a7:b3:0c:2e:9b:
ad:0b:d3:44:c3:34:90:f4:67:ca:ca:8d:9b:df:da:23:ca:7f:
96:5a:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:13 2025 by rpki-client