Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: y8yQi2HvolqEmHL5OM/uLEvCdzvECdJTWELmIbMcQ/Y=
Subject key identifier: EE:A7:E5:28:F0:16:57:1C:C1:14:92:BA:F0:AA:19:74:BD:C4:61:6C
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 0197B6A0E2C1209E8A5942E6593B79AEE453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 1027
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: 13rU8nhg31f282Ufq4fY9epK_mk.roa (hash: 71Un032C55jpwedQZGjeiCXgaYcH9RkzCt+gCgI2Wak=)
2: DDq525mddfr-xwBo8-T-YcAlqlM.roa (hash: vbBu7r+JS7z7+nPsGEJDbq+t4cp8fYea0z6mgr+ClXE=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: yTQ0zA+5X3/Mo1SAvajfek4k+w2aj/sceKCWVSyAsT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e2:c1:20:9e:8a:59:42:e6:59:3b:79:ae:e4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=eea7e528f016571cc11492baf0aa1974bdc4616c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:4a:2f:22:69:30:6c:d2:b3:ce:68:a1:85:
eb:9d:3a:47:72:eb:55:9e:39:c9:e0:02:d7:3f:1a:
a0:59:2e:58:19:c0:5a:d9:85:df:6f:b3:18:f4:f9:
51:b4:33:6f:b7:06:00:89:89:4b:b6:14:43:a6:da:
a5:4d:5a:d3:8f:14:40:e7:d3:48:6e:2b:e7:97:eb:
5c:4a:f0:3e:15:fe:e3:a2:56:89:37:83:a0:44:36:
1f:ec:8d:8a:16:59:1e:8c:f1:8c:ae:b5:41:7f:90:
80:41:31:00:8c:47:aa:eb:79:fc:19:a8:5a:16:1d:
f1:16:87:47:63:da:f2:92:47:a2:6d:66:01:f1:07:
ea:bf:37:9f:a4:b7:ef:c1:74:d2:a9:c7:e7:fd:07:
f9:3d:51:af:68:6a:14:56:61:1e:b2:60:32:db:88:
35:83:06:30:df:68:9c:53:a8:0a:36:f6:96:65:b0:
04:a7:f9:22:bd:5f:d5:60:13:80:b0:cf:34:87:53:
16:e3:5e:b7:4f:f0:97:7f:ec:ec:0c:ae:ad:e6:84:
64:48:45:0b:8c:26:d2:da:61:34:56:c7:f1:ef:70:
c8:93:06:10:e0:ba:bf:a1:85:f2:8b:05:e4:e0:3e:
4b:b9:ed:7f:37:8a:55:3e:58:7a:d2:cd:b4:f7:3c:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:E5:28:F0:16:57:1C:C1:14:92:BA:F0:AA:19:74:BD:C4:61:6C
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a0:c8:b4:31:dd:09:9b:86:18:c7:10:9e:96:c1:b7:d1:05:
7d:c2:c1:84:79:43:17:2a:56:7d:99:11:06:3a:20:47:cb:06:
a1:07:27:bc:6c:14:e7:05:85:e4:9b:95:5b:9e:98:1e:12:3f:
29:a5:ee:6c:1c:c8:40:1e:c5:e2:d6:a4:89:c9:47:fb:46:90:
6d:ff:79:5a:28:29:da:9a:a8:7a:9f:18:81:74:67:ab:93:05:
e4:cd:10:af:e0:cd:9e:1d:92:3d:8c:76:89:1d:bd:a9:bb:b6:
45:7d:d1:00:8c:87:71:34:05:1a:5b:85:82:62:0b:44:f3:dc:
40:51:77:1b:b7:08:c0:1d:d2:c2:53:0b:c8:5f:65:6a:77:20:
a4:9f:ba:e5:3b:88:71:d9:47:e5:3b:9a:4b:bf:a2:08:43:70:
67:26:f1:97:46:37:1c:7f:27:43:4c:97:5f:86:dd:cd:97:09:
06:89:28:b9:f1:94:15:13:ed:ee:f4:a8:10:81:85:c8:51:98:
cc:e1:df:56:db:0b:1c:f7:f0:13:a1:0b:b8:d7:46:37:28:73:
37:a5:c1:df:95:87:38:6f:ed:11:9b:2d:25:37:90:de:0a:46:
ee:fb:94:53:ee:82:df:af:6f:c2:1b:58:2a:e5:46:59:bf:96:
b0:37:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:55 2025 by rpki-client