
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File: mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier: RAWH4uD+hlJF9Erv5DqngEQOI8d4xNBi+x2mQmIq0jw=
Subject key identifier: 8F:7F:01:3F:68:14:43:E2:D8:43:D1:B2:79:DF:B7:8A:45:15:C5:24
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer: /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial: 019A4F623111DC4B5FE434FA73518878E556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number: 09EA
Signing time: Tue 04 Nov 2025 15:00:26 +0000
Manifest this update: Tue 04 Nov 2025 15:00:26 +0000
Manifest next update: Wed 05 Nov 2025 15:00:26 +0000
Files and hashes: 1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: nqBGgmtQD2uS7MVDMGxYcaNh258O/9fXjsGnBD8q4GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:31:11:dc:4b:5f:e4:34:fa:73:51:88:78:e5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Validity
Not Before: Nov 4 15:00:26 2025 GMT
Not After : Nov 5 15:00:26 2025 GMT
Subject: CN=8f7f013f681443e2d843d1b279dfb78a4515c524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:b6:a9:2e:f7:e1:7b:2b:c2:92:1b:dd:7c:
57:d0:4b:7f:cd:38:7e:a6:47:1e:cb:9a:d8:a7:da:
ba:3d:56:26:60:27:f1:73:68:0d:d3:9d:10:13:95:
9b:b6:8e:e3:70:00:13:48:77:08:50:14:d4:f7:25:
c4:6c:bb:a9:10:20:2a:df:67:fd:d5:4b:cf:38:63:
7c:3d:0a:59:e0:8d:10:c8:8c:7b:57:08:a4:13:34:
8f:09:80:1d:1c:d0:ad:98:9e:7f:c3:37:a9:d4:e3:
32:b8:28:d2:af:95:3a:4b:15:b0:90:09:e1:d2:3e:
f6:7a:ba:59:18:ff:84:ca:28:ce:a7:2f:7a:bb:0d:
a8:3a:16:f4:c7:9f:4d:22:8f:e1:e9:62:4a:6d:bc:
b4:26:a0:00:f7:28:a1:0c:62:d7:dd:1b:16:36:7c:
e8:63:0e:b6:da:59:4f:fc:b9:1f:af:e8:63:73:e7:
92:ab:54:71:53:c5:40:83:ab:dd:03:32:d9:f1:21:
8d:ba:79:e6:d7:ba:87:04:1a:7f:e1:2a:41:97:5d:
15:0a:c8:88:89:2b:5d:71:5d:70:50:0b:67:a9:14:
09:08:90:f5:2c:1c:7d:fc:e7:55:46:f9:24:a2:ae:
1c:e0:1c:46:3d:76:86:70:e3:2a:4c:74:aa:e6:14:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7F:01:3F:68:14:43:E2:D8:43:D1:B2:79:DF:B7:8A:45:15:C5:24
X509v3 Authority Key Identifier:
keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f5:a9:28:5d:16:29:06:bf:c0:bf:d7:56:4f:6b:f0:5b:76:
a8:8f:de:0d:dd:ed:58:7c:2b:64:ad:6c:e9:aa:ef:a9:1a:1b:
8a:c6:a8:d0:88:e9:46:66:e7:6f:f4:b0:5d:04:ee:5d:0a:80:
ac:53:04:52:b2:25:9e:a5:56:c2:1f:91:27:10:d0:5a:d6:2a:
bf:40:fb:f1:80:50:4e:18:36:7c:04:39:15:d1:94:2a:c8:36:
5e:94:c7:b5:74:2c:f1:c5:36:8e:4a:a0:db:86:ec:3c:4d:77:
3b:86:5d:73:24:57:df:30:ce:c0:16:88:8b:38:52:71:42:8a:
c4:e6:00:9f:75:6f:7a:73:e8:ae:a3:1b:f2:06:4c:a3:f4:42:
56:e3:cf:bf:1f:1a:dc:b2:80:3e:b7:c6:36:ec:ad:47:e0:25:
a9:dd:47:65:b9:72:64:11:7f:6f:02:5f:a4:a6:44:9e:f4:fa:
5e:f6:dd:d5:01:e5:49:3a:27:27:3b:e1:89:e9:35:fc:cf:d1:
43:b0:b3:3a:c5:05:e1:f9:41:ea:3b:58:c3:a0:cd:75:29:7e:
21:78:a2:5b:b1:ea:5f:f2:9d:df:85:ee:37:e4:6e:99:e0:ae:
98:57:9e:91:2f:60:03:77:bc:21:3b:7a:7d:ec:29:dd:51:7e:
d8:b4:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:26 2025 by rpki-client