
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File: mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier: rMIELOPRE4l7znhr1p//MQdNYPRwokwABqjyUdC8Fiw=
Subject key identifier: 19:82:A9:7A:38:25:EC:43:C6:84:20:8A:22:A7:08:7A:C3:2E:2A:1E
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer: /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial: 01987450AFF8BB4765F6F035211EF727878C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number: 08F4
Signing time: Mon 04 Aug 2025 09:01:41 +0000
Manifest this update: Mon 04 Aug 2025 09:01:41 +0000
Manifest next update: Tue 05 Aug 2025 09:01:41 +0000
Files and hashes: 1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: uSKvGhteo034gv630Tr3xdusS9+0cV8+2cZSfWvKRFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:af:f8:bb:47:65:f6:f0:35:21:1e:f7:27:87:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Validity
Not Before: Aug 4 09:01:41 2025 GMT
Not After : Aug 5 09:01:41 2025 GMT
Subject: CN=1982a97a3825ec43c684208a22a7087ac32e2a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:1c:49:e2:0c:d5:cc:47:5f:66:c6:69:74:
c3:64:bb:76:35:57:0f:e9:0d:fe:ea:38:e4:13:5c:
97:33:73:03:33:88:c0:08:f1:b4:dc:76:c5:73:8a:
19:1e:80:c2:ef:c0:e5:3d:a1:2f:f7:a7:f6:8b:76:
cc:48:98:74:f2:cb:38:0e:ce:ec:d2:69:6b:3f:b5:
3a:5a:62:54:a2:31:12:0b:26:16:47:b6:2a:2e:41:
1f:41:29:ef:be:e8:9b:c2:d2:e6:0d:f7:87:ce:29:
8a:94:4b:45:44:c9:ce:f7:e6:76:6e:0d:92:98:c2:
02:d9:78:5b:9c:43:d5:b3:4d:a9:12:c8:97:2e:a3:
40:45:0a:05:9d:7b:a5:23:5d:71:51:cc:23:c8:2d:
8e:a4:fa:64:88:01:44:cc:47:7f:34:85:ad:5f:20:
77:6e:46:d5:6a:a4:81:5e:f9:9e:3e:2a:58:87:82:
a6:28:9c:5e:37:a9:34:f3:32:4c:65:25:09:cd:c8:
7c:56:0d:94:ce:7f:d2:03:12:63:94:b3:fd:d6:05:
e0:56:5c:b3:29:ac:bd:8c:73:b7:d6:e9:41:c8:50:
6f:cb:16:09:23:28:af:4b:73:94:45:0e:cb:d1:f4:
c6:ff:fa:4f:61:27:c8:2d:6c:2c:27:39:1e:62:b0:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:82:A9:7A:38:25:EC:43:C6:84:20:8A:22:A7:08:7A:C3:2E:2A:1E
X509v3 Authority Key Identifier:
keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9e:bb:fd:66:82:92:ae:64:4d:53:9b:31:b6:8a:9d:4d:31:
6a:80:47:3f:8f:25:94:0c:f0:50:aa:71:51:0b:82:85:3c:8e:
83:2b:49:2a:f9:87:b1:e5:d0:45:31:5c:93:97:bc:ef:35:47:
b4:d9:f8:e7:09:f3:a1:c5:54:c6:73:76:4d:22:4a:e4:96:b9:
5f:bd:8c:79:92:89:03:fc:18:8e:20:2d:aa:a1:ea:32:fb:74:
3a:94:0d:45:19:13:aa:70:1d:8f:ab:d9:43:91:bf:7d:21:95:
46:54:c0:75:a7:5c:19:7c:20:09:9c:a2:fc:78:8d:79:88:ce:
28:21:5f:78:d7:a5:1e:43:39:fe:69:f5:97:25:f1:37:8e:48:
fa:31:e1:2f:49:81:23:1b:d3:0a:f9:18:25:2c:21:14:33:e0:
93:51:68:15:5f:24:b3:ae:aa:8b:80:53:6d:f8:bf:9d:3d:8d:
82:9a:81:ab:8c:10:f4:d4:fe:ca:6f:1a:bc:15:b3:f6:e2:e0:
5b:9f:86:99:68:78:e1:21:f5:9a:be:e5:e5:9b:53:87:25:9f:
1b:22:4e:8d:0f:c4:4c:af:bc:79:26:64:9e:0d:6f:d7:19:68:
6a:66:92:06:59:6f:f1:67:43:36:63:c2:c7:14:1a:4d:08:ed:
94:65:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:06 2025 by rpki-client