Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: Mra+/3wHxy2fJgVerg9sh5UJhXK2rospaxooXFMKr9A=
Subject key identifier: B6:FC:63:EA:1E:5C:D5:B5:19:72:58:F2:E6:70:69:A3:56:78:E2:FD
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 0198879FB90459C9E61DE55F85BB6A232226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 0191
Signing time: Fri 08 Aug 2025 03:00:48 +0000
Manifest this update: Fri 08 Aug 2025 03:00:48 +0000
Manifest next update: Sat 09 Aug 2025 03:00:48 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: X4dZFUoO5KPGs1THSDYDaOv16cfbiSYryTuEmg2Aai4=)
2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:b9:04:59:c9:e6:1d:e5:5f:85:bb:6a:23:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Aug 8 03:00:48 2025 GMT
Not After : Aug 9 03:00:48 2025 GMT
Subject: CN=b6fc63ea1e5cd5b5197258f2e67069a35678e2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:b9:1a:cd:29:dd:a8:15:4a:a4:5e:56:46:
42:91:77:9b:16:a0:10:c7:67:50:fa:17:a0:8d:82:
01:1c:61:4b:b9:b3:21:bd:53:70:14:6b:79:4e:d0:
6c:1c:f3:a3:5b:95:93:32:5b:b9:52:f3:a8:b1:3b:
42:ce:04:bc:e1:90:43:61:7a:c0:09:02:dc:48:a1:
ef:0f:9f:41:7d:cc:1d:cb:87:3b:34:b7:a5:9e:ce:
d2:62:68:2a:5d:fa:26:63:da:ca:47:5e:5d:e4:83:
19:d8:7f:61:1f:21:32:a6:ff:2c:e0:fe:05:89:c1:
bd:49:a2:ab:bb:1b:91:95:14:4c:88:e2:cb:ba:cc:
72:79:7d:13:13:36:11:3d:d6:c3:52:3b:86:ca:9c:
b5:44:6b:63:f5:81:1d:ab:a1:70:c0:0f:ae:17:5c:
e3:d4:98:38:97:bb:b4:9f:15:3d:05:5c:fe:e5:ab:
4d:ba:c6:0a:bc:2f:03:92:69:7a:1f:bd:93:b9:b0:
0b:b7:7b:a5:48:95:86:c1:6e:44:c0:ee:61:8d:32:
70:be:5f:a5:2c:0e:8b:39:80:2a:9c:fd:93:66:cf:
1b:29:27:79:b3:9b:f8:e0:43:08:48:36:48:a4:42:
bf:fb:d9:3b:0c:c6:f2:d0:ca:c7:f8:ee:f1:1e:1e:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FC:63:EA:1E:5C:D5:B5:19:72:58:F2:E6:70:69:A3:56:78:E2:FD
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d7:6d:4e:c4:8a:11:10:64:0a:6e:ec:38:44:f3:5b:89:35:
f8:e8:60:02:61:ba:e0:94:c2:76:3d:ea:32:75:d7:2c:18:55:
91:f6:c0:23:a3:80:01:d5:2a:e8:04:a8:85:21:08:df:ac:d4:
48:35:91:1d:16:ca:1b:2f:08:f5:33:7e:1a:88:8b:f0:d3:bc:
7f:ff:b0:a4:e6:9a:3c:13:70:3a:7d:5a:ce:45:b1:21:6a:6c:
c1:cd:26:f7:e8:c7:9e:a5:b6:d2:d4:1c:bf:81:2f:a4:a6:7e:
1e:e2:3b:35:df:78:72:b3:7f:fe:d6:ab:3a:5b:4c:74:a5:5b:
db:54:c5:04:b7:51:5e:6a:d2:13:e9:88:ef:a7:57:50:d0:34:
f6:2e:ef:91:a1:e9:f4:7f:a7:ce:60:51:c2:c2:e2:c6:25:45:
8a:fe:b2:68:c3:ae:bb:be:06:3d:66:c5:fb:55:fa:8b:34:3b:
5d:b6:94:23:bb:e6:2c:62:e3:8a:fe:d6:b8:33:69:86:9c:a3:
0e:32:f1:bb:55:fb:79:d7:2e:84:1a:13:dc:6d:20:8d:e8:8f:
96:49:8a:c0:22:68:71:c8:3a:f0:96:90:d8:13:32:62:4c:92:
34:29:dc:0a:15:d3:c2:2d:4f:cb:dc:d6:a7:58:0a:4a:8e:2b:
7f:f3:c6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:17 2025 by rpki-client