Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: uChJikXW4C320d3TIBPgSyLyUGAaMpidROOht54TLKg=
Subject key identifier: DA:19:D4:45:78:08:A0:6A:61:29:FF:F9:E9:FA:63:1E:F2:E6:17:9D
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 0198A083F4252148528695047004BE7C13C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 14F3
Signing time: Tue 12 Aug 2025 23:00:58 +0000
Manifest this update: Tue 12 Aug 2025 23:00:58 +0000
Manifest next update: Wed 13 Aug 2025 23:00:58 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: Xf01YvuxxijS73P77uPrii0ulhnCqdMNjO9pd2oKk3I=)
2: SEFQEUahukCO25CLynieJYFwZgg.roa (hash: X7nkM3WeHmcxHA7JwfIjXwagYEA1ZAkZsVPWtjQPu3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:f4:25:21:48:52:86:95:04:70:04:be:7c:13:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Aug 12 23:00:58 2025 GMT
Not After : Aug 13 23:00:58 2025 GMT
Subject: CN=da19d4457808a06a6129fff9e9fa631ef2e6179d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:82:e5:7c:21:c5:a9:c1:18:7e:00:14:4f:
3c:b0:23:6a:59:7a:6a:cd:04:e8:e1:70:36:37:8b:
05:aa:d0:15:aa:4a:1f:0d:09:4f:e1:f4:db:1c:63:
1a:96:2d:f7:2b:2e:40:50:8a:2a:b0:43:eb:ae:ca:
e5:e1:a8:2e:b7:f4:0c:3c:10:9a:8b:2a:a0:9d:7a:
3a:41:f3:e4:af:b9:8a:05:9b:6a:73:43:3d:69:6b:
50:e7:75:ab:96:5b:28:b6:2c:01:eb:ec:44:d5:43:
5d:cb:fe:c5:5d:c7:99:d0:c0:33:3f:80:52:59:da:
72:9a:66:97:cd:b0:c3:ee:4c:10:15:d7:52:dd:34:
ed:63:17:59:15:f4:51:b8:0f:59:8a:3a:b1:fc:07:
04:70:5f:62:84:ff:ef:88:ef:62:bb:f0:c4:a9:ae:
7b:2e:a4:9e:6b:1b:1f:6b:8a:f6:0e:47:70:24:d9:
a3:cb:46:6c:63:ca:f7:4b:82:6c:6e:bd:2d:81:33:
13:74:52:10:9d:83:90:31:0f:75:3b:fb:84:19:7b:
67:7e:37:7c:7c:70:3c:f7:ba:67:56:04:c4:ec:3d:
64:c3:6e:46:09:25:54:4b:a7:65:ba:df:ca:ee:17:
b5:9d:9d:0c:eb:7d:ef:f6:8d:ac:98:84:e2:21:39:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:D4:45:78:08:A0:6A:61:29:FF:F9:E9:FA:63:1E:F2:E6:17:9D
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e4:a7:94:e9:8c:7b:85:03:71:b5:24:83:08:8b:7d:67:88:
6d:09:89:b4:37:e4:dd:db:c5:83:e9:ce:02:b1:6e:d2:2d:fc:
f8:02:4c:53:ed:d5:01:11:6d:7a:3d:54:b9:28:bc:b6:c8:7c:
94:26:fc:ad:5c:7f:2d:f3:98:56:9d:4f:94:c7:5d:c5:7c:7a:
17:0c:6e:68:18:20:07:7b:85:09:90:a8:6a:75:0c:3d:95:2d:
22:e5:d5:a0:1c:50:20:9e:b4:01:79:ec:3f:ff:d7:54:08:aa:
a9:af:5b:0f:3c:9c:f7:95:2f:71:5f:32:fd:ca:50:7d:fe:8c:
86:27:14:e1:07:07:b3:10:6c:d3:96:e7:55:55:dd:41:56:e0:
86:e4:59:88:d9:71:6f:d2:8a:f1:8f:f7:bb:3b:e4:5b:37:84:
95:91:24:eb:b5:09:24:fa:a3:41:d7:7f:9e:65:4d:70:3b:72:
40:33:ef:1f:20:da:40:eb:aa:64:b2:b9:c2:bc:75:29:a9:8f:
6d:0f:c3:4a:61:b6:99:f2:0a:f5:a4:44:e3:a0:71:ca:b1:9c:
a7:eb:a5:db:d0:af:a7:ca:58:60:00:dd:24:4e:44:a3:8a:7f:
f3:bc:4b:9e:99:b9:a0:e3:63:51:95:6a:e2:81:07:73:59:75:
d9:3f:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:31:59 2025 by rpki-client