
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier: C2LHOZyI94JZa7vVPOL/ttFpV+D9Qrt6AmecYwelozQ=
Subject key identifier: 24:E9:0D:89:6D:90:05:FC:A3:98:F7:7F:DE:08:48:78:D7:69:E3:A4
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 0198A1CD4F948281EF4651220C7D03A9B500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number: 1399
Signing time: Wed 13 Aug 2025 05:00:43 +0000
Manifest this update: Wed 13 Aug 2025 05:00:43 +0000
Manifest next update: Thu 14 Aug 2025 05:00:43 +0000
Files and hashes: 1: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (hash: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=)
2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: s6lM/QkBQw0uw16GNSQD3qa2z8enbO7uNjaqDlWV+xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:cd:4f:94:82:81:ef:46:51:22:0c:7d:03:a9:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Aug 13 05:00:43 2025 GMT
Not After : Aug 14 05:00:43 2025 GMT
Subject: CN=24e90d896d9005fca398f77fde084878d769e3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:56:15:3d:6a:09:87:d9:a9:44:c7:2f:88:
c5:93:01:e1:3f:0a:b8:9c:31:99:c3:26:2c:e9:dd:
98:b7:ed:3e:51:b4:1c:d9:2f:0e:9d:4b:78:0b:e3:
ed:99:63:74:5d:fd:3e:bf:87:8a:0e:30:84:c3:21:
58:c7:2d:41:9d:ae:74:1d:2c:8f:f1:27:2e:aa:e0:
fe:83:eb:e6:1f:28:01:f0:9e:c2:0a:99:7b:82:9a:
cb:ed:94:23:5e:a4:a2:62:f3:91:de:ea:6a:37:aa:
c1:f5:91:fe:7c:32:be:d4:c2:13:be:3e:2f:e1:4e:
21:07:2d:c1:18:d1:cb:6b:e6:91:7d:e5:0d:69:cc:
07:21:19:2a:00:32:8b:73:31:b9:f8:ce:69:3c:c0:
eb:f3:96:05:02:0b:df:02:cf:d5:79:6a:40:4f:7b:
c8:a4:ab:05:c8:06:b1:28:da:8c:22:cc:5f:bf:55:
87:7b:88:e9:bd:16:fb:e5:06:52:6b:22:61:c1:e2:
3b:34:16:6d:3c:7b:dd:a8:c8:ea:aa:6e:75:47:bf:
c7:49:27:8f:1a:b7:c5:4d:43:9d:d9:e3:89:b5:7c:
60:7a:bd:6c:37:c7:2e:95:db:e7:5b:7d:3e:ce:f7:
b9:9d:80:c6:6a:ed:08:7f:95:f1:62:5a:86:f1:5a:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E9:0D:89:6D:90:05:FC:A3:98:F7:7F:DE:08:48:78:D7:69:E3:A4
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6e:40:63:8a:82:cf:b7:ad:9b:01:9b:a7:e8:ce:a6:89:37:
85:c7:99:dd:d7:cb:85:05:34:97:80:75:f7:a0:c4:68:cb:c1:
27:97:6f:ad:54:e3:d3:2e:a8:08:a6:81:f9:2b:ee:89:ba:1a:
b6:8d:23:76:f3:88:20:87:9f:a2:ed:54:5a:d6:df:f7:8b:72:
28:31:d6:14:22:5c:e3:86:7f:0a:3e:68:c0:32:0a:d7:d4:47:
af:60:37:d8:c3:eb:e2:c9:80:14:ce:2e:31:75:b7:d9:a5:bb:
67:16:03:1c:74:1b:91:87:46:c5:eb:c0:b4:98:b1:3d:c3:b9:
67:84:1a:f1:42:0a:b4:78:07:7d:a8:1a:a9:ce:2e:e7:30:21:
d0:fe:0f:22:43:5c:5a:38:d4:ba:e8:cb:b8:7e:ee:b4:03:d7:
92:6e:e2:b8:f0:e7:a2:ab:12:5b:2a:93:e7:64:38:86:ec:92:
bd:66:80:15:a7:b3:fd:8f:e6:22:29:fd:c6:9e:9c:97:72:17:
47:14:58:dc:29:59:b4:34:a6:e7:6b:7b:b6:59:7b:9e:0c:39:
d7:9f:2a:c0:6c:b3:d4:23:d5:e7:c9:aa:66:e9:50:a0:19:20:
ce:88:3c:a6:c2:9b:04:12:45:e9:eb:7c:ec:61:a5:21:c2:97:
6f:87:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:46:13 2025 by rpki-client