Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
File: OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft (raw, json)
Hash identifier: q0F3ZVIh5PPDwCKEMpodqNrKR7XjPrNVNMa0jkYAgxE=
Subject key identifier: 62:30:1D:22:E4:61:46:34:1E:D2:DB:A4:BE:6B:D1:DF:82:8E:85:51
Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858
Certificate serial: 0198808AEA194E46150124667B3D88630BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 18:00:44 +0000
Manifest this update: Wed 06 Aug 2025 18:00:44 +0000
Manifest next update: Thu 07 Aug 2025 18:00:44 +0000
Files and hashes: 1: I01Lo7qwhvaLI2U54ucZ10pkExs.roa (hash: mTrGRc4f1Skt/0lHfZ3XZbVEvrQ9mBUuWZXJpIXORz4=)
2: OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl (hash: aX9aakq0CkbR9Lv7YcbL5wE9N/y9Ob9qIAyF20KHyAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:ea:19:4e:46:15:01:24:66:7b:3d:88:63:0b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858
Validity
Not Before: Aug 6 18:00:44 2025 GMT
Not After : Aug 7 18:00:44 2025 GMT
Subject: CN=62301d22e46146341ed2dba4be6bd1df828e8551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:84:3b:aa:9e:e5:62:82:b6:68:4c:3f:cb:
94:60:c2:f9:dc:20:26:2b:5b:8f:86:85:82:42:88:
40:e2:6d:72:8c:08:d9:b7:1a:40:d1:d0:6c:8b:4a:
57:e5:83:9e:ff:ef:12:54:42:62:dd:b3:b1:99:47:
a6:27:f2:00:88:51:96:70:b4:47:2f:7e:00:a0:fa:
d3:3d:30:dc:84:bf:a4:b9:fb:b2:6f:f2:a9:d1:e9:
e0:b6:f4:6b:61:1d:e0:99:ea:d4:1d:cf:df:0c:11:
75:11:26:44:9b:6b:4e:72:65:18:ac:77:1a:60:8c:
71:2e:62:5c:35:d5:98:72:5e:ce:e0:d9:22:f9:f8:
a8:d7:9a:cd:8c:46:c9:71:3e:4d:b6:a8:57:19:ee:
a7:ed:27:a0:0e:28:8c:a2:34:cd:8d:45:fe:3e:a2:
2b:ea:a8:cd:5d:b5:be:30:42:4e:ab:8d:ea:60:62:
fe:0f:5a:1b:66:e2:fa:1f:30:ea:72:a2:6d:56:13:
c2:83:40:d0:66:38:96:da:41:4e:b2:7e:7c:f1:cd:
c4:14:e3:b8:8f:38:d2:96:0e:0e:a5:bc:ed:00:d4:
82:ec:e3:bf:aa:64:e4:d5:fa:13:b9:91:cf:b8:22:
6c:06:54:a4:7b:25:ff:e8:95:62:f2:b2:6f:e3:70:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:30:1D:22:E4:61:46:34:1E:D2:DB:A4:BE:6B:D1:DF:82:8E:85:51
X509v3 Authority Key Identifier:
keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5f:a3:61:02:4f:e7:d3:c9:0b:16:1e:fa:4f:91:fb:2d:50:
7c:d9:d2:56:92:11:d6:43:a5:a9:e1:16:11:86:97:d7:43:66:
fd:69:2e:2a:e8:be:3a:42:10:5b:c9:27:d9:73:b5:fe:93:ee:
b1:b9:62:78:bf:a8:c5:bf:51:e1:88:17:90:90:00:25:bd:95:
40:a5:8a:37:aa:90:88:16:0e:cb:2f:a9:09:52:b2:9f:06:0f:
0b:ed:4e:fb:4c:1e:5f:3f:9f:6d:b3:25:b7:3d:c5:bd:76:ef:
e9:80:b6:81:49:3c:73:bc:5c:be:4a:e8:08:cc:56:04:8c:4e:
de:c9:b0:77:0b:70:ef:ab:52:59:ae:1e:25:cc:b1:63:05:3b:
20:f6:36:b0:78:d7:97:7c:ac:d4:3f:1a:43:c2:1a:5a:79:d4:
d8:1b:1d:9d:37:60:2d:05:63:3b:b6:8e:53:1f:fe:dd:9e:97:
7b:ce:b4:0f:d5:b8:f6:d0:63:ec:97:6c:61:e5:c8:89:1d:ad:
d3:bf:5a:a3:57:b6:65:13:d2:c6:75:08:50:c9:ed:8f:9b:eb:
ce:b4:94:ff:90:c6:10:42:ca:e8:3d:44:a0:2a:73:99:1f:71:
c5:3d:39:b0:00:6e:10:c6:1a:b8:ae:91:62:c3:8f:8e:35:ef:
ad:5f:c1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:21 2025 by rpki-client