Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: Lchn5qO1NWqvm+Zz1RfgLBSwN2QRsRMPr28I/NnxbPM=
Subject key identifier: ED:F5:5B:04:94:2E:4A:49:32:37:DA:4B:29:C0:2E:F4:84:3D:8A:61
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 01976FD1465053991EE42D87B2022F1AF5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 02E3
Signing time: Sat 14 Jun 2025 19:01:15 +0000
Manifest this update: Sat 14 Jun 2025 19:01:15 +0000
Manifest next update: Sun 15 Jun 2025 19:01:15 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: V74luwdB9IUy9VzgYY+4uSywczzL2qQZ8u9Xp85q6d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:46:50:53:99:1e:e4:2d:87:b2:02:2f:1a:f5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Jun 14 19:01:15 2025 GMT
Not After : Jun 15 19:01:15 2025 GMT
Subject: CN=edf55b04942e4a493237da4b29c02ef4843d8a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:59:e2:5d:db:77:3c:ed:94:1f:43:c7:4a:
5f:5a:82:c3:5c:2f:5d:b7:36:e3:c2:ba:b8:fb:c5:
a9:70:13:d9:7a:22:d3:c0:a8:bb:21:cb:3b:1f:54:
b0:a8:a8:4b:2a:dc:90:4f:bd:69:c0:ec:7b:3d:ef:
49:7a:b3:2f:d1:dd:7d:70:c2:a8:22:01:43:c8:32:
ba:2f:26:65:83:86:5d:b8:34:26:58:8d:d8:d5:93:
ac:04:ab:81:84:53:c2:c4:63:23:b2:36:96:84:90:
15:fb:b6:b3:40:32:e5:05:87:39:01:cf:96:63:d1:
35:db:4a:5a:3b:8a:05:25:18:dd:2c:63:9b:ca:e8:
4e:66:29:9d:d2:21:49:56:1a:1e:85:76:85:65:da:
07:8c:d9:04:86:c2:2f:be:03:e5:51:41:67:d4:7b:
66:65:0f:f3:95:c5:0c:1f:a9:83:d6:42:83:9e:cb:
43:52:92:cc:eb:e3:aa:a5:1c:7b:b9:5b:8d:1b:3e:
18:82:19:7a:89:6f:f8:21:84:40:6b:ab:2b:57:f4:
c1:86:e1:b3:12:b9:89:ab:e5:95:6e:e5:61:8b:e9:
5e:c6:13:59:c0:ee:5a:07:9e:45:5d:2f:6d:f8:5b:
5d:1c:69:62:c5:df:18:55:c5:97:74:96:9a:eb:20:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F5:5B:04:94:2E:4A:49:32:37:DA:4B:29:C0:2E:F4:84:3D:8A:61
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1a:b6:04:05:96:16:a0:c5:cf:ba:6f:ae:93:45:38:dd:85:
4e:67:34:f7:83:89:b5:a4:d9:88:db:16:fc:f9:62:79:86:e5:
b5:08:1d:d1:ea:1f:e7:db:44:8d:72:f2:21:da:d2:7c:ae:7e:
5e:c7:e7:20:e3:3b:c0:be:91:8c:9a:1f:6e:db:b9:b3:fc:ad:
a4:15:62:69:8d:cf:52:cf:1c:c6:fb:cc:e2:42:44:65:ff:21:
77:88:59:55:e9:6f:49:87:2c:9d:c8:b5:b4:20:c7:1b:6a:97:
2f:9a:8b:05:13:d0:c3:2d:f5:80:49:44:2e:a2:cb:cd:63:53:
cc:e7:84:fe:56:e9:57:09:d2:f0:61:f4:f3:96:0a:b5:1a:85:
09:39:62:09:57:f5:28:98:5e:b1:7a:3a:0d:cd:f3:5c:9a:5e:
5a:81:19:79:92:12:69:17:b5:b0:84:17:65:55:44:0d:7c:1c:
a1:03:d4:63:de:72:d5:45:a0:20:88:a8:82:89:e2:a3:9e:d0:
20:20:65:37:33:12:ab:73:b4:61:84:47:85:87:4f:bc:ee:2d:
d6:20:ba:1b:73:1e:f8:86:1a:13:ed:d8:bc:3c:c4:68:c5:9e:
d8:17:90:f8:31:93:b5:4d:e0:ff:91:8e:09:d6:c9:18:29:df:
e5:51:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:25 2025 by rpki-client