Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: da9TiLVqbla1z5SCAZZTglN/hOA2F2NjErtOP2s6mXw=
Subject key identifier: 62:D5:2C:DB:B5:EB:A3:55:A6:9C:D3:01:07:15:F2:08:02:B5:28:9F
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019A4F996D02057FD826782D959D642632D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 0460
Signing time: Tue 04 Nov 2025 16:00:46 +0000
Manifest this update: Tue 04 Nov 2025 16:00:46 +0000
Manifest next update: Wed 05 Nov 2025 16:00:46 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: X/8xOG2GxWh2aymyZbvucLftVNf7YPpUtIXlEDaCSbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:6d:02:05:7f:d8:26:78:2d:95:9d:64:26:32:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Nov 4 16:00:46 2025 GMT
Not After : Nov 5 16:00:46 2025 GMT
Subject: CN=62d52cdbb5eba355a69cd3010715f20802b5289f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:3b:ef:66:31:8e:5b:17:05:c1:9d:e1:4a:
ac:aa:e6:70:c8:38:aa:e5:03:72:de:45:de:79:cb:
44:68:34:5b:7d:8a:2d:3f:16:67:0f:41:da:7c:12:
f3:8a:55:c2:dd:18:16:2b:1f:4c:68:e3:f3:c5:d2:
aa:91:ee:53:6b:63:bb:cf:4d:9b:42:60:21:67:7a:
7b:55:1a:ce:e6:26:2f:b9:28:2c:08:39:86:63:cf:
b3:60:61:62:dc:14:8b:0b:4c:d4:ac:a5:ab:41:00:
ff:37:41:a6:76:4f:bb:c1:fa:3c:86:7c:99:bb:76:
c2:82:03:6b:5d:7d:c1:00:0b:dc:d6:70:ec:9a:48:
93:09:b9:7b:79:bb:a4:82:56:d3:79:47:ea:28:7e:
f5:71:16:df:11:96:a9:dc:b3:47:54:e5:10:2f:19:
7c:20:c0:fa:d4:25:a8:90:4a:25:9e:ce:04:cb:80:
ce:18:50:cc:2c:0d:a0:2d:ae:5b:03:9a:de:30:be:
b8:57:4f:95:76:8a:cf:a3:2a:7e:f2:8c:2d:3e:d9:
37:d1:78:21:b5:c2:71:a6:5d:94:96:9c:f5:b6:34:
d4:b5:5e:24:29:ff:8a:c6:d7:4a:a8:8c:6d:21:b8:
a4:ce:3c:60:b0:91:3c:51:d8:d0:5c:bc:ab:4f:35:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:2C:DB:B5:EB:A3:55:A6:9C:D3:01:07:15:F2:08:02:B5:28:9F
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:83:b2:b8:92:b6:25:6e:6f:f2:4f:50:bd:5f:ff:df:a2:5d:
53:3d:66:a2:ed:9c:1d:9c:b5:2a:a6:62:b3:6f:85:65:6b:07:
d5:34:5f:28:96:dc:55:9c:8f:51:07:28:a0:dc:fd:23:0b:9a:
b8:07:b0:c3:0c:fa:fd:9d:0b:c2:0e:2d:af:4e:51:ac:51:a3:
11:98:36:3b:d6:41:06:df:dd:5b:ae:66:3b:b4:99:15:1b:75:
29:82:33:e5:cd:9e:3e:a6:33:52:97:99:8b:13:a3:a6:4d:2d:
65:db:3f:d2:0c:0a:83:14:a3:cf:48:80:b2:39:95:7c:e1:88:
57:12:08:12:a1:ec:eb:e1:3f:2a:e7:0d:72:4f:3e:1d:38:6c:
8d:7b:03:88:8c:e5:1d:c3:da:0b:bf:8e:07:e8:a9:fa:a7:79:
de:78:8b:d9:a6:ed:9b:c6:2b:f5:fb:25:d7:02:61:fd:27:0a:
f8:66:47:a0:8c:ff:89:d0:da:c6:60:b2:0d:63:bd:13:23:77:
72:92:53:00:7f:41:b2:2d:fb:74:65:3c:c0:b2:c9:72:14:97:
45:26:85:88:1e:92:01:82:c3:84:e3:65:56:26:69:50:9e:25:
d4:37:fa:77:67:90:ba:80:8a:f8:7d:b6:12:b6:4f:3b:9c:17:
aa:70:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:05 2025 by rpki-client