Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: kv6MGh+nw29q1LlbXFGRBTROy2ynZZ1JFJRVB6x4lHk=
Subject key identifier: AE:19:A7:01:E1:92:1B:2C:CC:2B:7B:4A:2F:F7:5B:0F:74:04:95:5A
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019874873C7059C97FD56B280F514B3DA57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 036A
Signing time: Mon 04 Aug 2025 10:01:16 +0000
Manifest this update: Mon 04 Aug 2025 10:01:16 +0000
Manifest next update: Tue 05 Aug 2025 10:01:16 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: kcwZK7KyumecmdX0uLgUsORzwpp8FHEuJmL1uUdIz9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:3c:70:59:c9:7f:d5:6b:28:0f:51:4b:3d:a5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Aug 4 10:01:16 2025 GMT
Not After : Aug 5 10:01:16 2025 GMT
Subject: CN=ae19a701e1921b2ccc2b7b4a2ff75b0f7404955a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:09:db:60:0e:b1:6d:85:70:da:90:77:a2:
c8:9c:2d:4e:ae:c1:80:60:21:9b:13:ab:fe:c8:c8:
27:57:ae:04:07:2a:78:38:74:a0:3d:80:49:8a:1d:
89:f6:d2:5a:60:ed:48:7b:5a:93:16:52:11:23:6d:
d5:d6:4b:cd:f1:f2:71:ec:19:35:d3:bc:93:dd:eb:
f3:a9:26:91:62:3f:78:43:1f:9e:53:5c:ac:28:ca:
64:9a:82:fa:ac:a3:80:e8:c1:06:fd:5e:5b:4a:2f:
16:b6:52:c7:89:47:0a:19:50:53:80:22:32:34:05:
30:46:ce:78:37:e4:fa:0a:a2:8c:d9:b6:ea:ab:1c:
ab:3a:6c:d8:30:18:c9:0c:65:b5:29:02:52:22:50:
ca:d5:b4:e5:2c:6b:00:cc:f5:56:a5:39:e7:db:35:
c2:6e:fa:07:68:ce:6e:68:1d:af:e3:39:b3:32:53:
fb:c3:17:36:32:2d:2c:20:b3:be:9e:4c:09:a3:69:
fe:84:e0:69:d4:0c:38:66:68:f1:b8:8f:b2:96:58:
e4:e1:fa:c5:50:75:e2:c0:80:1b:fb:f7:3f:89:02:
d0:6a:41:2a:67:9c:0b:23:96:00:47:ce:21:c9:24:
6b:d1:83:0c:ab:9f:d6:2d:16:76:61:60:ed:7f:1c:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:A7:01:E1:92:1B:2C:CC:2B:7B:4A:2F:F7:5B:0F:74:04:95:5A
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:73:8c:75:3f:92:b8:e5:59:a4:4e:4f:47:70:4d:62:b6:9b:
6d:cb:1b:70:14:2b:d3:42:62:97:af:6b:46:a9:4b:03:c4:59:
ba:02:56:f4:d9:ea:a1:91:a5:e5:a6:b6:71:f5:a5:23:42:aa:
6f:2a:ea:47:0f:13:2e:92:00:90:ce:b9:1e:da:03:db:72:4d:
e1:17:cf:63:82:cf:9c:9f:67:f9:85:1f:dc:7c:69:a4:bf:5d:
96:e4:6d:47:b3:b6:25:3a:4e:a2:b9:4a:77:a0:30:25:a7:9a:
cb:10:ad:e5:d3:ed:7d:f5:d5:67:4a:28:73:dd:0c:ab:f1:7c:
65:12:c7:cf:7a:d0:44:b2:e8:76:b1:70:e1:8f:e7:73:00:8f:
4f:61:89:39:6d:f8:a4:f8:a0:73:1b:7e:c2:ad:af:f6:58:ec:
15:7b:7c:bf:88:14:65:78:8b:de:ea:a2:47:86:86:78:62:88:
6d:11:9c:81:21:81:0b:bd:fb:be:a5:44:76:b9:77:fe:62:28:
9b:f0:0b:70:bf:84:b6:d9:68:7a:89:e3:52:1e:28:c0:49:06:
13:58:ac:82:a0:9b:83:35:b7:ae:26:1d:d9:bc:dc:1f:a4:65:
e6:fa:13:30:98:0e:5f:96:b2:51:06:7c:af:92:22:7f:27:8a:
de:98:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:29 2025 by rpki-client