Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: GUP5Att1yIrPjQz2dZWMKRgBSPndDPajevkxbq3gfzI=
Subject key identifier: 91:EF:18:CB:63:D0:1E:F7:B9:31:B8:C6:98:56:36:29:4A:E5:AE:E7
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 019779AFA6EA4B73DF8A29C85820953B877D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 029E
Signing time: Mon 16 Jun 2025 17:00:43 +0000
Manifest this update: Mon 16 Jun 2025 17:00:43 +0000
Manifest next update: Tue 17 Jun 2025 17:00:43 +0000
Files and hashes: 1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: 1nrcGfB1uofcwIGfXqAG90L2+uuSk0fePY/bRFHS0bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:a6:ea:4b:73:df:8a:29:c8:58:20:95:3b:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Jun 16 17:00:43 2025 GMT
Not After : Jun 17 17:00:43 2025 GMT
Subject: CN=91ef18cb63d01ef7b931b8c6985636294ae5aee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:0b:6c:84:cf:cb:e9:84:a8:c7:43:ea:8d:
67:6c:13:2e:ce:00:99:d1:44:79:fb:85:17:2f:79:
a5:e8:69:c0:ab:56:44:0b:c3:10:71:a8:d8:69:ef:
bc:c4:16:bf:33:06:ac:47:54:da:ea:01:4f:b1:64:
fd:ff:6a:1c:c3:3c:bc:f5:a7:7e:f0:fb:99:8c:5f:
37:63:80:c5:fd:f4:d0:c0:10:2d:44:50:c7:ed:e3:
bd:10:30:b5:6f:5b:3c:71:f1:87:cc:c5:72:63:ad:
ae:9c:04:71:e6:82:d8:01:b3:d8:b2:12:79:57:24:
17:23:1c:f7:76:ab:72:4a:32:53:25:68:e0:25:19:
db:cc:7b:48:7a:2d:b1:ef:4f:0e:11:3c:b6:00:ab:
23:40:ef:d0:6e:c8:93:9d:03:b6:c0:dc:05:2d:27:
45:81:8a:b5:24:07:c4:18:40:6e:70:d5:54:19:63:
2c:e1:f1:09:75:bc:15:f4:c3:a6:2d:ee:8a:39:a1:
f6:cd:5e:bb:ab:8d:46:59:05:4c:0c:a6:5b:c1:83:
0a:95:28:b8:7d:c8:f2:63:18:21:f4:0a:c9:28:9b:
6b:a5:da:80:b7:40:f1:30:7f:ff:a9:63:29:66:40:
28:c4:7f:3d:76:16:86:ab:fc:82:c3:5c:19:e7:3b:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:18:CB:63:D0:1E:F7:B9:31:B8:C6:98:56:36:29:4A:E5:AE:E7
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:27:91:4b:99:8d:fa:96:24:66:5f:2f:7c:08:14:94:80:d6:
05:fd:51:a0:8f:18:0e:a4:b7:cc:df:b2:d2:bf:d4:7c:f3:f8:
ec:31:56:53:63:bb:35:2e:5c:36:fe:2c:88:8c:3d:df:e7:e6:
36:96:15:e1:f4:ef:62:f5:54:ee:34:2a:aa:df:91:40:e0:07:
61:21:87:36:90:06:83:d0:31:b0:98:11:9e:ce:1f:7f:a5:5e:
07:69:71:aa:51:92:94:91:ec:8b:78:11:4e:dc:f1:f0:13:59:
ce:6a:45:da:37:59:cd:f8:af:4d:05:85:c1:07:d7:34:59:41:
4f:46:44:f1:f9:9a:bb:0b:62:0e:4a:ea:83:95:bf:99:b2:29:
e3:af:72:88:26:48:a6:ba:c5:ad:79:9f:26:df:8c:2e:13:46:
56:4d:15:0e:b1:50:e5:be:98:9d:58:64:c2:f3:39:88:f3:c8:
e6:47:2e:41:d2:94:d4:c3:7f:89:43:e1:a9:c4:52:26:0f:cf:
b8:5c:da:d4:75:ac:6e:f5:9c:51:87:42:8e:d1:5d:3e:23:6d:
38:58:f4:cc:a6:70:57:cb:23:06:be:f1:db:09:11:8c:37:36:
f9:ff:bf:31:09:6c:6b:58:ad:21:e5:72:b2:43:64:e5:4a:3b:
b6:d1:26:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:50:31 2025 by rpki-client