
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: QBwj3EfmyaHRr77nWkrd6UpwIJ3sY/ZViUG21insV0s=
Subject key identifier: E6:5C:D1:0C:4F:CC:F6:1F:A6:D6:B1:3C:DB:9F:80:50:DB:E6:BC:54
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 01989592101834630D31A8C4C216A2833E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 0331
Signing time: Sun 10 Aug 2025 20:00:34 +0000
Manifest this update: Sun 10 Aug 2025 20:00:34 +0000
Manifest next update: Mon 11 Aug 2025 20:00:34 +0000
Files and hashes: 1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: 3d52Wn+Nadm+pKwlDFNutRouk2g6BHDykbHipSHCHQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:10:18:34:63:0d:31:a8:c4:c2:16:a2:83:3e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Aug 10 20:00:34 2025 GMT
Not After : Aug 11 20:00:34 2025 GMT
Subject: CN=e65cd10c4fccf61fa6d6b13cdb9f8050dbe6bc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:87:30:d4:47:47:f9:86:36:3f:7f:b0:85:
2b:04:8d:7e:ba:8f:74:70:c9:1f:7b:77:1a:b1:a9:
d9:af:c4:3f:6c:13:00:3d:ec:84:5c:58:25:7c:2b:
a5:c7:9d:21:e9:67:d3:3a:a7:1b:03:eb:38:0d:db:
33:20:48:ba:78:d1:c2:b2:97:8c:7d:b2:46:97:7c:
d5:27:24:82:a6:2d:3f:20:00:58:ab:06:40:55:92:
eb:26:99:3c:5f:43:5d:72:0c:e1:9d:e1:c1:af:0a:
f8:75:8c:07:ee:b6:db:40:df:c6:a0:cd:53:d3:ba:
91:08:c4:bc:0a:07:9e:64:77:53:cf:f3:0d:b7:cc:
07:8d:61:12:b7:59:2d:63:3c:a8:3a:c0:c4:85:cf:
38:90:2c:de:0b:ae:5d:0e:c5:19:1a:ec:77:93:a7:
a8:42:05:dc:ae:8c:81:38:b9:f3:92:c1:01:0a:d0:
46:4a:8c:9b:0b:2c:ca:8f:21:ee:32:4a:d3:26:16:
04:a3:48:49:8e:e5:d9:82:fb:65:b5:a4:ab:fe:70:
ec:c5:93:8e:ab:4b:85:46:28:f1:cb:f6:13:77:fb:
33:46:da:f0:2c:a0:9c:1d:22:8b:6f:af:e5:69:98:
bc:18:27:6b:2d:cd:d6:6c:b2:34:3f:3f:6b:4a:17:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5C:D1:0C:4F:CC:F6:1F:A6:D6:B1:3C:DB:9F:80:50:DB:E6:BC:54
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:40:98:88:72:73:5f:48:d6:23:c4:c0:46:15:f6:50:29:a1:
97:8c:da:53:02:79:90:64:16:7b:c2:2a:d1:87:66:e5:07:0f:
fa:c7:ea:15:b2:50:93:35:f7:6b:c8:a3:e0:2b:b2:ff:35:2f:
a4:e4:0b:a8:cc:50:f4:ce:3b:4f:c7:f2:60:8b:3d:25:25:96:
39:1c:69:81:6c:99:6f:ac:d3:d0:49:41:c9:8e:84:2d:4d:7e:
4f:17:3b:83:e7:7d:75:c4:fe:13:10:4f:62:05:22:5e:f8:93:
c1:39:4e:b2:bc:38:93:1a:3d:be:4c:e0:b6:ed:63:cf:ea:2a:
33:c3:c1:a6:bb:31:58:07:91:c4:bc:db:92:75:e4:af:6a:6d:
30:b6:5a:7f:5b:77:0f:fb:50:0f:46:ef:9f:34:ff:92:d7:b1:
fc:96:fb:40:96:8d:30:3c:70:12:3b:43:35:e7:c6:f2:1d:9c:
f7:02:b9:b5:40:df:b6:d5:1c:7d:3b:59:96:af:16:eb:fe:57:
73:90:98:1f:9b:90:1b:df:1b:20:ab:a3:e5:39:2e:17:b0:09:
c6:8c:24:57:f9:dd:52:16:8d:7c:65:68:c3:2f:43:31:7d:8d:
5c:4c:a2:98:71:77:d1:13:ca:1b:95:66:f4:3f:86:11:db:24:
d9:96:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:16 2025 by rpki-client