Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: 7X1q34kPF2BMrlII0bkilgckvuXZcFCod6S2Ytk1zBg=
Subject key identifier: 7B:0F:01:92:42:39:9B:EE:EB:80:0F:37:4B:A2:5C:6E:32:C4:38:B1
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 019A559B64EDBB1318F4A0C3A8F02A834B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 0419
Signing time: Wed 05 Nov 2025 20:00:38 +0000
Manifest this update: Wed 05 Nov 2025 20:00:38 +0000
Manifest next update: Thu 06 Nov 2025 20:00:38 +0000
Files and hashes: 1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: eVozyWfNNPAKf2b3NaQinPGVBQOup9YSAbSzKWJ0dm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:64:ed:bb:13:18:f4:a0:c3:a8:f0:2a:83:4b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Nov 5 20:00:38 2025 GMT
Not After : Nov 6 20:00:38 2025 GMT
Subject: CN=7b0f019242399beeeb800f374ba25c6e32c438b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:9d:a6:04:78:bb:51:d8:b4:61:73:be:07:
78:48:38:38:23:84:9e:08:88:24:d9:aa:63:89:94:
0e:99:04:d4:15:31:3e:bb:12:68:30:24:9c:b2:a8:
eb:00:f6:42:fe:e0:6d:6e:ce:65:39:c9:3f:8c:04:
97:40:3b:b4:9d:27:cb:04:11:60:90:39:1a:23:75:
70:f0:2c:39:20:c7:2a:1d:15:24:d4:95:26:2b:ec:
d8:c2:b6:4d:ee:e3:54:34:50:76:d7:b2:36:95:5c:
ae:ee:06:df:7d:84:7c:79:6c:bd:c0:31:84:93:80:
17:41:f5:ee:d7:36:fc:47:74:e3:02:12:51:e3:6a:
73:0f:73:2f:01:4c:10:f2:a5:5c:e5:f4:dd:65:c8:
e8:63:70:84:86:73:ef:88:58:11:6e:fe:09:92:09:
02:ab:95:85:f0:cb:7c:4c:5e:69:de:11:13:fb:c5:
01:a9:3d:38:9b:52:10:79:c5:67:e7:5e:fd:f8:12:
72:fd:69:26:ae:19:c6:9f:1b:69:19:d3:f0:8d:5c:
4d:20:54:7e:34:dd:cb:0d:51:d1:35:20:50:7a:14:
b9:a1:43:49:83:f0:79:3f:da:fd:7c:b9:09:6e:96:
45:5b:d1:fb:8e:9d:de:0b:c0:cb:4a:47:f9:a7:04:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0F:01:92:42:39:9B:EE:EB:80:0F:37:4B:A2:5C:6E:32:C4:38:B1
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3d:e6:cf:5a:34:c2:27:f2:4c:72:dc:c9:d2:fe:d9:bb:8f:
31:f8:11:be:2f:b1:2c:f7:04:8a:60:2d:e1:26:b9:07:4d:49:
8b:0a:c6:98:93:6d:7d:02:36:b4:b1:f3:84:26:33:b4:74:97:
29:04:bd:10:09:ac:a7:91:95:09:d4:1d:4f:b9:0e:dd:d0:7a:
54:d3:6d:77:48:b5:8d:c6:3a:53:1b:d8:41:8b:dd:e8:d9:39:
cc:dc:4b:ee:b4:c0:64:b5:ac:25:f1:9d:35:13:51:8d:97:0c:
2e:21:67:e3:1a:7c:06:30:ad:9c:fe:c4:c6:29:73:5e:3e:b2:
86:40:50:1a:a3:cf:e5:35:1b:05:49:a7:09:d2:98:33:9a:7e:
d2:51:a4:c1:2f:dd:01:67:bc:dc:88:4c:30:c0:75:58:10:cf:
4e:3a:9e:ab:a9:54:0f:6e:95:bb:22:4c:6c:0a:54:75:12:3e:
0e:53:c2:bc:af:bf:66:b1:92:3e:4f:ba:f2:58:a1:d4:53:10:
37:c0:71:da:7b:3a:f5:3a:37:87:51:84:96:3e:ff:60:ce:62:
59:da:89:78:f9:ed:a8:c1:25:9e:3f:0b:a4:6c:f1:ec:62:88:
dc:33:04:71:2c:8c:a5:a1:f2:01:62:f3:9b:9d:d0:94:ea:24:
3a:9d:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:28 2025 by rpki-client