Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json)
Hash identifier: 5heBqJPFM1bI0dozzFt/g7qJ1QrHPY/fMjoegkMyf3E=
Subject key identifier: E7:A9:59:27:68:12:DB:D9:83:02:CF:5D:AD:BF:3A:07:C8:8A:05:51
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 019A564011BC60A77D98E4FA112808F8369C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
Manifest number: 0123
Signing time: Wed 05 Nov 2025 23:00:30 +0000
Manifest this update: Wed 05 Nov 2025 23:00:30 +0000
Manifest next update: Thu 06 Nov 2025 23:00:30 +0000
Files and hashes: 1: ZCpl3UyatQkZjsK8z_IxqXu_Sk0.roa (hash: O39VxnKkC8Thbx7rhWEv+PJDcL54U/wq4sE9v+Ry7uQ=)
2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: So09+p/zDH/eS8qwEajwcN7f19z8W3QhSlHoSnyt2ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:40:11:bc:60:a7:7d:98:e4:fa:11:28:08:f8:36:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Nov 5 23:00:30 2025 GMT
Not After : Nov 6 23:00:30 2025 GMT
Subject: CN=e7a959276812dbd98302cf5dadbf3a07c88a0551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:a6:da:56:3b:ef:45:be:d1:fb:45:0d:55:
a7:66:d9:8c:0d:37:e4:a0:00:42:4b:05:27:f7:1f:
f3:1b:5b:25:db:5a:92:3a:c6:31:89:eb:b6:c0:07:
02:6e:c0:51:6a:1a:3b:5a:4f:dc:88:48:01:8e:1b:
7f:d4:81:e8:3c:c6:42:88:ab:40:56:96:b6:93:dd:
91:2b:fd:30:4e:86:50:e3:1d:31:19:86:59:28:59:
9f:fb:a4:e4:d4:21:e9:55:89:38:08:8f:ff:a0:2d:
0f:16:6d:eb:26:06:e9:a2:39:4c:53:8d:73:5e:80:
0c:58:91:09:d7:ab:fd:e0:33:a5:fb:66:d7:4e:1e:
64:79:cb:7a:84:c3:01:1e:d9:7b:72:03:d2:39:26:
27:a0:49:e1:70:99:4f:47:ab:6b:9e:7a:cf:ab:f1:
35:84:b2:61:e7:92:5a:53:c7:e4:f8:ed:b4:db:7d:
ac:35:e0:48:b0:a8:81:0d:ea:0d:cf:ed:e7:fa:5d:
f4:b0:69:9b:e3:f3:8f:45:ff:9b:7d:45:c4:a7:f4:
3f:b3:aa:45:76:1e:8d:4e:22:ae:67:9d:b4:66:50:
e6:b1:30:09:92:00:e3:e8:fe:f3:b5:16:8c:61:be:
36:0b:5e:b8:cf:6a:ba:c8:6e:d9:78:7c:c7:36:d6:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A9:59:27:68:12:DB:D9:83:02:CF:5D:AD:BF:3A:07:C8:8A:05:51
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d5:a7:22:05:87:09:51:e9:f1:9d:0b:20:48:5a:57:7a:c6:
6e:59:04:06:cf:8f:8d:1e:dc:f2:a6:0f:b2:16:db:bc:06:26:
9e:1e:dd:f2:63:ce:de:c6:ad:9a:c3:0c:53:2b:da:49:ef:17:
a7:52:65:c1:b3:5a:32:eb:09:7f:77:79:1b:2b:a4:9b:55:40:
73:c0:b3:ba:22:52:ef:df:8b:0e:1e:bd:93:b8:b9:86:1c:db:
6f:fd:c4:24:78:a0:7c:2f:7f:6a:0b:72:31:c3:23:2a:83:a4:
c8:09:ae:e1:09:7c:84:9b:fd:2f:12:a6:ec:fa:fd:77:b4:4b:
c4:c6:27:db:b5:12:6d:81:30:8b:7c:25:28:94:f3:bb:f1:34:
76:75:68:53:95:ca:c1:2b:11:fd:00:d5:87:c8:0e:d2:67:84:
01:33:71:15:c5:29:89:d0:53:ae:a1:d3:5e:e7:81:14:4d:23:
61:3d:b5:85:ae:4a:e1:11:52:21:62:fc:21:ce:98:39:97:e5:
f6:9e:2d:15:cc:1c:01:c2:8c:0c:63:5c:d1:c6:93:ad:f3:20:
d9:1b:ff:32:69:87:d1:98:b0:83:14:e3:51:bc:5e:61:be:b2:
ad:f0:17:e1:a2:0b:48:4c:1c:8c:37:16:7e:dd:73:c4:54:a0:
3b:d0:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:50:18 2025 by rpki-client