Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json)
Hash identifier: ltHIY6fomt8v1NQiEmwV6a8lgkIkykpupy2xZG3QQO0=
Subject key identifier: F4:8F:4D:91:6E:CA:39:73:DE:6C:BB:F2:2F:54:03:9F:22:C5:F2:0F
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 0198733D7802022E423F2301CFB8B85F9DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
Manifest number: 28
Signing time: Mon 04 Aug 2025 04:01:04 +0000
Manifest this update: Mon 04 Aug 2025 04:01:04 +0000
Manifest next update: Tue 05 Aug 2025 04:01:04 +0000
Files and hashes: 1: 4hNbsxby_DEwB1zM7EvZdxVg5p0.roa (hash: 6kWN3vCZM/X6uklJknv4uo3gdNCuivLuY/Qu0tCkSVQ=)
2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: 5qF8PwhAkPKO5cijjS3ZmKFs3SWIR73WcT/uhbzbj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:78:02:02:2e:42:3f:23:01:cf:b8:b8:5f:9d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Aug 4 04:01:04 2025 GMT
Not After : Aug 5 04:01:04 2025 GMT
Subject: CN=f48f4d916eca3973de6cbbf22f54039f22c5f20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:9c:76:88:3b:8a:72:1b:0c:c6:41:d7:51:
6f:6b:28:38:e2:a7:ee:c1:30:37:d1:17:89:27:1c:
44:5b:68:b3:15:c5:7d:f1:7c:14:38:34:62:32:43:
9d:e4:97:ad:7f:dc:91:2b:21:c4:6b:1e:13:17:90:
71:c3:04:68:ee:5b:0d:e8:fa:cd:c5:3e:d3:f7:f5:
64:13:15:c5:e4:34:f3:ca:05:79:1a:d9:15:43:bb:
5b:09:2c:5d:e8:1a:cf:16:a4:b6:4f:02:fe:05:6a:
75:6e:b7:e1:b7:87:0a:ba:d4:e2:7f:d0:c3:5c:18:
3f:d0:3a:4f:82:ee:d8:6e:8c:1b:11:6b:d0:18:16:
90:f3:f7:51:8c:a6:bc:56:2f:fe:ff:65:94:26:d1:
71:9f:fd:1c:cd:10:da:9f:e7:4d:3c:63:36:68:92:
42:95:b2:ad:5d:14:3d:39:85:a5:82:07:e9:09:be:
41:d8:47:b7:58:35:8b:c7:6b:b5:21:69:4f:85:99:
52:b1:c4:06:a3:75:79:e7:5c:91:f9:d4:1a:fa:8f:
0a:2a:27:0b:23:6c:d4:06:1f:a9:81:2a:aa:29:e1:
1b:79:1d:4d:d8:fb:88:10:0d:ce:5b:c2:f9:66:c9:
ea:25:6c:0c:da:a8:d3:5c:82:42:b5:34:9e:05:31:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:4D:91:6E:CA:39:73:DE:6C:BB:F2:2F:54:03:9F:22:C5:F2:0F
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:22:cd:b3:10:b5:ba:b4:66:fe:83:c5:d9:6c:6e:7a:28:1d:
89:92:e5:bd:56:59:de:1e:b3:81:31:25:56:dd:96:a4:a4:92:
f3:a7:12:dd:80:b3:43:67:08:34:2c:f0:db:cb:9f:16:96:93:
68:7c:62:68:eb:fd:75:c7:94:6a:25:66:b1:12:0e:25:70:51:
1c:fb:12:54:93:d9:fe:93:4c:2d:db:11:aa:b0:ac:90:fc:c9:
80:ca:bd:d0:39:5f:fa:b3:a3:a9:20:1d:07:c1:c3:bc:07:c2:
fc:c7:e2:f2:2d:a4:c2:90:b9:00:d6:33:f5:42:06:ce:43:e2:
34:65:84:e8:36:f5:f9:0a:29:42:a7:d7:2d:e1:44:c9:cb:dd:
10:28:9f:b3:9b:a8:b8:b7:66:93:8b:77:c7:8c:63:ed:b8:07:
af:cd:6b:02:9a:e5:89:d2:40:b2:10:00:cb:a3:fd:c8:2b:e0:
ba:c7:86:72:3b:be:bf:4d:82:f6:1c:43:5c:e4:13:61:cc:93:
0c:bc:a7:9c:ed:e8:6a:07:2c:18:61:84:77:1f:59:80:9f:e6:
08:7c:7e:2a:a3:0c:12:b8:f3:1e:20:b8:d2:c9:9b:70:71:11:
7a:08:12:fb:f3:83:0e:4a:67:a7:54:dc:08:3c:8b:c0:05:ca:
20:0e:ae:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:41 2025 by rpki-client