Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: IFzf3AubyIecPaUoC0hU+yEsZed7UCZMctPYSXPvHjw=
Subject key identifier: 4E:23:0A:FA:92:34:9B:1B:00:C8:8B:2C:4C:62:26:81:57:0B:FE:7C
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 019A4EF41D96EC7C905A8C678AB9230BD552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 1370
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: AZA6VnAwnfA10reyxs97Dqmt3Q/2OgKTx3PxcPMD2gA=)
2: 9PUwFWX6MI5zmQ2Oq6gL-_qhrj0.roa (hash: 3b0NbUCvSpLrWF4vh/o6Yjp7ddJczpbBr1onafxnYgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1d:96:ec:7c:90:5a:8c:67:8a:b9:23:0b:d5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=4e230afa92349b1b00c88b2c4c622681570bfe7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:b6:c2:b3:5c:6f:2d:ee:db:bd:d8:ac:e7:
ae:fd:38:12:49:d1:76:e4:42:57:c7:54:9e:b8:0f:
f2:f7:8f:3d:79:11:b6:08:62:93:1c:c4:ef:12:4b:
1b:46:91:57:2c:da:c6:41:eb:77:7d:00:cd:a6:4b:
a9:9b:cd:da:4c:77:71:e0:6e:ed:e2:50:2b:45:b2:
9c:22:a1:e1:df:89:c4:d4:26:fd:34:93:ff:b2:78:
f3:1a:c3:c8:52:02:55:13:7a:61:41:35:07:b3:4c:
7a:a8:dd:7d:1b:9a:43:6f:75:a2:45:fc:66:e8:15:
a5:26:f0:f8:e5:31:fb:28:06:c6:44:0b:e2:89:d9:
c4:c6:ac:6e:b8:62:19:a3:26:44:de:19:88:49:ae:
b4:a0:56:f9:ff:a3:d4:5b:d8:c3:cf:a3:b8:4b:0c:
2a:b9:a9:7a:c4:e7:95:3a:a0:bb:88:8e:c4:57:1e:
21:c5:87:14:fe:3a:22:ac:e1:86:ec:74:ad:ba:82:
00:76:37:38:4d:69:b2:3c:0b:a4:67:0f:f2:22:da:
7b:57:bf:0f:6c:7c:11:98:86:63:65:33:69:b7:3f:
2d:e1:8e:6e:3b:f2:55:5e:61:39:3b:09:b3:a7:0f:
c1:e2:2c:06:df:38:64:c1:04:36:bc:08:bd:95:67:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:23:0A:FA:92:34:9B:1B:00:C8:8B:2C:4C:62:26:81:57:0B:FE:7C
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0e:a1:25:d9:75:cc:1c:bb:d8:aa:70:23:c4:c5:a7:de:ba:
25:b8:cd:92:e0:a0:08:30:ca:c9:0f:5c:07:72:26:4d:4e:b3:
ba:76:e0:a1:33:dd:a7:42:ad:94:9a:26:e0:81:04:2b:59:ef:
87:b6:44:22:3f:1b:aa:ee:20:93:73:83:56:ae:26:cf:47:bb:
a8:76:34:80:81:22:9a:1b:3d:45:5b:96:37:cb:72:13:a7:b9:
b7:be:f4:80:19:94:2d:bc:6d:96:02:d7:76:40:53:51:39:1a:
57:1a:92:2c:4a:41:47:6e:e3:2a:02:1d:a4:b0:6e:62:bb:70:
e1:d1:e5:f3:53:a7:ab:99:55:07:56:12:8a:44:90:a5:27:ba:
a8:d5:28:2b:5e:97:b9:d2:12:59:de:dd:0b:0e:44:c0:bb:3e:
86:0c:da:64:35:59:a2:35:d3:72:93:8c:9d:f7:92:54:02:c7:
a5:9f:8b:0a:5a:af:19:c4:ca:8e:a6:6b:fd:58:c6:4a:0e:d4:
e1:82:ba:c6:12:3e:b3:43:95:d0:35:57:f4:9d:e5:c5:ae:c1:
f7:f1:3b:d1:d0:00:10:87:a9:4c:aa:10:6f:ee:5d:23:f7:89:
eb:dc:c4:27:5e:8f:9d:90:94:55:74:f9:d6:f2:be:7a:86:e9:
c1:b7:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:26 2025 by rpki-client