
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: AtaRhenjk07ophe0MgH39/QVA9Qyi9zwPDb+H2JHx9A=
Subject key identifier: 48:26:7C:58:88:82:85:B9:A1:3F:5A:A6:A0:B7:7E:CA:BA:4C:DF:41
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 019849D2C515162261407E53DBA2917CE4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 0171
Signing time: Sun 27 Jul 2025 03:00:06 +0000
Manifest this update: Sun 27 Jul 2025 03:00:06 +0000
Manifest next update: Mon 28 Jul 2025 03:00:06 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: olMaVYFaW8a1uxhLWqHTL6/bnQjFXueA1FDmxxHqzaI=)
2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c5:15:16:22:61:40:7e:53:db:a2:91:7c:e4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Jul 27 03:00:06 2025 GMT
Not After : Jul 28 03:00:06 2025 GMT
Subject: CN=48267c58888285b9a13f5aa6a0b77ecaba4cdf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:ec:b9:e6:6d:a1:ee:4c:fe:6f:43:69:4e:
39:91:92:dc:37:4e:44:a7:40:c5:7a:0c:92:c0:80:
0a:b0:8b:86:ee:f4:c7:54:ed:f5:90:d5:1a:8b:d3:
e9:e7:73:d9:b8:66:f3:11:d3:9b:30:50:cd:19:b8:
5f:db:2b:36:85:9f:0e:78:02:6f:2f:89:56:d3:23:
89:07:9b:44:4b:37:1c:de:0e:8c:4b:82:7e:43:f8:
e3:1e:42:70:35:f1:4b:fa:06:7e:ca:49:a7:48:67:
9e:2c:a6:8b:b2:0e:b2:fa:c3:1a:bf:23:b0:ab:67:
ba:10:7a:c2:3c:3b:1f:cc:2e:7c:9a:3a:d4:e9:15:
97:d6:9f:a9:21:ca:58:95:78:10:61:a3:27:70:19:
e0:d3:09:69:c0:fb:b0:84:d5:61:7c:4f:3a:e8:cf:
8e:ac:44:5d:0e:34:e5:4c:b8:e3:3b:1c:42:cb:d4:
e3:4b:5e:c3:30:ff:5c:41:44:32:58:52:05:94:04:
d1:22:69:a0:fb:c4:59:38:5e:92:d4:c5:a9:a8:0f:
e0:87:69:c1:18:c1:7a:04:80:e0:a8:47:fd:b0:b3:
5a:72:8c:0f:8a:da:63:b8:be:37:25:86:78:e8:a9:
23:66:a2:54:ff:7f:45:95:87:af:40:cd:9a:a9:1a:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:7C:58:88:82:85:B9:A1:3F:5A:A6:A0:B7:7E:CA:BA:4C:DF:41
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ed:b3:49:65:68:fb:e3:ba:50:46:d4:ce:af:71:d4:2c:1d:
e1:ff:9c:34:c1:41:1f:5f:f1:82:de:7d:96:c9:cb:bd:7d:e2:
90:b1:94:05:2e:f6:f2:05:54:67:21:3c:8f:07:aa:22:1d:c9:
6f:39:7a:bd:f4:b7:e0:14:45:ed:0c:00:02:64:38:1e:92:6f:
d4:88:11:28:23:ad:e4:ea:29:1c:dd:fa:bb:2b:f3:69:24:68:
71:47:2d:5e:44:04:d5:cf:da:3e:a4:5d:7d:af:0b:5a:30:9b:
1c:07:95:8a:2b:cc:53:84:fa:76:88:91:c1:b9:88:93:82:8b:
af:b4:06:0b:95:da:d0:03:f9:c1:72:dc:ee:3f:fa:3c:ed:e5:
7e:c9:b4:8e:35:9c:9f:2d:ba:67:cb:39:91:8c:b8:65:ae:61:
6a:71:c6:66:e3:7a:9e:1f:b8:ed:76:2a:32:5f:c2:fc:44:7e:
8f:9c:93:22:33:8c:d1:23:f3:ac:66:f7:88:4a:17:f5:e9:cc:
70:09:46:65:ce:32:54:cb:9b:41:d2:e2:4f:b1:d7:55:b1:46:
e6:68:c5:3c:3a:7d:2d:d5:60:00:bf:a3:63:1d:46:72:35:57:
4d:2c:a6:ba:d9:48:ae:e7:27:f4:b2:8a:a7:2c:8e:a5:25:11:
70:de:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:55 2025 by rpki-client