Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json)
Hash identifier: cNjlFwQ80vJfMoICN/qlsrfhUZod1O5ir41taNP2rfY=
Subject key identifier: A2:BE:A5:A5:AE:A8:BE:7E:A4:08:F5:18:35:5A:E7:FB:0C:01:B2:75
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 019A03A4BB3B2C0460A76261534296422263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
Manifest number: B7
Signing time: Mon 20 Oct 2025 22:01:58 +0000
Manifest this update: Mon 20 Oct 2025 22:01:58 +0000
Manifest next update: Tue 21 Oct 2025 22:01:58 +0000
Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: FqvrUcp/tu8591u8adGUErUlPj4asMUbuC9tVNvxkCo=)
2: d_S_LiTn-5JZ6QbYkJGNQlQwd5g.roa (hash: wiJdaTKeLOoOD2ZMe+ZN1Wuh3uVVfGMcp7ArG5upMbk=)
3: qBjHDY2sXPfYcFMAdrqZb0wk3qo.roa (hash: YJdVl/jAdNP388MpdOeTC60bm9oxrdjXPgN1Q6k8CnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:bb:3b:2c:04:60:a7:62:61:53:42:96:42:22:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Oct 20 22:01:58 2025 GMT
Not After : Oct 21 22:01:58 2025 GMT
Subject: CN=a2bea5a5aea8be7ea408f518355ae7fb0c01b275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:26:47:1e:4b:a0:b3:6d:9e:81:30:1e:0b:
ad:b9:b4:da:78:6b:7c:69:95:5e:22:3a:bc:31:94:
d9:8b:e9:ee:80:17:0d:3c:7c:56:31:95:ff:de:40:
cf:99:8c:a4:ce:40:e7:bf:a3:67:1d:38:53:ae:7b:
04:a3:42:b1:23:b5:64:a3:2e:e2:bc:7d:92:19:fd:
c3:e8:52:56:45:8a:2b:1a:d5:e4:25:eb:14:9d:b4:
fd:f6:da:32:5f:7c:2b:55:85:4e:64:00:f8:bd:8f:
4e:a3:04:c3:f7:8c:8d:f1:7e:49:bb:1d:53:5f:7a:
22:5e:b2:ed:c1:75:65:6f:52:12:23:c7:fd:d3:d3:
c5:c2:5b:41:a4:92:49:4a:83:bb:46:36:ef:bd:1c:
b8:22:a9:3e:54:2b:48:14:37:12:0e:7e:35:71:87:
1c:98:c4:74:1f:a1:6d:51:b3:97:54:36:82:cf:a0:
d4:77:40:95:05:72:59:2d:89:77:6b:44:ad:b1:7d:
67:51:af:fd:b0:65:57:d4:90:b6:c7:6d:aa:62:4f:
c7:8d:8d:bd:ba:42:e6:5b:41:0c:ec:3b:2f:a6:26:
2f:e6:93:54:a1:a2:79:bf:e9:20:a2:b0:55:f5:9e:
97:3d:64:f6:1d:02:b1:cc:1c:85:50:9b:34:37:cf:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BE:A5:A5:AE:A8:BE:7E:A4:08:F5:18:35:5A:E7:FB:0C:01:B2:75
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f6:01:46:d2:4c:25:58:77:ee:b2:f9:b8:75:c9:82:10:00:
0d:ea:2f:8e:47:0c:57:66:b1:82:0e:4d:42:9b:54:74:b3:25:
89:23:aa:a4:dc:e8:86:3a:be:7c:fe:6c:b7:4c:3d:ed:ec:ec:
5a:76:97:17:f2:73:fb:03:8b:33:47:8c:0b:88:b7:a4:54:28:
cf:a3:f5:98:02:f1:31:92:a0:dc:ab:14:a1:7a:26:f9:5d:2a:
04:4e:93:0c:ad:99:58:c3:45:11:04:22:ea:bd:52:e2:d5:7c:
8e:89:c8:f7:ef:a6:87:6d:bf:f3:24:0d:41:db:20:89:8e:24:
00:2e:36:97:29:b9:75:5c:64:ba:95:21:a6:7c:56:f1:56:a4:
c0:71:98:32:bb:58:bf:76:93:92:0e:b9:5b:4f:2e:ea:06:f2:
4c:df:2e:e9:50:d5:61:cb:f0:f1:53:ff:df:fe:c4:4c:ae:a6:
5d:52:90:0e:f1:f3:cf:c7:01:5d:8a:38:5a:64:49:89:6e:c6:
b5:c3:a7:6d:02:1f:e5:d3:0f:af:c6:b2:07:e4:23:d7:c6:b6:
f3:76:f3:7c:45:5c:29:83:98:b5:e2:37:a3:ce:43:59:d1:d8:
b5:9b:81:1e:0e:a6:24:4d:1e:33:ce:53:4b:b6:08:9b:eb:6c:
c4:b8:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:57:45 2025 by rpki-client