Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
File: oGqOPGol1GOfOUWtFszF6Yo6kqY.mft (raw, json)
Hash identifier: KblcmOfmAWRWWFoZ/0zBOWknRla4IWRjU/t69YPcgwQ=
Subject key identifier: CE:19:FF:99:ED:4D:2D:AC:A0:B7:52:A6:D4:B7:BF:9C:7B:79:E7:3F
Authority key identifier: A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6
Certificate issuer: /CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6
Certificate serial: 01984777BD11A4F9CC6240CDD6E1DD7946E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 16:01:26 +0000
Manifest this update: Sat 26 Jul 2025 16:01:26 +0000
Manifest next update: Sun 27 Jul 2025 16:01:26 +0000
Files and hashes: 1: oGqOPGol1GOfOUWtFszF6Yo6kqY.crl (hash: BuMWNcA9X4pvQVefEWBChfAoxihEz0MNtSlsaY4jxLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:bd:11:a4:f9:cc:62:40:cd:d6:e1:dd:79:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6
Validity
Not Before: Jul 26 16:01:26 2025 GMT
Not After : Jul 27 16:01:26 2025 GMT
Subject: CN=ce19ff99ed4d2daca0b752a6d4b7bf9c7b79e73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:a0:bc:88:93:a6:a8:1f:51:93:6f:0b:19:
44:36:04:0a:95:74:32:43:7f:8e:93:33:af:d6:ec:
86:2f:49:a9:d9:92:bb:8c:e2:42:1c:53:bc:5e:f3:
2e:85:fb:4a:44:a4:bb:0b:9c:0f:10:82:20:1a:59:
e4:5b:a6:61:6f:65:d2:d5:e2:6d:14:38:b3:e2:ed:
19:43:b8:52:d8:f4:0e:9b:95:4c:bd:10:2c:82:16:
70:b9:e2:32:6b:a9:45:74:4e:7c:f2:85:76:50:75:
26:8b:09:21:06:d5:4d:0e:2a:4a:73:21:73:23:00:
be:6e:e2:8d:3d:c7:a9:5d:a6:25:cb:75:ce:7d:6a:
49:60:e5:aa:80:14:8d:6b:24:b5:64:32:d3:46:99:
21:6b:35:3f:84:3a:2e:5c:ea:a3:89:5c:97:bb:ea:
ab:f4:5b:7c:97:77:d3:56:a6:dc:71:e8:b1:62:5f:
fb:9c:27:59:02:b4:bd:2e:69:87:39:94:56:a9:d6:
98:0b:76:6e:f1:f7:34:c1:ff:e2:01:13:1d:63:f3:
39:a4:ce:78:e3:df:e6:6b:37:0c:db:ea:d4:f0:c0:
9f:af:89:a7:dd:56:ab:a0:9b:72:b3:58:98:66:1d:
07:64:e3:63:44:e1:ec:e7:30:9a:76:bc:34:dd:2c:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:19:FF:99:ED:4D:2D:AC:A0:B7:52:A6:D4:B7:BF:9C:7B:79:E7:3F
X509v3 Authority Key Identifier:
keyid:A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2a:6a:f6:94:4f:bf:de:35:95:5f:c0:64:14:80:7b:b0:11:
64:36:a4:73:4a:5f:f5:79:4a:b4:35:b9:21:39:9e:80:a0:55:
a4:16:db:5c:31:89:b5:6b:59:c6:a1:24:f9:52:8b:fe:3d:46:
ab:b2:13:db:05:2c:42:e9:a6:86:c9:a0:fb:f9:eb:46:43:e3:
0a:31:8a:5e:87:11:b1:15:61:96:79:c8:79:44:63:e3:9e:08:
f0:99:80:f5:41:0a:4c:17:08:b4:08:63:d6:61:c1:c0:a8:b2:
b3:57:be:53:95:f7:3a:07:ed:7f:cf:d7:e1:fb:2d:65:d1:c6:
0b:ca:d5:15:db:f4:9b:09:59:03:7b:88:79:26:f3:4f:63:59:
d5:d7:0e:31:fc:e5:f0:8b:7b:bd:13:3c:4b:2a:a9:ab:64:f8:
98:78:02:d9:9b:38:b5:75:f5:41:aa:25:6a:69:cf:bb:a7:74:
91:86:4b:c6:df:04:b5:16:b3:35:53:ce:13:eb:59:41:28:8b:
11:77:54:db:8b:55:21:f1:b9:67:98:df:3c:b9:89:e3:b6:a8:
1e:75:3a:ea:99:49:89:1d:af:12:d6:3b:1d:bf:84:37:cc:6d:
ae:ba:ed:78:27:6b:4f:3a:9d:57:6b:7f:67:25:57:56:e6:b0:
9e:eb:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:34:35 2025 by rpki-client