Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: Ke0shx51+KEL66DvjEXGO/mvgo3Zym27b5L00g4TKjo=
Subject key identifier: BA:24:86:8D:54:4C:F1:8F:BA:CF:E1:7D:25:DC:FE:54:52:B4:62:B3
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 0198274719D6E5D631B6F0FF4BFA24283A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 0342
Signing time: Sun 20 Jul 2025 10:00:27 +0000
Manifest this update: Sun 20 Jul 2025 10:00:27 +0000
Manifest next update: Mon 21 Jul 2025 10:00:27 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: rr2fxzCsj096nlfsBwdUyD1SqzCzORfCqUR1QzJfy6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:47:19:d6:e5:d6:31:b6:f0:ff:4b:fa:24:28:3a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Jul 20 10:00:27 2025 GMT
Not After : Jul 21 10:00:27 2025 GMT
Subject: CN=ba24868d544cf18fbacfe17d25dcfe5452b462b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:e8:5e:81:c7:a7:77:e0:9b:37:66:cc:a1:
38:d9:a5:92:ca:1c:dd:c7:f2:67:99:31:0b:07:8e:
2f:9f:a4:6e:9e:d8:a6:60:f0:e1:03:5f:b7:b0:80:
80:d4:53:d2:6e:d4:24:0b:6d:77:96:32:aa:1c:31:
23:1f:5f:be:e0:94:1e:4c:1a:47:4b:6b:ec:41:d2:
0f:69:9f:03:db:29:b1:c1:52:36:f4:10:95:15:0b:
1e:d4:eb:b2:ea:14:2f:fe:fd:37:5c:4f:15:85:72:
a1:02:29:df:ee:4e:91:4e:f2:bf:01:80:5a:b9:13:
de:a6:8a:72:0a:f9:db:44:e0:79:93:3c:26:7a:01:
bf:b8:1e:78:ed:0f:e5:0e:e5:29:d2:89:38:4c:e4:
f2:60:30:05:be:ea:a3:72:85:78:0f:d1:c1:ff:72:
fe:70:4c:82:01:65:d4:8c:93:c5:5a:6c:c0:f4:50:
ed:5a:1a:f0:c8:d8:89:7e:df:15:c0:a5:62:23:2a:
d6:ab:db:7b:c1:1b:28:fc:24:b1:ad:17:ae:c4:f5:
63:7f:22:2f:64:2c:84:7e:25:ea:ec:1e:f0:ad:0b:
6e:e0:71:ae:a2:af:6b:14:1d:61:e5:69:23:91:8d:
31:0d:f5:2b:43:74:49:f6:ae:8e:97:76:fd:d4:03:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:24:86:8D:54:4C:F1:8F:BA:CF:E1:7D:25:DC:FE:54:52:B4:62:B3
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3a:9b:78:70:e0:d8:3d:53:a0:b3:cf:df:30:b2:dd:ed:fd:
4a:e3:02:c9:06:13:88:2d:3f:11:69:94:4e:d8:95:9d:a7:39:
3e:36:e1:9b:26:75:86:f4:ec:18:a1:eb:82:03:fd:0d:9a:e2:
f7:cb:bc:c8:2f:99:e1:78:67:a4:d1:b6:25:7c:7a:de:af:f7:
c9:ec:12:ce:c1:72:8d:d9:31:90:57:92:15:81:7e:39:3d:cd:
24:2a:9b:ea:bd:8b:1d:c4:4f:64:30:da:e4:ce:4f:ef:18:21:
17:b1:e4:55:7a:5f:f7:d0:ae:50:db:20:51:2e:81:3a:0c:79:
a8:2d:81:7d:56:b1:e0:0f:ba:f4:4c:2b:ec:e3:e2:05:33:63:
0f:de:bf:ef:a0:48:46:bf:f3:d5:4f:64:8b:45:ed:13:39:52:
0f:6b:83:fa:10:20:5a:c2:1f:6e:3b:cf:3c:a1:0c:f5:63:ce:
af:5c:22:58:b8:dc:7a:72:67:2a:4c:a2:3b:81:1b:d7:ae:f6:
a8:38:af:54:8c:42:64:f5:60:36:c4:7e:65:d8:fa:c6:e7:3b:
08:57:53:54:96:42:91:7a:7d:7a:9b:1f:0a:e0:bb:75:92:1a:
31:3d:be:2f:4a:29:db:b2:72:a7:43:37:43:28:fb:88:08:d1:
a1:d2:75:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnRxnW5dYxtvD/S/okKDpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTE4ZmFkYWVmNzIzMmQzMTYxODg2YWNiZWE4YWIzMjNj
ZjM1NzAwHhcNMjUwNzIwMTAwMDI3WhcNMjUwNzIxMTAwMDI3WjAzMTEwLwYDVQQD
EyhiYTI0ODY4ZDU0NGNmMThmYmFjZmUxN2QyNWRjZmU1NDUyYjQ2MmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwLoXoHHp3fgmzdmzKE42aWSyhzd
x/JnmTELB44vn6RuntimYPDhA1+3sICA1FPSbtQkC213ljKqHDEjH1++4JQeTBpH
S2vsQdIPaZ8D2ymxwVI29BCVFQse1Ouy6hQv/v03XE8VhXKhAinf7k6RTvK/AYBa
uRPepopyCvnbROB5kzwmegG/uB547Q/lDuUp0ok4TOTyYDAFvuqjcoV4D9HB/3L+
cEyCAWXUjJPFWmzA9FDtWhrwyNiJft8VwKViIyrWq9t7wRso/CSxrReuxPVjfyIv
ZCyEfiXq7B7wrQtu4HGuoq9rFB1h5WkjkY0xDfUrQ3RJ9q6Ol3b91AN3SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLokho1UTPGPus/hfSXc/lRStGKzMB8GA1UdIwQY
MBaAFJjhj62u9yMtMWGIasvqirMjzzVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2Njct
NzIxODg1NTY0NmUzLzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2NjctNzIxODg1NTY0NmUz
LzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDqbeHDg
2D1ToLPP3zCy3e39SuMCyQYTiC0/EWmUTtiVnac5PjbhmyZ1hvTsGKHrggP9DZri
98u8yC+Z4XhnpNG2JXx63q/3yewSzsFyjdkxkFeSFYF+OT3NJCqb6r2LHcRPZDDa
5M5P7xghF7HkVXpf99CuUNsgUS6BOgx5qC2BfVax4A+69Ewr7OPiBTNjD96/76BI
Rr/z1U9ki0XtEzlSD2uD+hAgWsIfbjvPPKEM9WPOr1wiWLjcenJnKkyiO4Eb1672
qDivVIxCZPVgNsR+Zdj6xuc7CFdTVJZCkXp9epsfCuC7dZIaMT2+L0op27Jyp0M3
Qyj7iAjRodJ1hA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:21 2025 by rpki-client