Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: C/5QiVLage2GThPUoVrFAQzNkRDXD0zym2gIim5sfuQ=
Subject key identifier: E1:97:B4:10:67:B4:33:CB:8B:7A:9F:C8:F7:89:83:B7:DC:1D:C1:5C
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 019855DEF471DD0E13E0B8BAD5D925B5B7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 0310
Signing time: Tue 29 Jul 2025 11:08:51 +0000
Manifest this update: Tue 29 Jul 2025 11:08:51 +0000
Manifest next update: Wed 30 Jul 2025 11:08:51 +0000
Files and hashes: 1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: F0hlkGygTmOEwJbdWZmX4+JNvs0mmsUO5O1Hgq489vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 11:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:de:f4:71:dd:0e:13:e0:b8:ba:d5:d9:25:b5:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Jul 29 11:08:51 2025 GMT
Not After : Jul 30 11:08:51 2025 GMT
Subject: CN=e197b41067b433cb8b7a9fc8f78983b7dc1dc15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:13:14:5c:f0:09:c3:b3:e9:12:76:f2:3d:
76:11:e2:a9:b7:44:a2:06:38:ab:41:5e:a0:4a:40:
42:53:b2:0a:50:28:2e:4f:3a:53:38:4c:80:f1:19:
f9:b4:e5:f6:ec:61:2b:a6:d9:9f:55:b8:e5:74:f4:
86:b9:64:8a:c8:0e:76:8d:c1:d2:5c:53:66:a0:ec:
8e:19:cc:cb:8e:50:44:e0:4d:84:86:ae:65:6b:47:
d7:78:8d:66:f2:52:35:79:76:7e:ba:d7:f4:ff:a1:
66:dd:30:65:74:b2:3a:e4:72:24:58:0c:1d:bc:74:
25:e4:26:16:c4:58:8c:33:a2:ac:d8:3c:ad:06:3c:
dc:fc:66:6e:92:e6:dc:c0:6a:ba:95:84:30:5e:4b:
cb:ea:de:8f:5e:8d:1e:bb:a1:e0:d9:21:47:8f:8c:
3e:3e:0d:69:5f:0d:4f:c1:0f:37:a1:82:5b:fc:40:
27:24:cc:30:24:c9:ad:77:e7:05:13:c8:58:72:e7:
ca:4a:30:0c:51:7c:18:1c:33:f3:13:94:60:52:c7:
e9:22:97:a9:3a:1f:b6:08:96:22:04:1f:eb:12:48:
cf:fc:bb:49:c9:c2:2a:b1:e8:db:9c:d9:1c:f7:a8:
87:3c:8b:23:83:f7:de:9c:a0:c6:b5:6f:01:66:3f:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:B4:10:67:B4:33:CB:8B:7A:9F:C8:F7:89:83:B7:DC:1D:C1:5C
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e9:07:88:7a:8d:ad:04:48:1d:79:cf:23:62:d5:11:6c:31:
e2:5a:21:44:88:fd:dc:a6:a1:87:69:a2:5e:3c:82:6c:c4:5c:
8e:1d:a1:ae:3c:1f:87:6b:db:2a:37:e5:8a:c8:21:c5:a9:8d:
45:4c:26:e1:9a:30:9d:70:79:7b:47:cc:54:d9:7b:9c:4c:ad:
8f:fd:80:07:87:c0:73:d7:e9:7b:d7:b1:b5:5c:14:91:12:e5:
e1:79:74:d1:8d:34:d9:36:c8:fb:6a:da:92:7f:63:5c:5f:c1:
5f:96:d7:a2:21:70:30:13:d3:8d:fc:2a:de:39:2e:32:77:fc:
7f:29:f8:53:30:53:39:86:79:db:bb:24:c6:2a:2e:1a:06:ef:
98:14:6b:a1:6d:18:60:3e:90:c4:3d:fe:90:53:8f:9e:77:a1:
0b:03:50:b0:60:61:37:98:2c:48:59:f9:7a:bf:3c:0c:9c:37:
f5:10:e1:90:93:93:00:ab:39:5d:d5:82:d5:9b:83:ba:66:d2:
b6:ea:ab:a3:d6:e3:72:93:0a:85:bc:c1:a8:e1:25:7b:c7:e1:
ca:b8:46:4a:ff:0c:91:08:f7:61:67:9e:c6:28:ec:a8:18:b0:
86:06:a4:ad:58:cd:10:24:a1:8e:a3:9b:c1:25:93:df:ba:9e:
21:be:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:27:37 2025 by rpki-client