Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json)
Hash identifier: Rhu8OG7nakIpCbdjqbyiuYRz6LinrW5GDIbZlrmm5RM=
Subject key identifier: 1C:80:04:13:F1:62:9F:CE:4C:D5:5E:84:B9:A0:DE:0B:A7:D4:EB:A9
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 019846D1F101EDB8AECAC7C171CC1E20AEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
Manifest number: 11
Signing time: Sat 26 Jul 2025 13:00:20 +0000
Manifest this update: Sat 26 Jul 2025 13:00:20 +0000
Manifest next update: Sun 27 Jul 2025 13:00:20 +0000
Files and hashes: 1: 4hNbsxby_DEwB1zM7EvZdxVg5p0.roa (hash: 6kWN3vCZM/X6uklJknv4uo3gdNCuivLuY/Qu0tCkSVQ=)
2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: fDtf1oh4xw7wufgBg7PvpqyFrIaJgSGcdLburcrgFVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:f1:01:ed:b8:ae:ca:c7:c1:71:cc:1e:20:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Jul 26 13:00:20 2025 GMT
Not After : Jul 27 13:00:20 2025 GMT
Subject: CN=1c800413f1629fce4cd55e84b9a0de0ba7d4eba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:96:58:1a:01:75:44:b2:b2:b1:3c:7c:27:
1b:d1:30:ec:5d:e9:fc:ad:6c:26:0a:fc:39:3b:26:
ee:4d:8e:f1:87:c1:44:8a:54:70:b7:22:ac:63:9b:
a8:2e:ce:f7:f1:66:d8:88:f5:68:c7:71:52:32:57:
89:63:50:30:e3:cc:08:fc:2b:8d:47:e8:4a:cf:c3:
ce:3a:19:02:cb:e9:ae:a7:93:e6:bd:40:a7:7b:6a:
21:47:a2:0f:5b:21:58:c3:79:a0:ac:eb:61:7a:8b:
21:3a:c9:8c:d8:76:39:77:c4:b0:9f:7f:50:e3:02:
c6:6c:db:72:0a:38:c0:88:33:93:8b:f9:da:9b:4a:
ac:db:9e:9d:b0:fe:89:2e:10:21:95:a7:3d:ec:f1:
31:39:49:79:5d:43:75:be:3d:46:dd:0d:7b:93:27:
9e:43:9d:48:8a:b8:1b:fe:7d:a2:99:75:0d:fd:69:
e6:ee:bb:5e:09:71:fe:e5:e1:c6:f1:4b:a7:f8:2c:
47:b3:d9:15:01:20:3f:01:ae:8f:76:b4:15:da:8f:
bc:75:74:c4:b1:22:92:9c:d6:c6:6d:e1:44:11:5a:
4b:c5:f8:04:3d:17:43:50:c3:df:6e:2d:ac:83:06:
d3:23:88:03:ee:29:a7:28:b2:37:16:3d:f7:4b:ab:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:04:13:F1:62:9F:CE:4C:D5:5E:84:B9:A0:DE:0B:A7:D4:EB:A9
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:76:2e:2a:d1:c2:82:56:c3:5a:94:04:b4:40:6e:03:84:41:
88:78:40:60:6e:60:0c:bc:23:fb:9d:f7:39:e0:b1:ae:83:41:
d5:3d:9a:6d:cc:f9:2d:65:10:b5:16:40:ed:dd:6f:5b:c7:a3:
c7:64:05:e6:18:ad:64:a4:4a:52:29:7f:03:df:5f:5a:e4:03:
fd:d2:c2:e3:b0:17:78:06:17:16:ac:c5:80:29:01:8c:95:f1:
19:17:c3:1f:82:f4:67:d8:0e:a4:aa:aa:30:be:c5:15:55:1d:
0b:ac:4e:d9:41:d1:ad:67:75:5a:12:8c:db:35:59:fb:0c:8e:
eb:d6:d7:9b:6f:75:32:78:84:4e:77:b3:0c:64:4b:ad:5e:ce:
93:17:f1:b4:1f:18:d6:a0:57:55:14:4e:b8:5d:dd:d0:8b:6d:
e0:c1:3d:11:d2:dd:36:ea:d8:e7:e9:c0:82:63:70:6e:73:79:
08:67:66:5d:cd:1f:cc:b2:2b:e3:83:6a:26:2d:e6:5b:b2:fb:
bb:f1:69:56:21:b6:a0:f7:8d:e6:e3:d7:c0:34:3e:3e:6c:d5:
e0:f4:b7:50:07:40:a7:e3:a3:04:2e:25:ac:44:da:cb:15:8e:
ba:b5:44:97:f5:b7:6f:64:5f:2b:45:cc:66:fc:da:f8:d7:fa:
6c:6f:68:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:30:43 2025 by rpki-client