Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File: vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier: MUz1DQTBcmahacuU4QsXZMTDftomk83xbAcW3g0+O7A=
Subject key identifier: 00:96:5A:DE:E8:40:D7:57:40:B3:F5:82:60:66:92:AF:9E:05:72:5E
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer: /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial: 019922551D256798E0866C8D6827033F1811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number: 106B
Signing time: Sun 07 Sep 2025 04:00:27 +0000
Manifest this update: Sun 07 Sep 2025 04:00:27 +0000
Manifest next update: Mon 08 Sep 2025 04:00:27 +0000
Files and hashes: 1: EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa (hash: dN8Yi0kIJplgFqGhn/wQEirsJIam2YZVzXUASivGFy0=)
2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: BoUGueDi4jFdnDbDR/RwrLfBhE/bfnYuIywtm/w6hVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:1d:25:67:98:e0:86:6c:8d:68:27:03:3f:18:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Validity
Not Before: Sep 7 04:00:27 2025 GMT
Not After : Sep 8 04:00:27 2025 GMT
Subject: CN=00965adee840d75740b3f582606692af9e05725e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:9b:aa:7f:d0:c3:ca:98:1c:9c:60:dd:d1:
8e:18:b5:5d:e5:b3:96:c1:3a:4f:99:25:6f:d9:a6:
95:5c:df:84:4a:a0:08:4e:70:7c:8f:97:e0:34:ef:
3b:8b:70:a9:fd:0d:52:dd:8b:53:6a:38:c0:2d:1b:
e1:02:13:09:cf:3d:7a:25:53:3f:ec:0d:c8:8b:d6:
6f:36:dd:30:bc:c7:de:ea:5c:ac:d7:e8:13:cd:a1:
aa:b3:9c:97:0b:fe:bd:c1:9f:b8:a7:0b:8d:c3:ce:
84:a5:a3:9d:c2:86:0c:e9:a6:24:ae:cc:9f:11:07:
21:bb:96:86:ba:a6:50:37:a3:36:c8:9c:11:eb:2b:
79:ce:13:f1:c2:27:3a:d9:85:56:e2:52:83:80:a9:
88:70:6b:e3:1e:aa:a0:a8:8d:17:fa:91:c3:de:82:
5d:f2:3f:c6:9d:93:a5:f5:a4:ae:2f:ec:e7:e1:bd:
0c:3d:81:18:4e:a2:8b:7e:43:b1:d5:f7:51:fa:de:
23:82:9b:17:57:91:96:27:29:95:f4:81:d9:00:c5:
c8:2c:cc:60:59:85:63:54:86:92:d4:c2:35:de:d8:
e7:f0:97:ef:b4:7c:91:05:e6:a3:63:d8:c0:9e:c2:
31:ce:f0:f9:ca:f7:8a:c0:c8:89:7d:d8:c9:c6:ac:
ba:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:96:5A:DE:E8:40:D7:57:40:B3:F5:82:60:66:92:AF:9E:05:72:5E
X509v3 Authority Key Identifier:
keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:52:e5:7a:10:d7:b9:c6:7c:9a:b7:aa:fe:47:3b:ff:70:fe:
5c:e4:14:80:34:e5:a5:22:33:2b:2c:26:0a:fb:37:51:64:30:
a2:2e:45:f8:fe:19:d8:32:18:87:0f:ed:81:98:c7:1d:20:39:
c0:c7:e5:7c:f5:28:d5:f5:07:0a:98:df:ec:d6:ba:d5:51:f7:
9a:a4:1d:ec:3b:e3:24:db:30:d1:0d:7e:a0:c3:2a:07:3f:87:
90:28:3d:58:e1:09:89:72:9b:23:44:03:88:e3:83:c1:8c:d7:
fb:20:3a:fa:ee:9a:3a:67:bc:b2:f4:36:c9:0f:91:5e:b8:88:
fa:d6:f6:b9:ff:04:6f:c3:53:70:89:73:52:0b:01:68:c6:e4:
2b:b7:d6:a7:80:e1:e5:a7:29:14:bf:ce:e3:3d:25:03:7f:af:
98:98:37:2d:a0:f4:9c:eb:9f:03:a3:f1:31:32:42:97:f9:0e:
9c:f7:82:b2:9c:a7:04:87:b2:13:e7:85:c5:52:1f:ee:82:db:
e7:70:8a:0a:e4:45:33:b9:70:69:bb:9b:66:a5:71:d2:eb:ea:
15:fc:1f:6a:3d:e9:74:d0:d4:57:9f:b1:ac:92:81:10:7d:fb:
79:5e:5e:54:ee:43:11:1d:4b:39:d1:cb:3a:7c:42:35:c5:2f:
b7:b9:1b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:13 2025 by rpki-client