Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
File: ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json)
Hash identifier: RiH0HTtBZxVX4u8dj5p5RZDM2uQyiqCBjgD3T6M5sm0=
Subject key identifier: 3D:04:12:D5:7B:22:05:0C:E8:B3:BB:8C:E9:C7:3D:16:40:87:C2:B3
Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
Certificate issuer: /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Certificate serial: 019A71B88D88A9C641B39C2257F30E8303E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
Manifest number: 0C51
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: FyzxwbgLSadTJLpy9TRdd9F-gGk.roa (hash: iyPnEDozqJhAVhpqbdklx7ETcR+WTKfp9SYU0Q+jnpE=)
2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: zMaFaCFipLRNGUCCPfg7x/VPpJHYE6kY2+UsBNfx8S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8d:88:a9:c6:41:b3:9c:22:57:f3:0e:83:03:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=3d0412d57b22050ce8b3bb8ce9c73d164087c2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:6d:c1:d0:7f:6f:26:cc:32:ac:58:13:4a:
c1:50:3a:66:48:91:17:3f:3b:12:bd:b9:bf:0b:fd:
ab:d9:3b:33:e0:5d:f3:ba:2c:58:b6:bb:3e:ba:a5:
a2:99:11:9f:0e:d1:28:b9:4a:1c:d2:45:19:2c:a8:
7f:54:3c:5c:f0:82:80:57:9c:77:91:0e:66:e3:e1:
88:e6:30:0b:69:10:fc:2e:59:c4:21:25:9f:48:ab:
75:a3:c9:2a:68:03:eb:24:fa:74:2a:fc:4a:f4:0b:
ec:82:ed:8b:c1:05:4b:a7:5e:44:4f:bc:77:25:f4:
1e:87:7b:27:71:43:80:06:7c:da:9b:60:b3:3d:bc:
89:6b:17:b1:40:b7:ba:6b:b4:81:ae:ed:39:9a:cd:
14:2d:8e:5f:6e:16:89:93:77:98:f1:7d:93:59:1f:
65:ea:79:5b:98:c9:b2:0d:a4:7a:38:71:87:b4:90:
0e:2a:89:50:96:70:27:fc:ea:23:ee:2b:cc:11:da:
11:5d:91:bb:26:58:8c:08:d7:a0:1b:4c:c7:74:8a:
cb:e8:b5:dc:5c:89:a6:0d:61:db:85:a5:b8:33:bd:
21:31:45:3c:3d:8d:a6:72:9d:0d:7b:52:f2:c5:92:
be:81:e5:c4:06:af:07:a4:e2:7d:13:d8:5c:e7:67:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:04:12:D5:7B:22:05:0C:E8:B3:BB:8C:E9:C7:3D:16:40:87:C2:B3
X509v3 Authority Key Identifier:
keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d9:04:33:ae:77:42:49:04:24:c8:6e:33:6b:45:dd:80:cc:
56:b3:b9:ea:ea:72:f7:84:db:b7:40:51:10:67:d1:53:ba:75:
95:17:03:bf:b4:07:25:74:89:d3:3b:45:24:ac:74:9d:0d:2d:
9a:52:40:bb:e6:b2:14:69:88:89:d1:9a:22:cb:26:e0:bf:63:
4d:29:62:d2:e8:78:6e:70:80:f5:c7:04:02:b2:90:26:3b:77:
28:5e:77:01:22:08:ba:7d:22:c0:15:31:21:c6:3e:4c:46:4b:
34:ae:2a:05:7e:8d:8c:67:85:5a:12:d1:ea:bf:8d:c3:7b:2d:
5b:7d:31:74:5e:24:c9:40:c5:87:9b:67:f2:c4:bc:0e:cc:80:
7a:76:1c:81:17:06:68:da:0d:94:94:f1:e9:25:73:4f:9e:d5:
9d:e0:42:c1:31:7f:02:7e:02:37:f8:99:86:da:f9:80:f7:91:
ba:e1:26:37:52:0d:b3:b4:51:95:d8:d9:85:ab:dc:90:7a:1e:
c2:37:4a:1d:fb:6b:f5:13:15:75:85:42:0b:b3:3d:cf:90:49:
e0:7a:8d:38:aa:8e:ea:40:db:e6:d0:60:95:fd:b5:da:06:07:
0e:5e:d0:90:76:d8:3d:43:84:95:d1:e3:34:a3:64:ed:56:3b:
08:87:52:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuI2IqcZBs5wiV/MOgwPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDZkZmZmYWIxZDUxOGMxMzJmNmQ1NmQ4ZDRhMzFkOTA1
OWY0YmYwHhcNMjUxMTExMDcwMTUxWhcNMjUxMTEyMDcwMTUxWjAzMTEwLwYDVQQD
EygzZDA0MTJkNTdiMjIwNTBjZThiM2JiOGNlOWM3M2QxNjQwODdjMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/ZtwdB/bybMMqxYE0rBUDpmSJEX
PzsSvbm/C/2r2Tsz4F3zuixYtrs+uqWimRGfDtEouUoc0kUZLKh/VDxc8IKAV5x3
kQ5m4+GI5jALaRD8LlnEISWfSKt1o8kqaAPrJPp0KvxK9Avsgu2LwQVLp15ET7x3
JfQeh3sncUOABnzam2CzPbyJaxexQLe6a7SBru05ms0ULY5fbhaJk3eY8X2TWR9l
6nlbmMmyDaR6OHGHtJAOKolQlnAn/Ooj7ivMEdoRXZG7JliMCNegG0zHdIrL6LXc
XImmDWHbhaW4M70hMUU8PY2mcp0Ne1LyxZK+geXEBq8HpOJ9E9hc52e17wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0EEtV7IgUM6LO7jOnHPRZAh8KzMB8GA1UdIwQY
MBaAFKIG3/+rHVGMEy9tVtjUox2QWfS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEt
NjcxYTFmMGFmMDU5LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEtNjcxYTFmMGFmMDU5
LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNkEM653
QkkEJMhuM2tF3YDMVrO56upy94Tbt0BREGfRU7p1lRcDv7QHJXSJ0ztFJKx0nQ0t
mlJAu+ayFGmIidGaIssm4L9jTSli0uh4bnCA9ccEArKQJjt3KF53ASIIun0iwBUx
IcY+TEZLNK4qBX6NjGeFWhLR6r+Nw3stW30xdF4kyUDFh5tn8sS8DsyAenYcgRcG
aNoNlJTx6SVzT57VneBCwTF/An4CN/iZhtr5gPeRuuEmN1INs7RRldjZhavckHoe
wjdKHftr9RMVdYVCC7M9z5BJ4HqNOKqO6kDb5tBglf212gYHDl7QkHbYPUOEldHj
NKNk7VY7CIdSVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:35 2025 by rpki-client