Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json)
Hash identifier: 0OmPvG3MqNhQSsRxhqXmUZyetq3QLYcRkbFqG+H/cB4=
Subject key identifier: 13:73:FC:8B:B5:3B:C5:DD:B2:A6:AC:66:33:E9:BC:6E:52:14:30:70
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 0198C724DB2E836353E4CA095FD725D30974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
Manifest number: 13
Signing time: Wed 20 Aug 2025 11:02:18 +0000
Manifest this update: Wed 20 Aug 2025 11:02:18 +0000
Manifest next update: Thu 21 Aug 2025 11:02:18 +0000
Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: 60j+noc+BJsnqIe3KmWjgWtT53ls+KTVuqyfcZKbMJg=)
2: d_S_LiTn-5JZ6QbYkJGNQlQwd5g.roa (hash: wiJdaTKeLOoOD2ZMe+ZN1Wuh3uVVfGMcp7ArG5upMbk=)
3: qBjHDY2sXPfYcFMAdrqZb0wk3qo.roa (hash: YJdVl/jAdNP388MpdOeTC60bm9oxrdjXPgN1Q6k8CnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 11:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:24:db:2e:83:63:53:e4:ca:09:5f:d7:25:d3:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Aug 20 11:02:18 2025 GMT
Not After : Aug 21 11:02:18 2025 GMT
Subject: CN=1373fc8bb53bc5ddb2a6ac6633e9bc6e52143070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:23:48:24:eb:df:0e:3a:da:8f:e8:c7:e4:28:
41:fb:74:5a:e4:23:b8:d7:74:93:af:63:a1:31:28:
93:5c:99:be:1c:5c:36:1d:79:c5:f3:71:ba:5d:cd:
ae:0d:8b:6f:62:f1:1e:a7:1b:16:b9:ff:62:ce:c0:
1a:1f:fe:a5:b7:d6:3b:45:af:74:c2:ee:b2:b8:6c:
2d:0c:ce:af:4b:d9:01:08:c1:77:06:67:28:8b:c3:
cf:99:93:1b:e5:b9:b7:52:79:c1:bd:3b:b3:39:76:
98:3f:5c:7a:57:82:4d:1d:4a:bc:ae:d2:13:27:ef:
fb:58:03:4e:a0:8c:92:65:3b:69:8b:f3:9b:5f:81:
92:bb:32:fb:02:d0:e1:66:9b:0f:a9:db:e0:44:74:
52:f6:d9:44:d3:3d:d3:23:c1:17:85:2c:2b:08:5a:
7b:b2:0b:39:dd:4c:58:5f:69:66:5c:68:88:dc:3a:
e3:de:36:bc:f7:f6:67:bf:a4:16:96:1c:11:f8:56:
6f:48:61:ca:e9:c8:48:ca:5e:47:7c:4d:04:ea:e5:
1d:62:ae:03:a0:49:50:34:e9:cc:10:a1:20:46:cf:
7e:9b:97:37:06:b9:8d:e6:bc:c3:75:6b:22:1a:41:
d3:76:a1:5d:00:81:0e:fb:0b:6f:5e:6e:2a:14:64:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:73:FC:8B:B5:3B:C5:DD:B2:A6:AC:66:33:E9:BC:6E:52:14:30:70
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:60:b4:d9:06:5b:63:29:22:47:54:db:c6:50:51:c2:3e:16:
02:6d:ef:a1:10:51:7e:93:2d:50:d1:bf:7f:4f:00:d5:4b:e8:
0d:c4:cd:b1:35:db:9e:f9:15:84:3d:25:e8:23:a0:17:af:7b:
ba:f0:fe:ff:19:ee:0a:e7:8f:f6:f9:d9:f0:81:d4:b2:e4:b5:
44:fb:3a:87:e4:5f:70:84:68:97:5a:01:9e:b0:8a:69:32:84:
ec:0b:3b:29:37:30:a9:dc:96:47:7c:7e:8a:2f:98:ec:2e:f0:
4d:44:44:4d:63:18:49:0b:03:be:96:b8:44:de:76:c8:42:d0:
35:5a:e4:2c:8a:7d:c9:53:d4:0c:a7:be:03:23:f2:4f:d5:91:
1e:be:cd:a5:d6:fc:be:c6:66:0b:d2:18:de:5a:f1:ba:f4:09:
0e:ba:8b:8a:49:f7:c6:c9:43:dc:29:74:90:ac:c5:3f:fd:9b:
de:0b:6f:3c:de:ce:1b:67:91:bd:bf:6d:76:33:29:14:a7:28:
f3:1a:70:18:fc:23:bd:7d:6d:46:11:7f:7d:e7:60:6e:7d:e3:
25:b0:64:c4:cb:68:2d:2c:6f:82:7b:62:eb:45:45:fe:ef:61:
0e:db:52:6b:68:f6:3e:61:c2:21:bc:05:e6:a9:77:2a:09:ac:
a7:45:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 17:22:32 2025 by rpki-client