Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: vzZkhru6nehRrigxHziR62K18dTeq4tE28khKeHXmDM=
Subject key identifier: 1D:C5:8D:F6:8B:B1:D5:AE:D1:10:4C:86:A1:69:DB:E0:14:52:11:76
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 019921E80E7E4A6067CFCA523EFC9B5B1E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 1536
Signing time: Sun 07 Sep 2025 02:01:20 +0000
Manifest this update: Sun 07 Sep 2025 02:01:20 +0000
Manifest next update: Mon 08 Sep 2025 02:01:20 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: D3Dh6Xn1DCahgRSiJERH0d8jvFikOwEp6MVMfz/XesQ=)
2: SEFQEUahukCO25CLynieJYFwZgg.roa (hash: X7nkM3WeHmcxHA7JwfIjXwagYEA1ZAkZsVPWtjQPu3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e8:0e:7e:4a:60:67:cf:ca:52:3e:fc:9b:5b:1e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Sep 7 02:01:20 2025 GMT
Not After : Sep 8 02:01:20 2025 GMT
Subject: CN=1dc58df68bb1d5aed1104c86a169dbe014521176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:c8:02:26:6b:cc:ef:9c:15:fe:87:22:6b:
ef:5d:38:62:3a:bb:bd:e1:df:4b:f9:d8:97:2d:c6:
ef:dc:30:cb:97:3b:31:05:c1:2c:eb:03:10:2b:3a:
f9:99:61:99:29:f8:39:61:3f:aa:bc:e2:f7:3c:2b:
e4:52:23:24:6d:21:d5:ad:c4:9d:a2:59:d4:4a:6e:
e4:00:01:9f:52:2b:84:04:93:55:e3:67:36:69:5e:
d7:da:a3:d2:47:20:fb:28:3e:cc:78:e1:b8:98:9b:
62:17:a1:89:d1:ff:6e:ea:33:ce:61:e9:03:2f:28:
09:2f:1b:15:49:58:26:98:61:55:15:16:30:9a:e9:
7a:b4:52:c8:c2:b3:01:79:7e:71:23:f7:d7:4f:f7:
55:ea:9f:68:a0:12:55:dc:ba:d9:96:63:53:40:8c:
83:64:61:3f:d3:a4:e1:58:d5:98:91:fc:18:b8:9f:
04:dd:e1:98:ff:ba:51:27:d8:74:c1:27:c7:92:bd:
3f:3e:4b:4e:34:c3:3f:4b:64:4d:86:de:df:cf:13:
9a:e1:06:71:3e:38:01:e9:bd:9c:b6:ca:91:c2:66:
5b:0e:01:35:0f:4f:2d:41:15:72:84:67:01:31:bf:
bd:de:0c:9c:28:7a:20:b6:c1:57:18:af:61:73:1d:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C5:8D:F6:8B:B1:D5:AE:D1:10:4C:86:A1:69:DB:E0:14:52:11:76
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7a:fd:e7:52:81:a7:e0:39:40:14:8f:8d:35:87:07:2a:6c:
aa:ef:36:d9:eb:f2:2a:d6:40:6b:0b:b5:d7:38:1e:da:d3:3d:
db:c0:13:77:bf:35:fb:c1:05:61:10:ba:43:fd:4f:d7:9e:96:
b5:6a:a8:d7:29:5b:f0:55:e7:5e:6e:b7:98:ed:74:0f:4f:69:
1d:3a:e4:27:e0:7e:0f:e9:77:d8:3b:1c:55:0f:6d:73:f6:81:
b4:38:5b:1a:66:4f:f4:ce:d3:82:bb:aa:37:a0:0e:71:21:44:
16:0d:5d:89:d1:e3:40:e2:84:9b:bc:4c:af:e7:5d:c0:03:1a:
fa:f9:a1:b0:2c:ea:dc:78:f5:ad:24:46:5d:14:5d:63:1c:5b:
db:a2:f8:41:64:9a:7d:7c:d2:f1:d6:b0:e0:de:9b:f9:65:eb:
fa:c4:24:38:7b:8d:7f:83:39:6f:3f:5c:46:bf:aa:7b:2f:6a:
97:11:a2:c3:a2:4d:f4:5c:72:4a:28:10:ab:23:d5:e1:e2:de:
0b:ad:27:68:cf:2a:e9:fc:8d:a5:ad:2c:29:8a:d0:be:36:8f:
ce:e1:b1:c9:d6:05:6c:eb:ec:fe:b4:98:83:1d:46:23:71:84:
82:4f:93:80:80:ad:3a:1a:0c:11:2d:97:95:9b:a3:46:7d:2a:
e1:f7:85:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:06 2025 by rpki-client