Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: 7GRqkOgKyhBEaSCb70RwplrEws15zpSU4XdUomXJOZk=
Subject key identifier: CD:76:62:AF:42:A2:17:1E:5F:39:D1:BD:78:91:0F:01:91:B3:5F:A7
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019A725C9B3E1733E0AAD5CAF93C057C3E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 0472
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: GUz8l8lIzy+5Wj50O06/nNSoSVLGqiCaH3kzyVmGgBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9b:3e:17:33:e0:aa:d5:ca:f9:3c:05:7c:3e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=cd7662af42a2171e5f39d1bd78910f0191b35fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:78:6f:b3:6f:1b:67:00:7c:f1:89:92:40:
1d:c4:5e:3c:29:8a:7e:d8:2e:1a:c0:9d:86:02:fc:
c4:c8:95:ca:bd:24:a3:f1:0b:09:42:31:10:91:50:
b1:7b:89:c5:5b:7a:a3:1f:15:37:84:d6:5b:9e:ec:
31:f2:ad:8b:17:e3:d2:41:0e:27:83:39:89:6b:57:
17:85:32:31:e2:a2:a8:5e:9f:5b:4f:b7:93:00:cf:
e0:e9:97:ae:d6:e0:03:00:93:57:fb:55:4a:0a:dc:
f5:80:5f:aa:6a:9f:d4:d4:d9:ae:1b:79:d7:d9:2d:
5a:38:d4:c1:e0:fd:73:19:cd:7d:f8:4c:7c:59:29:
eb:2a:16:3d:84:f3:59:d7:53:cf:99:29:0e:42:27:
c6:f7:40:cb:4b:86:0b:02:dd:4b:9b:80:8a:bb:df:
5c:b1:7b:6c:7c:68:be:b6:d9:e8:cf:02:c6:57:4c:
df:ab:e9:fc:a7:08:cc:a5:11:53:ad:c7:81:50:cc:
24:11:a3:43:21:3d:7a:57:a3:c4:fe:d1:dc:18:4d:
81:8f:6a:fb:0a:84:ac:f7:f2:4d:86:be:ec:18:c6:
31:a0:00:1b:c8:56:ad:b6:46:16:eb:6b:4f:8f:ba:
14:65:02:52:a3:dd:80:09:b6:b1:45:02:43:ae:3e:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:62:AF:42:A2:17:1E:5F:39:D1:BD:78:91:0F:01:91:B3:5F:A7
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:34:c9:3b:a5:91:60:76:a7:45:c2:6a:5b:f8:f7:ae:c0:14:
e1:7c:57:15:e7:f9:81:1e:20:b8:64:75:39:a3:cc:40:f6:aa:
f9:ad:f4:d4:9b:a4:79:c4:0e:4b:25:3d:fd:fd:0f:8f:01:90:
11:32:ca:d1:2b:4c:92:37:f6:96:e9:1b:4f:34:6e:26:8b:bd:
a9:3e:a3:db:1e:5f:4e:59:fc:b5:cc:16:3f:06:b5:cf:bb:7d:
34:3f:a1:aa:06:80:9b:61:c3:32:5c:39:ac:d7:73:36:87:e1:
ab:d4:3d:ff:7d:6d:ad:10:39:4f:13:43:7e:15:51:59:80:eb:
b1:ac:0a:27:05:85:a8:e2:c1:30:fc:e1:71:cd:66:5a:2d:05:
ba:1e:9b:11:c1:e0:6a:03:ac:0a:f4:0c:ad:ee:6f:ae:b7:23:
9f:2f:bb:98:25:b9:ae:cb:f4:16:32:f0:93:6e:b2:59:f2:84:
86:1d:be:46:c8:ce:2e:2b:59:7a:4d:f6:52:43:b2:e6:ec:61:
04:d1:3e:99:40:a5:88:32:22:c6:f9:9e:59:2a:2e:90:45:dd:
42:7a:04:70:16:b2:1b:40:79:92:e7:4f:44:e2:24:0b:32:0f:
b8:21:3c:e9:83:cd:17:84:09:24:3b:62:62:da:c6:c3:42:ff:
d9:17:59:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJs+FzPgqtXK+TwFfD4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTE4ZmFkYWVmNzIzMmQzMTYxODg2YWNiZWE4YWIzMjNj
ZjM1NzAwHhcNMjUxMTExMTAwMTAyWhcNMjUxMTEyMTAwMTAyWjAzMTEwLwYDVQQD
EyhjZDc2NjJhZjQyYTIxNzFlNWYzOWQxYmQ3ODkxMGYwMTkxYjM1ZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc54b7NvG2cAfPGJkkAdxF48KYp+
2C4awJ2GAvzEyJXKvSSj8QsJQjEQkVCxe4nFW3qjHxU3hNZbnuwx8q2LF+PSQQ4n
gzmJa1cXhTIx4qKoXp9bT7eTAM/g6Zeu1uADAJNX+1VKCtz1gF+qap/U1NmuG3nX
2S1aONTB4P1zGc19+Ex8WSnrKhY9hPNZ11PPmSkOQifG90DLS4YLAt1Lm4CKu99c
sXtsfGi+ttnozwLGV0zfq+n8pwjMpRFTrceBUMwkEaNDIT16V6PE/tHcGE2Bj2r7
CoSs9/JNhr7sGMYxoAAbyFattkYW62tPj7oUZQJSo92ACbaxRQJDrj6SZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM12Yq9CohceXznRvXiRDwGRs1+nMB8GA1UdIwQY
MBaAFJjhj62u9yMtMWGIasvqirMjzzVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2Njct
NzIxODg1NTY0NmUzLzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2NjctNzIxODg1NTY0NmUz
LzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTTJO6WR
YHanRcJqW/j3rsAU4XxXFef5gR4guGR1OaPMQPaq+a301JukecQOSyU9/f0PjwGQ
ETLK0StMkjf2lukbTzRuJou9qT6j2x5fTln8tcwWPwa1z7t9ND+hqgaAm2HDMlw5
rNdzNofhq9Q9/31trRA5TxNDfhVRWYDrsawKJwWFqOLBMPzhcc1mWi0Fuh6bEcHg
agOsCvQMre5vrrcjny+7mCW5rsv0FjLwk26yWfKEhh2+RsjOLitZek32UkOy5uxh
BNE+mUCliDIixvmeWSoukEXdQnoEcBayG0B5kudPROIkCzIPuCE86YPNF4QJJDti
YtrGw0L/2RdZew==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:10 2025 by rpki-client