Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: pr3BmJnjDb3XFxenmA0KGjOEx2RGGHirug80JmZ5jXs=
Subject key identifier: 40:69:A3:6A:12:E1:1E:86:CC:14:12:6C:09:98:F9:15:22:5C:01:5F
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019739BDE287DD8DBE207081671F1711613B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 02C7
Signing time: Wed 04 Jun 2025 07:00:34 +0000
Manifest this update: Wed 04 Jun 2025 07:00:34 +0000
Manifest next update: Thu 05 Jun 2025 07:00:34 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: vY4GmSNdypEkg76jyKG6N/aaI2x2JD8KGGGIMQ2Pt7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:bd:e2:87:dd:8d:be:20:70:81:67:1f:17:11:61:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Jun 4 07:00:34 2025 GMT
Not After : Jun 5 07:00:34 2025 GMT
Subject: CN=4069a36a12e11e86cc14126c0998f915225c015f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:60:94:2d:4e:ec:d5:f6:7e:2c:9a:d3:9d:
41:89:41:d0:0b:50:23:77:f5:a8:1a:52:55:66:86:
05:61:d7:e0:67:d3:a8:c3:fd:a2:8f:a2:8a:b4:20:
e4:e4:7c:9f:37:b5:02:6e:db:48:07:56:00:84:18:
2d:ce:1d:7c:a8:9e:7e:9a:b2:51:c3:3d:7a:43:9e:
33:64:c8:7e:f2:b6:0b:3c:35:64:d9:0a:4c:04:ee:
24:45:7b:a8:3b:68:0c:fc:b1:ed:b1:91:df:d8:74:
e7:22:3d:ea:c4:05:3c:d0:13:e0:26:af:32:ac:30:
37:61:5b:2a:51:bd:c3:0a:af:ac:f5:62:06:cb:62:
a0:54:01:cd:82:27:4d:91:eb:e1:5a:20:54:09:cc:
88:83:fb:c0:7d:1b:53:4e:fd:50:78:86:15:72:1a:
75:78:07:c6:ec:04:a9:e1:8b:e9:b2:7e:c8:3d:67:
95:91:90:6b:9f:ee:ae:6e:ff:49:44:ef:e6:4a:47:
0c:ab:59:e4:fb:91:ef:df:89:41:37:a4:94:3b:ff:
36:98:d7:26:1e:0f:3f:96:ae:9e:bc:f9:eb:20:dd:
e9:42:a4:6c:ac:9b:1b:52:0b:a3:8f:72:4e:c2:c3:
b7:4a:dc:c7:26:30:05:9b:14:a4:28:57:c4:7d:7a:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:A3:6A:12:E1:1E:86:CC:14:12:6C:09:98:F9:15:22:5C:01:5F
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6d:89:a3:5a:fa:9b:f4:8d:27:bb:10:ce:eb:ea:2f:9b:2c:
03:80:b1:7f:2c:8d:e6:c5:0e:4c:58:ac:5a:b4:af:5d:5c:b5:
86:c2:f7:dd:af:90:43:f6:bb:52:59:b7:d9:37:42:ba:90:f5:
c4:4c:41:02:d7:76:db:a5:2f:76:b4:ce:36:ee:99:5e:a7:72:
83:e9:73:b5:81:c1:1b:ea:3c:49:d9:01:87:ac:c4:5e:96:73:
29:76:55:4f:7e:29:c8:e6:46:78:09:42:6b:f9:07:67:6d:a4:
f9:4e:12:7b:67:18:d2:e0:1f:1f:fe:89:f5:02:6c:22:dc:77:
1e:2d:dd:37:1f:5d:bb:58:7a:54:bc:2e:fb:32:2a:70:69:e9:
07:f4:8e:38:39:67:89:1f:42:9a:ea:e3:bb:d5:ce:91:17:d6:
a4:33:65:2e:9e:ab:31:f4:7b:ab:b6:fe:9c:8c:3c:63:ff:19:
43:11:0c:86:51:a6:07:3a:e5:cc:03:8e:e1:5b:e1:7f:85:e4:
b8:ac:ff:b8:6c:c5:d9:ec:62:0b:a1:29:99:dc:4a:b6:44:0e:
ff:ec:c9:4e:37:db:ac:7c:94:5a:74:9d:3f:22:ab:3c:7e:d4:
da:93:e3:85:aa:80:5b:d5:41:a7:ae:8f:65:d8:6f:60:af:70:
76:fa:44:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc5veKH3Y2+IHCBZx8XEWE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTE4ZmFkYWVmNzIzMmQzMTYxODg2YWNiZWE4YWIzMjNj
ZjM1NzAwHhcNMjUwNjA0MDcwMDM0WhcNMjUwNjA1MDcwMDM0WjAzMTEwLwYDVQQD
Eyg0MDY5YTM2YTEyZTExZTg2Y2MxNDEyNmMwOTk4ZjkxNTIyNWMwMTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlopglC1O7NX2fiya051BiUHQC1Aj
d/WoGlJVZoYFYdfgZ9Oow/2ij6KKtCDk5HyfN7UCbttIB1YAhBgtzh18qJ5+mrJR
wz16Q54zZMh+8rYLPDVk2QpMBO4kRXuoO2gM/LHtsZHf2HTnIj3qxAU80BPgJq8y
rDA3YVsqUb3DCq+s9WIGy2KgVAHNgidNkevhWiBUCcyIg/vAfRtTTv1QeIYVchp1
eAfG7ASp4Yvpsn7IPWeVkZBrn+6ubv9JRO/mSkcMq1nk+5Hv34lBN6SUO/82mNcm
Hg8/lq6evPnrIN3pQqRsrJsbUgujj3JOwsO3StzHJjAFmxSkKFfEfXpRYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBpo2oS4R6GzBQSbAmY+RUiXAFfMB8GA1UdIwQY
MBaAFJjhj62u9yMtMWGIasvqirMjzzVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2Njct
NzIxODg1NTY0NmUzLzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2NjctNzIxODg1NTY0NmUz
LzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABW2Jo1r6
m/SNJ7sQzuvqL5ssA4CxfyyN5sUOTFisWrSvXVy1hsL33a+QQ/a7Ulm32TdCupD1
xExBAtd226UvdrTONu6ZXqdyg+lztYHBG+o8SdkBh6zEXpZzKXZVT34pyOZGeAlC
a/kHZ22k+U4Se2cY0uAfH/6J9QJsItx3Hi3dNx9du1h6VLwu+zIqcGnpB/SOODln
iR9Cmurju9XOkRfWpDNlLp6rMfR7q7b+nIw8Y/8ZQxEMhlGmBzrlzAOO4Vvhf4Xk
uKz/uGzF2exiC6EpmdxKtkQO/+zJTjfbrHyUWnSdPyKrPH7U2pPjhaqAW9VBp66P
ZdhvYK9wdvpEUA==
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:36:31 2025 by rpki-client