
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json)
Hash identifier: FRlEikJoU1us0QPjQnuDtzp7Yrj4Gtn9UO1tLuV7QpA=
Subject key identifier: CE:0B:3F:45:3A:30:A9:5D:FF:60:04:06:8A:4A:BC:4C:9F:EF:16:B8
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 01994FD28F8CA34253F53D457747DDA0CD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
Manifest number: 9B
Signing time: Tue 16 Sep 2025 00:00:23 +0000
Manifest this update: Tue 16 Sep 2025 00:00:23 +0000
Manifest next update: Wed 17 Sep 2025 00:00:23 +0000
Files and hashes: 1: ZCpl3UyatQkZjsK8z_IxqXu_Sk0.roa (hash: O39VxnKkC8Thbx7rhWEv+PJDcL54U/wq4sE9v+Ry7uQ=)
2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: MsA+oVFGrtGjjeDAjaOnZyy9RFuIJGx3gVFBCOMIoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:d2:8f:8c:a3:42:53:f5:3d:45:77:47:dd:a0:cd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Sep 16 00:00:23 2025 GMT
Not After : Sep 17 00:00:23 2025 GMT
Subject: CN=ce0b3f453a30a95dff6004068a4abc4c9fef16b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:e2:a3:bc:bc:c6:c8:1e:06:24:a1:75:de:
00:fd:f6:be:a4:4d:fe:8c:50:e9:ea:a6:fb:de:3f:
ad:cf:5b:bd:dd:ac:ca:b2:30:31:fd:e9:f4:fe:d4:
ca:f3:0a:2e:92:d7:96:a3:c3:cc:0d:96:e2:88:81:
a9:dd:33:e4:b6:22:1a:70:aa:67:ac:3c:16:e0:85:
f0:da:40:7a:3b:d1:29:75:01:8f:31:dd:40:82:a0:
fb:fd:98:b3:7a:fd:9b:1b:44:16:81:a3:34:f0:0c:
33:12:72:ec:07:48:04:a3:a6:4a:6e:3f:86:b3:e4:
7f:5a:8a:5e:b2:22:19:f1:df:4e:fd:06:cc:b9:39:
8c:99:a1:92:cb:3c:32:5c:e0:65:a2:81:4e:d1:3e:
b2:c4:01:24:73:d3:e2:f4:55:39:72:ef:d3:92:28:
dd:9a:f0:ef:6b:4f:43:2f:c5:28:58:4c:a6:78:1d:
da:16:12:b1:a3:dd:23:82:18:e4:b6:ab:cc:f8:40:
78:75:47:32:c7:14:54:ee:2c:46:1e:bd:6a:8a:7a:
af:9e:da:95:93:08:ff:cf:85:15:0d:c3:3c:c4:25:
1a:8f:db:d0:51:83:3b:88:75:0e:bb:9a:79:d2:88:
7f:dc:46:58:ee:57:3b:ab:3d:89:e6:3a:54:57:95:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:3F:45:3A:30:A9:5D:FF:60:04:06:8A:4A:BC:4C:9F:EF:16:B8
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b6:7c:d5:7d:8c:1a:b6:00:40:ad:2e:8e:94:40:9a:59:fd:
75:4c:01:34:5a:cb:12:cd:2b:be:70:1b:96:3b:7c:71:46:f7:
b4:d9:5e:7a:ab:83:58:8d:cd:24:86:3d:f9:a3:76:04:a6:c5:
67:09:70:af:7c:cf:36:59:60:67:50:71:58:a7:76:36:77:da:
74:8b:19:09:92:ec:92:a5:b6:8a:dd:94:a1:9b:91:07:92:bb:
9e:23:58:9f:36:1e:5e:b5:5f:cd:64:40:73:ee:8c:32:61:35:
42:0d:7c:06:61:6f:84:ca:8a:b9:48:33:cc:56:28:ac:4b:fa:
32:f5:90:51:be:8b:56:4c:37:e1:e5:2d:1f:fa:e0:95:3b:86:
86:3f:4d:c1:95:7f:a7:9b:49:33:ce:12:ec:2e:c3:f8:d1:98:
67:dd:64:5c:a5:c0:aa:28:55:37:12:93:f2:f5:59:bb:0e:49:
40:7e:b5:fa:71:2c:3a:dd:c1:1c:ef:f9:fe:38:a7:e6:b4:76:
3e:a4:ee:98:bc:45:a8:56:66:0e:bd:77:da:20:b0:8d:75:58:
77:27:1c:ad:4c:a4:fd:1e:cc:6e:ca:15:e2:c5:48:85:e4:89:
c9:a6:31:63:36:8f:25:3e:6c:6e:1b:2d:ac:13:81:e6:0e:3c:
e4:73:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:10:15 2025 by rpki-client