Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json)
Hash identifier: JoZB5zLti22NLAq6P5X6I0Qx43LEfpfbUtmYF3JDULQ=
Subject key identifier: A1:35:72:42:71:C7:43:5E:B4:3F:06:C1:93:FF:F6:67:F7:8C:7C:F7
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 019A7149F4F3C17AE030575B024188511543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
Manifest number: 0131
Signing time: Tue 11 Nov 2025 05:01:03 +0000
Manifest this update: Tue 11 Nov 2025 05:01:03 +0000
Manifest next update: Wed 12 Nov 2025 05:01:03 +0000
Files and hashes: 1: ZCpl3UyatQkZjsK8z_IxqXu_Sk0.roa (hash: O39VxnKkC8Thbx7rhWEv+PJDcL54U/wq4sE9v+Ry7uQ=)
2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: sqjoDEJNWZICpw3XJync9brnZneYZ6po/XM/wW9YNic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f4:f3:c1:7a:e0:30:57:5b:02:41:88:51:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Nov 11 05:01:03 2025 GMT
Not After : Nov 12 05:01:03 2025 GMT
Subject: CN=a135724271c7435eb43f06c193fff667f78c7cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:d3:d0:dc:41:e4:80:7b:df:59:7e:29:62:
50:65:99:66:6e:85:c5:ce:a1:59:90:a4:5e:e6:60:
d7:7b:19:f7:e8:27:9f:d2:51:e3:dd:8f:c5:d9:b4:
eb:b9:87:4e:ca:18:82:ba:87:a4:f2:c5:a7:05:76:
a3:71:a7:e3:b6:1f:e0:94:9c:91:37:3d:45:b0:f5:
2e:e3:46:57:ba:4c:99:84:cc:33:36:0d:4a:48:f1:
16:63:36:d2:5c:81:43:bd:17:12:3a:84:f1:fd:d8:
dd:2b:5e:16:60:63:9d:3e:62:36:a1:e2:d5:84:0f:
fc:3f:5f:8c:ba:bd:af:ea:b4:47:bd:af:f7:3e:06:
ca:b7:f5:4b:ef:2c:4f:85:63:bb:41:02:c7:9e:b3:
b6:c7:6a:6c:92:82:b9:3e:05:49:ef:7c:75:09:81:
77:d8:cc:7e:a5:a0:e9:cd:ab:9d:00:88:87:c5:13:
58:d8:25:a9:a7:68:1f:da:98:03:e9:5a:06:b5:f0:
fb:c0:1b:a1:75:84:a8:11:d3:76:8f:fe:07:a4:bf:
0e:87:d8:2c:cb:07:bf:ca:21:f0:ba:32:ba:b5:d0:
60:0f:57:aa:f7:31:72:ee:d8:3a:1d:bf:e1:f5:43:
ae:ee:96:3a:36:0b:40:59:23:5c:8f:63:13:b8:bb:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:35:72:42:71:C7:43:5E:B4:3F:06:C1:93:FF:F6:67:F7:8C:7C:F7
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8e:b2:74:6e:52:cd:a7:32:7f:7b:cc:f1:d4:69:0d:bc:e0:
19:45:50:00:b7:38:29:22:00:27:04:52:44:de:04:73:75:e5:
8a:7e:46:be:18:95:64:f1:cd:6b:1f:41:d6:75:c9:c8:80:4f:
32:12:ba:d9:39:9a:88:f4:78:2e:4a:0b:11:b0:6b:cf:c4:b5:
e4:f8:dc:9e:50:b4:dd:8b:8c:2d:eb:28:d9:5a:b6:20:48:ef:
3a:82:c1:ab:2c:a6:51:04:b0:93:4d:42:75:26:cf:33:1e:33:
b2:4f:15:65:fc:d8:9a:01:86:49:74:95:4a:13:7a:b3:c0:c4:
b3:ef:9e:f9:94:11:4c:9c:28:5a:c4:e0:52:61:8d:05:0f:cc:
fc:83:fc:dc:73:c4:82:9c:33:7b:7d:10:9a:d8:11:0b:77:27:
22:40:ca:a8:cf:c1:1e:4d:42:95:7b:12:14:10:98:61:b1:1e:
a5:6c:87:35:ae:0c:14:da:f9:93:b3:b5:cb:f0:4f:4a:8e:fb:
f8:d9:ec:5b:1e:3d:27:fb:25:4a:4e:4b:60:ab:30:6f:f3:d5:
a9:40:a8:30:4d:9e:5c:90:cb:df:50:5f:3f:24:b1:53:1b:85:
ab:a7:4b:1f:9d:27:f5:cb:d6:a6:01:e4:28:27:de:23:0e:cc:
c1:86:a0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:07 2025 by rpki-client