Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: 2XxgWoHdeAOKn1Ym4PclM2cj9xzj87uinNxOqBs/DLs=
Subject key identifier: 62:64:C2:62:12:34:8D:90:81:D5:23:8E:F1:64:03:FE:93:88:ED:0B
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 019A4C6101175CA2E78157CA8DFDAEDC4137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 117F
Signing time: Tue 04 Nov 2025 01:00:16 +0000
Manifest this update: Tue 04 Nov 2025 01:00:16 +0000
Manifest next update: Wed 05 Nov 2025 01:00:16 +0000
Files and hashes: 1: 0riwbK-R5SQDQbiXbxNMvOKwj1Q.roa (hash: d2SRgakZUBxW5TlLkPzlI9efZpJljVH6FfcMkO1myyQ=)
2: 13rU8nhg31f282Ufq4fY9epK_mk.roa (hash: 71Un032C55jpwedQZGjeiCXgaYcH9RkzCt+gCgI2Wak=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: FqqYgD/Q4TRyvpILkPA0OwWYbnik5IdFOKw4BEgTK2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:01:17:5c:a2:e7:81:57:ca:8d:fd:ae:dc:41:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Nov 4 01:00:16 2025 GMT
Not After : Nov 5 01:00:16 2025 GMT
Subject: CN=6264c26212348d9081d5238ef16403fe9388ed0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:e5:01:41:5b:02:fb:08:97:3a:2a:08:3c:
21:1e:eb:45:cd:c7:96:c4:de:c1:41:28:5f:59:fa:
db:92:0f:6c:2e:0d:a0:d0:d5:17:45:b1:02:fa:ef:
bd:6c:f3:50:d6:11:64:43:b6:dc:be:0d:e5:90:1c:
a7:5e:d8:25:68:d9:7a:9c:da:c5:ff:56:a5:80:4d:
ac:48:e4:b3:31:a7:23:df:66:08:29:8a:d6:4b:d2:
d7:5d:d3:e3:4d:30:5d:81:9e:7a:31:bf:97:4e:ed:
cd:76:e8:07:ed:a6:ac:45:8d:cb:cb:78:f4:8f:f9:
8e:11:82:b2:fa:12:2d:fc:fe:bb:c9:aa:85:a8:5a:
be:d5:8d:d6:2e:74:cf:d5:81:f7:47:74:ae:3e:16:
b5:6f:b0:8b:02:05:82:14:52:c6:27:5c:28:e2:69:
67:ff:8b:23:f6:f7:4d:73:e6:70:17:c3:c7:05:4e:
f9:1f:fa:81:8e:97:a6:6a:85:fe:db:9a:3e:da:d5:
ad:32:55:5c:5b:bd:19:51:bd:47:a7:6a:fc:09:1d:
52:ab:b2:ab:66:d1:e4:dd:34:14:a7:9d:ff:de:96:
fd:51:48:f1:cc:cd:ed:90:f3:a3:94:cc:52:e9:48:
94:6f:19:9b:b9:b0:a0:49:b3:35:95:f1:29:c2:f6:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:C2:62:12:34:8D:90:81:D5:23:8E:F1:64:03:FE:93:88:ED:0B
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b6:86:3f:65:d3:b0:3b:41:e7:c9:25:47:29:69:d8:5b:10:
6f:f5:54:08:b1:30:5d:9b:ae:99:50:7e:69:64:4a:b1:3c:81:
04:dc:fb:5e:bb:85:68:ca:9f:0b:17:0b:21:b1:8a:58:27:d7:
36:d4:2d:56:93:cb:ba:d8:be:63:58:54:f6:05:5d:39:02:b4:
e6:63:e4:02:6c:17:2d:da:8b:62:b9:aa:6d:dd:f4:89:d2:6c:
cd:c4:f9:2e:94:63:f1:42:28:13:f8:c0:5f:c2:aa:1a:96:e2:
b9:5b:31:48:ae:b1:9e:82:f9:89:12:87:9c:d5:cb:6a:b0:f6:
95:ba:51:42:7f:3d:37:49:5a:4b:3f:db:f0:6c:4a:0a:d5:ce:
47:a7:f5:ae:a0:c0:66:8e:37:b9:06:08:39:47:38:cd:94:d0:
7a:5c:2a:34:fb:c8:53:88:be:70:4d:61:d2:b2:c4:38:9c:67:
3b:2d:52:72:99:57:e7:80:e6:ca:5e:19:0f:59:3d:70:a3:31:
e1:5e:aa:b3:4e:d0:25:2d:6a:05:f3:17:af:52:e4:50:68:11:
af:48:d0:85:06:c6:31:0f:37:28:11:88:31:c0:b1:36:6d:b8:
08:8a:ab:9b:80:1c:82:cb:2d:bf:43:5a:9d:55:03:c0:a1:09:
fb:98:b9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:20:51 2025 by rpki-client