Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: bAnsQryqq/tptRI+j+cQru2HJtwCwsD2klbqX973U3Q=
Subject key identifier: 09:8E:C4:61:49:CF:75:A1:B0:86:E8:41:05:48:2D:17:43:75:4D:C9
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 01975422EACA5565CDA5F0C09FA8651D05CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 11E5
Signing time: Mon 09 Jun 2025 10:01:03 +0000
Manifest this update: Mon 09 Jun 2025 10:01:03 +0000
Manifest next update: Tue 10 Jun 2025 10:01:03 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: 9oFKjr+M3DpnIIuEjRVunHdMSked1lZBtbTQTZtyBvo=)
2: 9PUwFWX6MI5zmQ2Oq6gL-_qhrj0.roa (hash: 3b0NbUCvSpLrWF4vh/o6Yjp7ddJczpbBr1onafxnYgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:ea:ca:55:65:cd:a5:f0:c0:9f:a8:65:1d:05:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Jun 9 10:01:03 2025 GMT
Not After : Jun 10 10:01:03 2025 GMT
Subject: CN=098ec46149cf75a1b086e84105482d1743754dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:11:ce:8d:5b:56:16:e9:5e:5f:8b:53:d4:
3c:ff:76:fb:aa:e2:40:10:8c:bb:78:19:2c:e3:fb:
fe:b7:f4:b3:2f:e9:f5:6f:cb:c4:44:2d:f7:e8:b5:
c0:9c:d4:e5:be:35:74:99:01:a5:4f:13:84:f8:23:
f5:2d:8c:06:84:49:36:e6:e6:13:29:3c:4c:69:f1:
72:6a:4e:aa:cc:3d:3e:f1:a5:2b:46:32:77:c1:32:
f1:31:76:97:28:7d:51:97:25:14:19:73:17:46:e1:
46:95:2e:8d:23:45:9a:ee:7f:1c:4e:f3:15:b4:90:
d7:da:7c:ca:db:07:f2:9b:55:4e:6c:48:64:1e:04:
49:83:e4:90:7e:ff:5c:c4:e8:86:37:f7:f8:9c:a0:
a4:d5:af:84:30:d4:af:30:2e:19:bf:c9:00:05:5c:
63:f9:4d:fc:5e:68:81:1f:02:f6:1e:ce:d9:dc:1f:
0e:1a:77:7d:0b:86:e9:84:33:8d:f0:fb:6c:61:b8:
ac:dc:ce:cc:79:8e:ba:8c:d3:9f:08:cd:59:7d:e1:
96:54:2a:e2:28:8a:68:b5:62:a1:4b:e5:bd:53:78:
d1:37:06:12:b8:ec:25:bd:0d:59:13:ed:cd:a4:5a:
c2:fa:e8:f4:fa:69:bb:2a:88:a8:d2:22:c1:0e:73:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8E:C4:61:49:CF:75:A1:B0:86:E8:41:05:48:2D:17:43:75:4D:C9
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6a:83:aa:4c:aa:2c:3f:af:d4:1e:ad:11:0f:3c:b2:d8:62:
34:5d:02:f4:ba:91:17:6f:c1:97:2a:22:b9:5c:9a:f9:d3:04:
2c:62:aa:4b:70:6b:8d:fd:b2:69:cb:33:48:50:54:aa:02:44:
1b:06:76:cb:a6:2d:d5:f0:13:d1:37:4e:bd:68:39:1e:6f:4d:
45:af:71:f4:80:ca:1b:f4:31:90:1e:f0:e7:05:d5:db:07:78:
59:87:96:0c:86:30:66:28:2d:d3:cc:9b:f8:b3:03:9c:f9:d9:
44:64:b4:dc:4e:58:fa:af:15:6c:fa:66:5c:6c:a9:04:1f:11:
de:24:9f:75:3f:48:14:ce:56:ab:1a:55:3a:e9:76:2d:e5:45:
74:f3:01:69:db:27:c5:a6:ba:09:6c:93:b7:2e:da:d8:d7:82:
50:58:39:d5:25:c4:e1:41:86:ba:84:d8:f4:0f:02:23:9e:35:
23:c3:75:d9:bc:ec:b6:6b:a2:37:4a:bc:ad:74:80:ed:4f:39:
d3:bd:fe:7b:c4:7b:c1:cd:cd:ae:cb:fe:76:a7:79:11:7c:4e:
e0:49:ea:bb:5c:80:aa:b4:df:73:b3:8c:cc:09:1e:de:30:50:
07:5c:62:c9:f3:cd:db:7c:7b:82:5e:aa:58:85:ec:16:f6:ab:
70:a6:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:58:32 2025 by rpki-client