Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: mbAQAjdQUkMKzwxzLrX/tDKFZxH37ZVsBRo7KWOyVnI=
Subject key identifier: 9F:DC:88:25:CB:38:D8:5F:38:0E:9A:10:A1:BA:EC:5D:C2:77:E4:58
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019874505100DEF01373CC2859233886B215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:17 +0000
Manifest this update: Mon 04 Aug 2025 09:01:17 +0000
Manifest next update: Tue 05 Aug 2025 09:01:17 +0000
Files and hashes: 1: cdMOuRF7uOMr3eiWtLluBITicTo.roa (hash: 2zf3i/TaVgEDUbWisH1c3bo8xEvWjGA35Bw+WbjbFqQ=)
2: gPmJ919io92zLM0qUcMa5dmkecM.roa (hash: m1AiD3SH7JRse/Y0z+yKore/EQyRkJUXQ2NtfWymxSY=)
3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: 56Jil2OczoRBPkJpSn4cg10Fk7TIbHqGi0fP1yrmcxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:51:00:de:f0:13:73:cc:28:59:23:38:86:b2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Aug 4 09:01:17 2025 GMT
Not After : Aug 5 09:01:17 2025 GMT
Subject: CN=9fdc8825cb38d85f380e9a10a1baec5dc277e458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:ee:cf:b9:5b:3b:55:8c:4f:cd:a7:a7:67:
48:49:0f:87:50:57:32:58:a5:84:a6:71:70:8d:df:
5c:1d:0a:b7:b9:d9:c8:01:ee:da:72:ef:05:56:6e:
14:1a:fd:19:c1:5a:55:e9:30:57:51:9d:6f:d4:00:
b2:c2:6c:b1:d5:7c:83:75:ef:2f:2a:29:83:98:ae:
20:42:74:4a:bf:73:3d:e1:6e:da:91:e5:9c:da:21:
46:49:c1:30:ef:37:18:1a:c9:b3:e5:7b:fa:2d:b2:
e0:e1:a3:8e:fb:bd:19:02:d0:1d:2b:00:6c:cc:9e:
41:02:00:5b:2f:11:62:22:77:ff:46:5c:f3:8e:55:
06:b5:b8:25:40:ec:5e:56:40:71:48:8a:7c:f0:80:
fb:3d:bb:e5:09:07:b0:52:df:d2:11:c0:4f:63:d4:
3c:92:e0:6c:21:ff:0a:6a:82:68:65:92:8c:93:55:
33:6a:83:4d:ae:3d:b8:13:cc:89:86:b6:69:af:71:
0c:51:6b:74:b5:da:38:ae:62:55:79:2d:50:63:ea:
1f:d4:72:e4:0c:37:00:97:b2:ed:b7:8a:a2:a7:8f:
15:fc:5e:43:12:df:49:20:97:36:23:56:41:01:25:
fe:47:2a:25:ec:8e:f5:5c:4a:65:90:1b:b7:60:1e:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DC:88:25:CB:38:D8:5F:38:0E:9A:10:A1:BA:EC:5D:C2:77:E4:58
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:87:87:1a:87:de:d0:42:40:70:dc:6a:6e:cf:b2:70:ad:53:
eb:b7:8f:35:e2:75:24:df:36:b5:f4:10:ef:62:be:db:fd:2a:
e6:2d:db:a4:f0:4d:0c:66:bc:48:1f:eb:3b:7c:70:cf:e1:43:
72:e7:68:78:61:e3:0f:46:55:fa:31:b6:2f:3a:97:6b:af:86:
7d:eb:82:0a:0c:43:a3:2d:0c:6e:56:69:71:13:2e:0b:42:d8:
13:a3:ee:f8:ff:85:7f:72:e8:13:29:a6:a8:44:80:05:50:39:
d2:04:9c:a8:8c:6e:ba:99:3b:d0:34:32:04:84:b2:ae:a5:53:
eb:2a:03:97:25:20:26:66:fe:8e:f4:60:8e:19:5a:18:b1:f4:
d3:95:7c:1c:ce:a1:8b:7c:78:5b:9c:0c:5e:e4:a5:0a:12:d2:
24:44:04:61:52:c2:69:f3:81:ad:94:a4:a0:c1:c1:4b:67:f9:
5b:a8:61:be:ea:2f:39:08:ad:60:53:64:e7:02:a0:e2:5c:5f:
bc:08:4f:5b:29:20:1a:46:c8:ac:2b:73:d6:4e:74:7e:ae:68:
db:bf:af:e8:75:57:bd:47:ea:07:84:a5:e7:1c:d2:fb:f8:6d:
bc:8a:68:fe:ca:05:b1:44:a2:71:0d:c3:9b:84:81:f3:ef:36:
7e:8d:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:16 2025 by rpki-client