Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: y8J5SFN1QzKVCvLKtMW1dFbIZ9KWdZcizOoahPLYf2k=
Subject key identifier: F4:6A:C2:E4:70:37:5C:91:16:62:FE:BD:7A:B8:DF:EC:42:EB:0B:35
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 01976BBD96718703D4D152E1EB5E0F682AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 00:01:16 +0000
Manifest this update: Sat 14 Jun 2025 00:01:16 +0000
Manifest next update: Sun 15 Jun 2025 00:01:16 +0000
Files and hashes: 1: cdMOuRF7uOMr3eiWtLluBITicTo.roa (hash: 2zf3i/TaVgEDUbWisH1c3bo8xEvWjGA35Bw+WbjbFqQ=)
2: gPmJ919io92zLM0qUcMa5dmkecM.roa (hash: m1AiD3SH7JRse/Y0z+yKore/EQyRkJUXQ2NtfWymxSY=)
3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: hpMfCY6LeFIZNzOqpD+L2kZYBvxpaGArFa8ORM4hj+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:96:71:87:03:d4:d1:52:e1:eb:5e:0f:68:2a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jun 14 00:01:16 2025 GMT
Not After : Jun 15 00:01:16 2025 GMT
Subject: CN=f46ac2e470375c911662febd7ab8dfec42eb0b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:ae:40:fe:dc:f9:f4:4e:46:29:c4:5a:bb:
5e:94:69:54:ef:47:7c:a0:21:3a:6e:7a:24:23:af:
52:1e:6a:94:a6:e2:b0:e4:3a:92:47:43:07:c8:47:
9f:9f:ec:96:3a:e7:ce:ad:45:8b:96:57:b1:c8:6b:
50:b0:1a:64:a6:d0:84:f6:6b:97:95:42:dd:81:3c:
f4:df:8b:ce:5c:1b:50:61:69:84:da:88:cb:64:d4:
9e:bb:48:ec:0a:25:f7:d7:9a:6f:39:12:8b:9f:11:
fb:0f:d0:ab:72:96:b8:1f:74:6f:2a:cc:c9:fb:9f:
6a:cc:9e:c3:0e:b2:1c:ec:a2:a7:db:98:54:a5:d4:
9b:1a:16:40:84:ad:79:00:f0:13:fe:8f:06:9b:3e:
9c:65:f4:fa:cd:d9:f3:aa:8f:cf:85:64:3f:2d:a9:
7f:a8:0e:43:c2:73:fd:19:2b:86:51:ba:73:2a:f0:
b0:0e:c3:1e:c5:6c:05:1a:29:e8:f6:f2:f8:b0:cc:
0b:8a:06:24:11:63:f0:1e:73:78:56:a1:f1:af:18:
a0:51:d8:dd:64:19:3d:37:bd:f2:17:56:7d:f7:e3:
cc:04:69:91:50:57:c8:32:01:47:94:07:18:cf:76:
21:61:37:1a:9b:13:31:76:2f:18:78:d2:d6:82:f9:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6A:C2:E4:70:37:5C:91:16:62:FE:BD:7A:B8:DF:EC:42:EB:0B:35
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:11:aa:d0:42:da:34:03:ac:19:e7:67:69:f2:d0:bb:65:ec:
00:61:4f:92:2f:93:07:7a:59:8e:10:ff:67:c9:2f:bd:9e:67:
8e:2d:fa:dd:7e:ef:0b:e8:e0:8f:37:0e:2b:54:93:97:91:d3:
97:12:02:15:96:43:70:74:ef:22:6e:1b:e6:c8:b8:f2:67:45:
68:b5:1d:e9:a0:05:11:00:f7:75:6c:6b:7e:75:5c:ce:e8:ac:
33:eb:ed:60:ec:54:d1:ef:34:d2:29:8f:12:5b:3c:b8:cd:03:
52:9c:a2:a0:e2:ba:a0:f4:4d:7c:4c:d1:6d:fd:25:ec:5d:98:
13:31:54:bb:7f:e1:be:9b:ad:e3:74:a2:b8:61:20:b8:43:10:
36:f2:50:9f:20:f4:f1:fe:9f:01:d3:b2:33:82:71:54:e6:8e:
eb:2e:b0:4c:81:ef:c2:9b:eb:b6:8a:84:ca:e7:6b:a3:bb:f8:
38:31:6a:8d:d9:83:89:67:b2:f5:22:b9:f9:d6:42:31:9f:c8:
f7:18:07:84:bf:e4:75:dc:ec:5d:04:28:d9:59:dd:80:6f:e9:
43:dd:94:57:7b:65:ab:2e:50:32:87:1d:b2:38:d3:94:94:51:
13:35:3f:43:07:14:86:33:5a:6f:39:8b:75:b6:15:d3:6f:c9:
af:23:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:41:38 2025 by rpki-client