Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
File: OkGxVaq20SKf00jqoD0PeQPxJno.mft (raw, json)
Hash identifier: pnX4ughmL4SV36Ibb35VkDfP7Ve+tLn7ekok8J78xvc=
Subject key identifier: 91:3A:2F:3C:B2:DE:9B:6D:9C:BB:92:C6:8C:BE:2E:09:B8:F5:32:1D
Authority key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Certificate issuer: /CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Certificate serial: 0198A083D23DF7C5FAE3ACF6BE07790939DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
Manifest number: 1135
Signing time: Tue 12 Aug 2025 23:00:50 +0000
Manifest this update: Tue 12 Aug 2025 23:00:50 +0000
Manifest next update: Wed 13 Aug 2025 23:00:50 +0000
Files and hashes: 1: DUYlFbh6FULGzgdthf_PMDp6hOU.roa (hash: JR7UbEi2bM6dLHHY3xrq1gui3NHbn1GkWRWkFGTRYw0=)
2: OkGxVaq20SKf00jqoD0PeQPxJno.crl (hash: xUeIAs9jwUZWWoHUMe4bjwsEvANNLY7lcgb8WijbE6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:d2:3d:f7:c5:fa:e3:ac:f6:be:07:79:09:39:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Validity
Not Before: Aug 12 23:00:50 2025 GMT
Not After : Aug 13 23:00:50 2025 GMT
Subject: CN=913a2f3cb2de9b6d9cbb92c68cbe2e09b8f5321d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:24:7a:ce:23:7b:e6:1b:e8:87:01:a4:10:
51:39:e1:64:1e:53:64:2b:ae:fc:f6:fd:4c:94:1b:
57:60:60:46:62:f2:e2:c3:70:34:49:59:5d:1a:78:
52:9e:aa:cd:ad:9d:e2:e1:d6:0d:19:23:31:a1:c9:
97:a1:55:5f:0c:67:fc:69:ce:1e:8c:3e:f6:36:53:
4e:b1:83:c4:ed:d1:e3:bf:d9:66:08:7c:97:58:f1:
28:8d:46:cc:de:a5:d1:c3:34:f4:2d:f9:ed:dd:9a:
6f:6f:a6:d5:85:10:7f:ad:7f:aa:f2:b8:0b:92:08:
78:79:f5:64:49:91:a6:7c:e8:04:53:91:7d:7e:9d:
66:52:ff:78:04:9d:14:36:3f:ae:fd:0d:1a:1b:47:
8b:b7:1e:00:ad:51:df:1d:04:08:91:e2:d9:99:58:
99:09:b6:80:44:f4:67:02:74:d8:11:f1:3b:c2:f4:
f0:5b:57:73:74:41:50:10:87:0e:f4:14:e8:d8:f8:
b0:93:f5:30:20:4b:11:bf:c0:36:85:4c:2b:33:23:
cb:24:b1:24:5b:49:89:53:da:2b:24:c5:0d:66:27:
f7:18:16:a7:cf:de:79:31:2c:f0:20:de:c4:69:ab:
a9:59:59:cf:5b:50:76:24:ea:37:ff:fc:42:53:40:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3A:2F:3C:B2:DE:9B:6D:9C:BB:92:C6:8C:BE:2E:09:B8:F5:32:1D
X509v3 Authority Key Identifier:
keyid:3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:91:43:62:47:31:f3:17:f9:44:a2:20:3d:f2:e1:b2:af:2e:
8c:6e:bd:cf:21:3d:72:58:6f:96:26:e1:85:fa:be:04:76:15:
4f:9f:f0:6a:5e:5a:38:99:eb:59:10:de:3a:af:89:76:f9:61:
c5:16:94:64:05:f7:3b:64:e1:cd:56:b1:c1:cc:da:bd:72:4c:
89:88:28:d6:aa:ee:d6:25:a9:b2:8e:89:ff:bb:26:ff:95:62:
17:b0:ca:b8:bc:a5:b5:1c:a4:55:50:96:aa:8c:f7:d0:62:d9:
d9:b9:cc:12:55:24:a4:6f:51:0a:97:2b:d3:b2:22:5f:44:01:
c9:7c:9b:78:02:e8:97:3a:69:fd:6a:50:da:6e:76:d0:4a:91:
06:f8:b7:e9:57:c3:93:32:a5:6a:99:86:92:e8:26:b3:75:6a:
00:98:d4:44:81:1e:14:f7:02:e0:fc:72:bf:65:c0:87:b6:82:
f1:24:ba:08:35:cb:8b:a3:18:4c:15:63:a5:67:d7:ca:8a:dd:
ef:35:d8:17:02:af:31:37:05:87:7b:27:3d:bb:e0:76:b0:56:
be:00:65:ff:47:cf:a7:b0:ea:9e:b3:02:38:f3:4e:09:fd:60:
a8:66:cc:ea:c5:7a:d8:4b:43:55:2f:eb:12:38:2f:57:98:61:
53:ef:39:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigg9I998X646z2vgd5CTndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDFiMTU1YWFiNmQxMjI5ZmQzNDhlYWEwM2QwZjc5MDNm
MTI2N2EwHhcNMjUwODEyMjMwMDUwWhcNMjUwODEzMjMwMDUwWjAzMTEwLwYDVQQD
Eyg5MTNhMmYzY2IyZGU5YjZkOWNiYjkyYzY4Y2JlMmUwOWI4ZjUzMjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkAkes4je+Yb6IcBpBBROeFkHlNk
K6789v1MlBtXYGBGYvLiw3A0SVldGnhSnqrNrZ3i4dYNGSMxocmXoVVfDGf8ac4e
jD72NlNOsYPE7dHjv9lmCHyXWPEojUbM3qXRwzT0Lfnt3Zpvb6bVhRB/rX+q8rgL
kgh4efVkSZGmfOgEU5F9fp1mUv94BJ0UNj+u/Q0aG0eLtx4ArVHfHQQIkeLZmViZ
CbaARPRnAnTYEfE7wvTwW1dzdEFQEIcO9BTo2Piwk/UwIEsRv8A2hUwrMyPLJLEk
W0mJU9orJMUNZif3GBanz955MSzwIN7EaaupWVnPW1B2JOo3//xCU0Cs/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE6Lzyy3pttnLuSxoy+Lgm49TIdMB8GA1UdIwQY
MBaAFDpBsVWqttEin9NI6qA9D3kD8SZ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iY2NhZWEtNjhjZS00MjI0LTk3YTUt
MmIzYjRjNzgwNDE5LzEvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iY2NhZWEtNjhjZS00MjI0LTk3YTUtMmIzYjRjNzgwNDE5
LzEvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZFDYkcx
8xf5RKIgPfLhsq8ujG69zyE9clhvlibhhfq+BHYVT5/wal5aOJnrWRDeOq+Jdvlh
xRaUZAX3O2ThzVaxwczavXJMiYgo1qru1iWpso6J/7sm/5ViF7DKuLyltRykVVCW
qoz30GLZ2bnMElUkpG9RCpcr07IiX0QByXybeALolzpp/WpQ2m520EqRBvi36VfD
kzKlapmGkugms3VqAJjURIEeFPcC4Pxyv2XAh7aC8SS6CDXLi6MYTBVjpWfXyord
7zXYFwKvMTcFh3snPbvgdrBWvgBl/0fPp7DqnrMCOPNOCf1gqGbM6sV62EtDVS/r
EjgvV5hhU+85cg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:43 2025 by rpki-client