Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
File: OkGxVaq20SKf00jqoD0PeQPxJno.mft (raw, json)
Hash identifier: xJ1wOagyuDE7+rst3rgus9aTcGL+zHB2JlwRrKhGRRs=
Subject key identifier: 10:C5:D9:CE:5D:94:97:94:02:97:78:F3:4B:48:63:7F:7B:65:1D:5A
Authority key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Certificate issuer: /CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Certificate serial: 019A4F2B23048D8EBCC35879CC6F194A4678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
Manifest number: 1214
Signing time: Tue 04 Nov 2025 14:00:18 +0000
Manifest this update: Tue 04 Nov 2025 14:00:18 +0000
Manifest next update: Wed 05 Nov 2025 14:00:18 +0000
Files and hashes: 1: DUYlFbh6FULGzgdthf_PMDp6hOU.roa (hash: JR7UbEi2bM6dLHHY3xrq1gui3NHbn1GkWRWkFGTRYw0=)
2: OkGxVaq20SKf00jqoD0PeQPxJno.crl (hash: 5jkVKbD2wyvyb5vOB0Ne6wHWdkb9lY6fbaixYgg7FHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:23:04:8d:8e:bc:c3:58:79:cc:6f:19:4a:46:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Validity
Not Before: Nov 4 14:00:18 2025 GMT
Not After : Nov 5 14:00:18 2025 GMT
Subject: CN=10c5d9ce5d949794029778f34b48637f7b651d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:fb:0d:b7:b6:db:1f:5d:53:c5:d7:83:3c:
64:29:01:a3:29:82:43:1d:75:95:ce:5a:d0:a3:40:
03:3a:4f:b2:60:05:80:c0:1d:ac:70:24:c4:91:3e:
f4:92:8c:e1:c5:dc:c6:2a:9b:0c:cd:18:86:df:2e:
84:f1:33:3f:6f:68:ee:20:1f:8d:e6:df:1d:4d:7e:
22:b0:ee:66:2d:e0:ab:25:dc:0c:df:23:a8:fe:18:
22:ad:ab:a1:48:dc:27:ed:02:df:71:79:3c:34:ba:
d9:60:b4:b3:7c:f2:c7:9f:e6:dc:3e:9c:71:bf:3c:
65:93:fb:28:21:eb:bd:8e:72:aa:fe:98:e7:c8:3d:
66:3a:64:f1:a6:d8:4b:68:1c:ca:aa:b2:16:8f:a2:
f3:54:d4:f8:8d:72:65:68:b8:54:c7:2a:42:55:de:
f0:af:a7:0e:5f:79:33:81:ed:4e:94:4a:5d:86:4f:
ac:b8:7b:d0:85:56:1b:31:a2:22:21:1e:5b:a3:c4:
05:49:5f:f7:7c:1b:57:b3:5e:e1:03:8f:ca:51:6a:
45:bf:29:fa:42:60:1c:2d:76:71:23:02:54:47:d7:
06:10:e6:59:88:b7:2b:0c:be:40:84:cc:c4:72:cc:
7d:0d:9b:6c:a3:43:b4:be:80:33:68:93:5b:35:21:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C5:D9:CE:5D:94:97:94:02:97:78:F3:4B:48:63:7F:7B:65:1D:5A
X509v3 Authority Key Identifier:
keyid:3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:47:ef:51:2b:31:e1:69:cf:7b:53:b6:2a:b2:fd:f1:da:72:
a4:47:ab:48:57:8a:f3:89:78:e9:f3:06:3d:f7:7e:2f:e2:0c:
31:6f:33:ee:b0:21:37:9f:c8:25:30:4c:a1:a8:55:f7:7a:64:
0b:97:2b:88:25:e7:12:40:dc:0a:cb:64:e2:ca:a3:eb:af:b1:
c2:05:a3:50:86:de:56:d6:ae:67:98:8f:9a:e3:16:fc:b2:e8:
f4:26:fb:73:9a:01:d8:f1:5c:39:11:65:cd:4a:fd:8b:01:75:
9c:cb:4e:45:01:93:d8:73:47:2a:44:da:e4:63:4f:ec:ff:d7:
04:0f:19:dd:42:5e:a2:f2:95:7c:57:73:4d:a9:9a:3a:c9:de:
17:7a:8e:1c:a2:98:0f:29:c0:2b:4f:22:41:6f:7e:9b:c5:96:
16:39:b5:cc:3f:ee:db:f9:58:ee:9f:65:64:24:a9:34:4b:41:
58:b1:78:84:6e:eb:90:2c:66:ce:3e:ea:4b:9f:86:6f:1f:d6:
41:7c:3b:44:66:19:f5:a5:96:2d:17:34:bd:18:21:a5:4b:35:
e3:80:ec:93:82:75:7d:b9:0e:10:64:d7:2c:0d:53:17:a8:e9:
ef:6f:59:10:35:5f:1e:aa:ac:89:0f:3d:e1:56:6b:e2:7d:98:
7d:e6:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:37 2025 by rpki-client