
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: cym5KRjuR0m5asIyo/LhWQDjC7S7IGer4hPK84FzrkI=
Subject key identifier: 2E:CF:46:D4:79:50:E9:FF:B8:53:B3:C4:F5:25:55:4C:7F:EB:A7:E5
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 01988B0F6F59E28CF5BCFAE02941D9598E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 19:01:41 +0000
Manifest this update: Fri 08 Aug 2025 19:01:41 +0000
Manifest next update: Sat 09 Aug 2025 19:01:41 +0000
Files and hashes: 1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=)
2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=)
3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: jrJsJAvvRnf6P7A+ntpq/h8oH+Erj6rzVknggkAJWxg=)
4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:6f:59:e2:8c:f5:bc:fa:e0:29:41:d9:59:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Aug 8 19:01:41 2025 GMT
Not After : Aug 9 19:01:41 2025 GMT
Subject: CN=2ecf46d47950e9ffb853b3c4f525554c7feba7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:6e:c8:4b:44:96:e5:39:3b:ac:c0:53:ab:
f2:59:67:73:2d:80:f0:0f:ce:5a:31:60:1e:af:ea:
59:fd:60:c4:20:c5:a5:f4:92:ae:2c:40:62:76:40:
cf:6f:b0:48:3c:a3:18:94:e0:69:2f:2b:c9:47:53:
d8:f9:2b:c4:a4:9f:e1:94:b5:1b:c0:99:ce:ef:31:
6e:5f:ce:dd:cd:ae:1f:05:16:4a:e6:7f:48:62:a2:
f3:52:2d:52:f9:12:4a:31:7c:88:30:78:e7:fd:8b:
4d:b0:25:03:83:38:85:53:a4:c3:92:1d:14:bc:0b:
a9:68:83:e1:c4:e3:95:c1:a1:8a:81:5e:6e:01:c7:
f6:23:57:4f:31:99:1b:0a:d5:96:ac:c9:ee:ec:a5:
87:76:41:33:b5:94:ea:10:ba:0d:c4:8f:a5:19:7b:
5b:95:f6:c1:81:82:06:63:a9:16:62:f3:f1:99:4f:
9d:29:b3:ac:9f:91:a2:dc:ed:6a:5d:37:ba:52:47:
81:91:c7:f5:10:a3:60:65:56:6e:d9:69:cf:e6:4b:
f9:ea:e4:a8:e8:67:c3:e7:4e:6b:b4:79:1e:d9:98:
55:1f:a1:b5:b7:bc:c5:19:0e:a9:a0:96:4e:c2:f7:
9b:56:00:ba:38:c1:1b:d9:0f:80:dd:cc:31:aa:0e:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CF:46:D4:79:50:E9:FF:B8:53:B3:C4:F5:25:55:4C:7F:EB:A7:E5
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:54:65:f1:22:af:ae:8e:83:aa:b0:c4:ce:63:53:12:fb:c7:
ab:bb:e0:8a:e9:f3:57:57:c2:bc:8f:dc:e9:31:9a:26:23:ba:
8a:e7:0c:6f:e8:f4:3d:4a:cd:e8:87:5e:c5:9e:31:b5:a8:2d:
97:89:8b:8b:48:6e:82:61:32:60:02:d2:67:ec:94:66:85:25:
3f:e5:4c:14:77:19:33:aa:7e:04:5d:37:f9:4e:17:5d:0c:8e:
c8:80:10:70:a8:18:3f:5a:70:b7:49:ef:33:01:ce:be:1f:ce:
e3:2d:e1:09:14:57:c4:e7:1b:30:94:d1:79:38:52:00:f1:0d:
fb:72:d6:a1:12:73:0e:e3:d2:e5:39:86:4f:09:b3:ea:7f:4d:
12:65:60:eb:5c:8d:5f:a2:95:81:d3:82:f4:c5:32:5a:12:73:
ac:04:71:7d:c0:8a:f7:fa:e8:d1:46:7f:57:73:c2:70:b4:e5:
c3:00:36:a4:01:63:91:35:63:7d:0d:df:99:a8:35:17:ef:cb:
61:7c:04:17:b7:b1:c5:b7:62:74:07:76:53:b7:08:3b:17:9b:
98:ad:8a:08:9f:69:fe:e2:b1:51:e9:ff:fe:88:54:3d:f4:f3:
95:c8:b7:64:19:6b:a5:c1:1c:44:c9:21:5f:03:32:15:31:47:
74:3c:f3:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD29Z4oz1vPrgKUHZWY5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNGNmOTAzMjljNDdiYTM0M2E2NmNkNjVkMzg4MzNhMzU3
YjU5NTUwHhcNMjUwODA4MTkwMTQxWhcNMjUwODA5MTkwMTQxWjAzMTEwLwYDVQQD
EygyZWNmNDZkNDc5NTBlOWZmYjg1M2IzYzRmNTI1NTU0YzdmZWJhN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI9uyEtEluU5O6zAU6vyWWdzLYDw
D85aMWAer+pZ/WDEIMWl9JKuLEBidkDPb7BIPKMYlOBpLyvJR1PY+SvEpJ/hlLUb
wJnO7zFuX87dza4fBRZK5n9IYqLzUi1S+RJKMXyIMHjn/YtNsCUDgziFU6TDkh0U
vAupaIPhxOOVwaGKgV5uAcf2I1dPMZkbCtWWrMnu7KWHdkEztZTqELoNxI+lGXtb
lfbBgYIGY6kWYvPxmU+dKbOsn5Gi3O1qXTe6UkeBkcf1EKNgZVZu2WnP5kv56uSo
6GfD505rtHke2ZhVH6G1t7zFGQ6poJZOwvebVgC6OMEb2Q+A3cwxqg7kIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7PRtR5UOn/uFOzxPUlVUx/66flMB8GA1UdIwQY
MBaAFKJM+QMpxHujQ6Zs1l04gzo1e1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmIt
MzM5ODVkYjgwNDdhLzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmItMzM5ODVkYjgwNDdh
LzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFRl8SKv
ro6DqrDEzmNTEvvHq7vgiunzV1fCvI/c6TGaJiO6iucMb+j0PUrN6IdexZ4xtagt
l4mLi0hugmEyYALSZ+yUZoUlP+VMFHcZM6p+BF03+U4XXQyOyIAQcKgYP1pwt0nv
MwHOvh/O4y3hCRRXxOcbMJTReThSAPEN+3LWoRJzDuPS5TmGTwmz6n9NEmVg61yN
X6KVgdOC9MUyWhJzrARxfcCK9/ro0UZ/V3PCcLTlwwA2pAFjkTVjfQ3fmag1F+/L
YXwEF7exxbdidAd2U7cIOxebmK2KCJ9p/uKxUen//ohUPfTzlci3ZBlrpcEcRMkh
XwMyFTFHdDzz1g==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:50 2025 by rpki-client