Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: fEwWQgiSyoI+6i2Si/ITEFIhuMBeBU2RMRQ5DTxlVaE=
Subject key identifier: 1A:3A:49:06:12:FF:F3:F8:FC:28:7D:E5:52:64:66:B6:0A:7C:56:B2
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 019784335518EF107DC471FBDD8A863A3A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 159E
Signing time: Wed 18 Jun 2025 18:00:46 +0000
Manifest this update: Wed 18 Jun 2025 18:00:46 +0000
Manifest next update: Thu 19 Jun 2025 18:00:46 +0000
Files and hashes: 1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=)
2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=)
3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: 79ukejGF/Pdiw8AidG7gp7lBj7mSio1W/z5ohgeVJME=)
4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:33:55:18:ef:10:7d:c4:71:fb:dd:8a:86:3a:3a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Jun 18 18:00:46 2025 GMT
Not After : Jun 19 18:00:46 2025 GMT
Subject: CN=1a3a490612fff3f8fc287de5526466b60a7c56b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:b6:49:cb:d1:0d:b0:50:aa:83:bc:a6:10:
f3:31:5b:b3:c5:53:ff:12:22:dc:89:15:03:48:59:
fb:64:32:b7:4c:8e:17:b5:8f:7a:30:18:5c:fa:60:
65:a9:e5:7e:0d:02:a5:ad:eb:18:ac:f9:7a:7e:ee:
62:d1:d1:dd:41:4e:13:01:9f:53:d0:fd:bd:68:39:
a1:45:e2:68:0c:7d:74:3b:80:d9:f3:bb:de:92:ac:
a6:ef:87:02:4d:f3:01:9c:57:69:ac:99:4a:ee:9f:
ce:2f:57:a1:2b:49:c5:85:ee:43:af:52:38:02:4c:
18:58:3a:21:3f:90:b9:13:a9:8d:de:4e:2e:a8:12:
d2:87:b8:30:a7:36:a7:94:f9:7d:55:25:15:2b:67:
90:c8:67:a1:4d:2b:a5:41:ac:49:41:5f:c3:1d:64:
93:cd:45:c7:c0:2e:a5:5b:44:e8:59:ad:9c:22:40:
ad:e5:04:36:15:79:fe:05:34:5a:14:06:45:33:4b:
aa:15:c9:4c:2b:29:49:2c:4a:29:e2:f3:84:18:c0:
5b:db:e0:79:89:7b:f7:26:77:eb:60:c7:2f:8b:31:
5d:39:be:4b:3b:17:50:0b:67:89:0d:5a:bd:84:a4:
7b:46:be:58:f3:98:e8:ca:85:59:e6:b8:61:b3:97:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3A:49:06:12:FF:F3:F8:FC:28:7D:E5:52:64:66:B6:0A:7C:56:B2
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:23:93:fb:6a:e5:c5:44:ca:e4:83:d6:ad:f6:3c:f7:25:93:
26:db:5b:ce:c8:2e:07:f4:0e:77:a1:5d:f0:c7:a6:98:e3:26:
e6:78:f0:36:47:3e:db:8d:6e:7b:67:28:f7:b7:ab:f8:4b:a1:
8b:d4:5f:14:2d:2d:0d:34:47:de:7c:a6:71:2d:f8:13:53:4a:
03:b6:2b:c4:58:b7:1f:6a:d6:97:c0:14:f8:87:ee:73:06:1a:
b4:d8:1b:c8:21:fe:70:81:26:1d:43:27:b0:79:8f:f5:a9:20:
c6:c1:0c:5e:26:38:c7:a1:9e:0d:4c:a4:22:b2:96:54:c5:50:
1c:fa:f3:36:b3:24:ba:21:19:b8:cc:c5:76:a9:b9:60:9b:cb:
52:9e:86:bd:3b:ec:f8:53:64:1c:66:d6:97:0f:9b:6d:48:48:
0a:ee:1c:0f:d5:20:6c:84:b4:3a:45:90:d1:b1:12:d1:b5:74:
04:bd:a7:dd:48:d7:0a:b2:29:47:f0:d6:1a:7f:91:4c:30:23:
5a:64:21:40:66:36:33:fa:ce:6d:e4:97:c3:67:fb:39:db:f5:
d5:7a:cf:cf:74:45:c7:11:2f:43:4c:aa:f5:76:ab:c8:04:b6:
c5:d9:d4:5e:78:bd:eb:b2:9f:b2:43:37:c7:ba:9b:99:47:bc:
02:cd:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:51:09 2025 by rpki-client