Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: eWaBXG08SGs/2ZR3eGccJHTlcsuaj6Yq35GC5wcgBkE=
Subject key identifier: F4:74:98:78:06:EA:48:37:D0:86:0B:5A:73:B7:C6:42:4B:4F:7E:DA
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 01968736F2237E0D0FE547189DD5383A3457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 15:00:47 +0000
Manifest this update: Wed 30 Apr 2025 15:00:47 +0000
Manifest next update: Thu 01 May 2025 15:00:47 +0000
Files and hashes: 1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=)
2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=)
3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: 3Y6SDDxoDV7PdBf3vhz+Q+oQdzv8PrqjJzwODljDEZE=)
4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:f2:23:7e:0d:0f:e5:47:18:9d:d5:38:3a:34:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Apr 30 15:00:47 2025 GMT
Not After : May 1 15:00:47 2025 GMT
Subject: CN=f474987806ea4837d0860b5a73b7c6424b4f7eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:bd:77:a0:45:9e:0c:20:16:84:bc:2e:f4:
fc:d4:75:a4:75:1a:39:49:10:b1:b3:4f:06:6a:41:
09:f2:f5:ee:6a:e9:7b:b4:10:1d:98:58:2a:39:4c:
d5:62:8c:1c:ec:f8:af:ce:76:7e:24:c7:69:f2:bf:
f9:04:fc:c3:6c:dc:5b:05:59:0e:8d:fb:f0:93:69:
e5:d4:c9:a2:6c:a5:93:b4:2b:e5:2d:df:99:24:92:
c1:9b:c5:85:c3:b7:3e:80:b9:eb:87:37:7a:6b:01:
29:33:4a:80:ce:23:96:d7:2c:d0:63:80:eb:62:08:
91:b5:8d:4c:17:02:f6:02:8b:fb:56:67:69:bd:db:
04:e2:e6:ad:78:d1:6c:df:13:ec:bb:0d:31:0d:74:
3d:68:c4:d6:af:44:2e:06:19:20:fa:43:32:7c:7d:
ba:f7:bd:36:31:ac:36:97:59:dc:20:d7:e7:a4:70:
1a:36:b8:e7:ce:f5:ce:0a:be:e3:5f:75:15:e0:4a:
2d:6d:68:e5:f8:5d:a4:c8:b8:95:b1:e0:a3:cc:d1:
a4:b7:52:1e:88:26:05:42:62:3a:f7:5b:a6:14:e7:
2d:68:c8:76:26:fe:05:7c:28:d4:c0:9b:f3:3f:37:
00:fe:af:c2:40:71:d9:3c:5b:a3:ac:31:20:76:1f:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:74:98:78:06:EA:48:37:D0:86:0B:5A:73:B7:C6:42:4B:4F:7E:DA
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e2:9a:f3:07:d3:e9:50:f5:cc:31:ff:f0:2b:aa:8e:29:eb:
59:32:50:f6:72:00:75:a1:3a:3e:0e:9e:de:a8:22:2f:b8:d7:
62:0e:93:6a:ce:26:4e:e6:2b:ce:9e:91:4c:d0:7b:6c:42:8a:
a5:f8:64:5e:57:bc:e9:97:dc:d7:14:8a:4c:45:ae:e0:99:ce:
b1:2c:8d:66:c2:ef:52:f0:e3:40:34:26:bf:aa:c3:9f:cd:2d:
f2:0b:cd:0b:70:09:e3:f8:cf:94:67:33:e4:51:08:f4:e0:11:
51:3c:7b:e3:55:6b:b8:f0:95:a0:91:02:88:aa:d9:0f:21:29:
6a:95:a5:99:ec:8f:86:18:3e:30:a0:4a:dc:e9:de:3f:bd:94:
0a:da:d6:ba:dd:11:dc:47:fb:03:59:fe:b1:10:fc:94:10:87:
04:3b:f3:14:05:08:5b:94:e4:a7:36:52:36:14:2f:1d:e8:cb:
8f:62:99:72:69:9a:5b:11:83:8c:76:41:43:bb:96:26:c8:9c:
22:08:76:89:ab:03:48:5a:3e:81:65:b9:46:f9:ae:98:90:eb:
bb:e8:e0:16:4d:e7:12:4e:d4:e3:cd:30:06:00:75:49:3a:8b:
b9:4a:d0:26:02:1c:b6:cf:96:13:03:43:e7:9e:e5:e5:34:d7:
32:7a:8d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHNvIjfg0P5UcYndU4OjRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNGNmOTAzMjljNDdiYTM0M2E2NmNkNjVkMzg4MzNhMzU3
YjU5NTUwHhcNMjUwNDMwMTUwMDQ3WhcNMjUwNTAxMTUwMDQ3WjAzMTEwLwYDVQQD
EyhmNDc0OTg3ODA2ZWE0ODM3ZDA4NjBiNWE3M2I3YzY0MjRiNGY3ZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXy9d6BFngwgFoS8LvT81HWkdRo5
SRCxs08GakEJ8vXuaul7tBAdmFgqOUzVYowc7PivznZ+JMdp8r/5BPzDbNxbBVkO
jfvwk2nl1MmibKWTtCvlLd+ZJJLBm8WFw7c+gLnrhzd6awEpM0qAziOW1yzQY4Dr
YgiRtY1MFwL2Aov7VmdpvdsE4uateNFs3xPsuw0xDXQ9aMTWr0QuBhkg+kMyfH26
9702Maw2l1ncINfnpHAaNrjnzvXOCr7jX3UV4EotbWjl+F2kyLiVseCjzNGkt1Ie
iCYFQmI691umFOctaMh2Jv4FfCjUwJvzPzcA/q/CQHHZPFujrDEgdh/m3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR0mHgG6kg30IYLWnO3xkJLT37aMB8GA1UdIwQY
MBaAFKJM+QMpxHujQ6Zs1l04gzo1e1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmIt
MzM5ODVkYjgwNDdhLzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmItMzM5ODVkYjgwNDdh
LzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceKa8wfT
6VD1zDH/8CuqjinrWTJQ9nIAdaE6Pg6e3qgiL7jXYg6Tas4mTuYrzp6RTNB7bEKK
pfhkXle86Zfc1xSKTEWu4JnOsSyNZsLvUvDjQDQmv6rDn80t8gvNC3AJ4/jPlGcz
5FEI9OARUTx741VruPCVoJECiKrZDyEpapWlmeyPhhg+MKBK3OneP72UCtrWut0R
3Ef7A1n+sRD8lBCHBDvzFAUIW5TkpzZSNhQvHejLj2KZcmmaWxGDjHZBQ7uWJsic
Igh2iasDSFo+gWW5RvmumJDru+jgFk3nEk7U480wBgB1STqLuUrQJgIcts+WEwND
557l5TTXMnqNuQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:25:40 2025 by rpki-client