Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
File: r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json)
Hash identifier: qSPv6/OAFiAhYwUyyDS1l6mN7szwdWuw7C6Itbvl/A8=
Subject key identifier: 16:AB:46:51:CC:EE:A6:9C:2C:3D:F7:17:FA:AB:E7:BC:45:3A:1D:33
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial: 01988DD8D08CFAC8F3B34475171A7275B501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 08:00:53 +0000
Manifest this update: Sat 09 Aug 2025 08:00:53 +0000
Manifest next update: Sun 10 Aug 2025 08:00:53 +0000
Files and hashes: 1: YXk4VQ9w2ydeFfWUpTPAL38DI14.roa (hash: 63k2DxSPaDP/x2Jl3oeCNKnb4PXDg6/RYTgk7tLrZPw=)
2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: xnlXjtL4/UPgcWfYl9PL25/VusINAHMKE2putZv26a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:d0:8c:fa:c8:f3:b3:44:75:17:1a:72:75:b5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Validity
Not Before: Aug 9 08:00:53 2025 GMT
Not After : Aug 10 08:00:53 2025 GMT
Subject: CN=16ab4651cceea69c2c3df717faabe7bc453a1d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:93:50:2c:92:62:15:56:e6:3e:08:e2:42:
94:64:a2:4b:e7:38:f2:a3:9e:f4:01:4b:7e:cb:cc:
87:8b:25:86:d2:b2:64:5e:16:9e:b3:b3:04:90:66:
72:4b:b8:1f:1a:50:4f:90:00:28:3d:94:c1:9e:b3:
77:d6:cc:c7:11:76:f8:f1:18:ce:0e:57:10:e7:a5:
66:20:92:95:58:78:d6:c3:83:26:d0:27:91:03:a8:
83:8b:5d:da:4c:6b:46:1c:83:76:6d:cf:68:33:31:
d4:c6:bd:f9:5a:4c:62:6e:fb:87:bf:e4:e3:9f:b9:
46:4f:6a:c6:01:4b:ff:51:e8:2e:7b:24:b0:ac:d7:
2e:a6:d3:a8:31:6c:c0:b9:a1:7c:19:94:84:eb:9b:
7d:9f:87:ad:92:d4:4a:f0:e0:2a:20:76:ba:10:2f:
c3:a6:69:d9:6d:50:c2:8c:2b:68:c0:ee:07:7c:75:
f5:a1:71:8e:43:3b:bd:74:82:ed:24:90:de:fb:96:
76:46:12:4e:d0:6c:65:0d:88:17:54:86:37:99:7e:
69:d2:d7:e5:01:96:27:13:a1:1f:d4:44:0c:ac:a9:
d2:eb:df:bb:97:b9:92:cf:fa:b1:1b:69:1b:ca:38:
31:88:01:06:0d:c7:bc:a7:d1:97:83:c4:e6:2c:cf:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AB:46:51:CC:EE:A6:9C:2C:3D:F7:17:FA:AB:E7:BC:45:3A:1D:33
X509v3 Authority Key Identifier:
keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:61:c1:a8:7e:20:d6:21:34:f1:22:48:08:e1:93:13:a5:f4:
da:e1:6f:85:44:98:c3:ea:6e:9c:12:62:b3:df:2b:06:ae:d2:
87:bf:49:84:de:ef:ed:3b:0a:53:81:bd:43:f8:c5:8a:eb:52:
e8:27:71:65:ab:94:2c:83:59:e3:e6:4e:82:31:33:df:37:81:
fa:5a:65:12:31:9e:93:15:e2:b1:36:00:f5:3c:c3:59:df:61:
96:5d:43:fc:2e:e6:d5:a6:70:8f:46:36:47:32:fb:15:67:25:
af:fe:80:f8:21:f5:01:3b:19:73:d0:71:8a:78:7f:89:b6:f3:
91:4c:b9:91:e5:14:10:71:f0:f9:cb:5b:ed:75:44:09:4e:3f:
00:c5:96:b6:1f:19:8f:c7:57:59:92:cf:ad:e3:7a:73:66:87:
c4:4c:a0:00:b1:6a:d1:d6:26:b3:3c:65:34:46:ec:bb:0f:95:
69:4f:da:4d:71:3f:e3:14:c3:03:76:e3:12:4a:9e:2c:0f:4e:
bd:69:e6:bf:3f:33:70:36:9a:9f:fb:60:73:c1:2a:0b:0e:7c:
c7:3b:86:3d:10:e9:f5:91:db:0e:63:67:7c:18:06:22:3e:64:
6e:90:21:78:17:ea:6b:ba:23:fe:4b:fd:3f:5c:1f:4c:d7:4c:
6b:80:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:48 2025 by rpki-client