Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: wTmtsYH+E6I1n4J8XRk1sSVc1t/NhenAEHVJBeBHLzM=
Subject key identifier: 7F:81:A0:32:7D:00:99:7E:1D:61:6D:D3:43:77:6E:7C:FD:5B:E8:42
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01976A05CA01B851A825B3A78D1FA62142EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1594
Signing time: Fri 13 Jun 2025 16:00:53 +0000
Manifest this update: Fri 13 Jun 2025 16:00:53 +0000
Manifest next update: Sat 14 Jun 2025 16:00:53 +0000
Files and hashes: 1: 6dFmm5sRY32IWZd8jLU8_s5imvY.roa (hash: udPQ8wWzpwcAiDjrHHyq/uTqqzcEbt4FowH3Qt/QIEM=)
2: LHDFKCfWLJp2mBfByLfhuS_iDkY.roa (hash: hhocfI4M747eSln+lUvkyI8Ag+8FG16kwPY8wAbPOQk=)
3: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: XekRs2cP8Vuj+3heMTaUwnPMooQCezvGZv8xt8Bz5ik=)
4: hE4J7-nVjBP1I1amWriRZQbCRjQ.roa (hash: t96fk3QnxrV27k+4LVx0l6UARkEoivZQZo9G+qQHzNc=)
5: tVLlOiV7SvnosXMuOA6u9tK4RqI.roa (hash: /FYDglX8ng94EWH9NM8VS2sIZeZUQbmdZE0FSeyFXmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ca:01:b8:51:a8:25:b3:a7:8d:1f:a6:21:42:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Jun 13 16:00:53 2025 GMT
Not After : Jun 14 16:00:53 2025 GMT
Subject: CN=7f81a0327d00997e1d616dd343776e7cfd5be842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:5d:47:36:a7:b2:fc:37:a4:7a:f2:f0:78:
01:9a:fe:23:28:36:2a:33:07:44:b4:1b:87:40:00:
cb:95:38:10:38:7e:93:0d:1f:e7:4e:be:4b:9a:44:
1f:ee:5a:db:cc:65:e0:ac:31:b8:c2:9d:f7:93:0c:
23:00:98:26:41:f8:f3:4f:83:5f:e2:9a:ae:1a:8c:
f5:6f:b3:7d:6b:87:26:63:e2:02:36:22:f9:2b:57:
f9:7e:29:1f:d7:1a:ad:de:09:3e:ed:13:e6:9c:c6:
a0:02:44:42:14:6c:8d:34:a0:a2:92:25:96:0f:9c:
11:53:e6:cf:90:ba:0c:43:43:67:b7:bd:fb:e8:3d:
50:4a:9f:28:ce:ca:d3:b2:a3:95:d1:b1:36:cb:fd:
74:52:19:61:ac:b8:95:d3:df:3d:0a:73:7e:02:5a:
ed:7a:2a:2e:17:af:cb:f5:fa:58:bf:ea:a0:63:a4:
e2:09:cf:98:f4:1f:ff:5c:ec:03:0b:4c:fb:c5:4c:
32:da:8e:57:b7:fc:46:f9:36:a9:6f:e9:86:cb:73:
b4:1f:83:cf:ec:d9:e8:04:6e:6a:98:00:1a:e6:d6:
8f:2d:c5:4e:a3:66:94:ea:64:d2:55:9a:9b:b5:43:
95:98:a5:72:bc:e7:e9:35:e9:c0:c6:92:f1:bf:e5:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:81:A0:32:7D:00:99:7E:1D:61:6D:D3:43:77:6E:7C:FD:5B:E8:42
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9a:11:07:fc:01:98:20:66:2b:bd:ab:91:79:ff:fc:52:e1:
90:8a:13:dd:38:42:5a:d7:9e:5a:63:fc:67:72:95:7b:3b:2f:
1f:19:11:6b:85:02:87:dd:e7:2a:d4:7c:6c:75:07:c8:ab:1d:
67:0e:55:53:35:08:11:7b:a9:e0:dc:c9:fb:5c:16:2c:78:16:
97:cb:aa:c5:d2:dd:a4:f8:b6:b1:e8:0f:cd:14:b7:58:27:65:
37:60:4d:7c:a3:08:73:d2:c4:6f:1c:66:bc:44:a8:b2:bc:4d:
a8:0b:86:b4:46:a0:88:2c:06:bb:fc:12:c5:73:1f:38:b6:b3:
8a:6e:ca:5a:c4:a9:f8:3e:fb:a8:9c:2d:d6:ea:fd:20:6c:73:
e6:34:c0:86:b0:52:97:ae:9d:d1:12:ec:16:ed:83:1e:1c:60:
3a:1b:29:75:05:86:29:3a:aa:8e:96:00:91:94:f7:56:03:1c:
f9:8c:45:36:47:fa:3c:6e:3e:39:93:9a:46:68:ca:9d:7d:38:
19:e3:44:3b:7b:ef:bc:e8:b5:9a:dd:91:c3:88:7c:13:be:0c:
dd:ec:e9:c0:9d:e7:a6:77:88:3f:fc:80:b2:7d:d6:79:0d:98:
17:3e:9a:e9:9a:68:cc:bf:2d:a0:00:a2:01:a2:89:79:d3:d9:
93:1e:bf:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBcoBuFGoJbOnjR+mIULvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4
NTU1MzkwHhcNMjUwNjEzMTYwMDUzWhcNMjUwNjE0MTYwMDUzWjAzMTEwLwYDVQQD
Eyg3ZjgxYTAzMjdkMDA5OTdlMWQ2MTZkZDM0Mzc3NmU3Y2ZkNWJlODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39VdRzansvw3pHry8HgBmv4jKDYq
MwdEtBuHQADLlTgQOH6TDR/nTr5LmkQf7lrbzGXgrDG4wp33kwwjAJgmQfjzT4Nf
4pquGoz1b7N9a4cmY+ICNiL5K1f5fikf1xqt3gk+7RPmnMagAkRCFGyNNKCikiWW
D5wRU+bPkLoMQ0Nnt7376D1QSp8ozsrTsqOV0bE2y/10UhlhrLiV0989CnN+Alrt
eiouF6/L9fpYv+qgY6TiCc+Y9B//XOwDC0z7xUwy2o5Xt/xG+Tapb+mGy3O0H4PP
7NnoBG5qmAAa5taPLcVOo2aU6mTSVZqbtUOVmKVyvOfpNenAxpLxv+WOZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+BoDJ9AJl+HWFt00N3bnz9W+hCMB8GA1UdIwQY
MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt
MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0
LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5oRB/wB
mCBmK72rkXn//FLhkIoT3ThCWteeWmP8Z3KVezsvHxkRa4UCh93nKtR8bHUHyKsd
Zw5VUzUIEXup4NzJ+1wWLHgWl8uqxdLdpPi2segPzRS3WCdlN2BNfKMIc9LEbxxm
vESosrxNqAuGtEagiCwGu/wSxXMfOLazim7KWsSp+D77qJwt1ur9IGxz5jTAhrBS
l66d0RLsFu2DHhxgOhspdQWGKTqqjpYAkZT3VgMc+YxFNkf6PG4+OZOaRmjKnX04
GeNEO3vvvOi1mt2Rw4h8E74M3ezpwJ3npneIP/yAsn3WeQ2YFz6a6ZpozL8toACi
AaKJedPZkx6/yA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:20 2025 by rpki-client