Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: Nmi5SBJ+P1Xf14nJ9wLiCHcrq0QbZ/dGQoBMa1TFiZM=
Subject key identifier: 21:F0:8F:88:6B:0D:5C:8A:0E:56:A8:47:B4:88:A8:93:23:A1:E5:E3
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 0198729890FC2246D5AFE94DDF99C268F436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 01:00:57 +0000
Manifest this update: Mon 04 Aug 2025 01:00:57 +0000
Manifest next update: Tue 05 Aug 2025 01:00:57 +0000
Files and hashes: 1: 6dFmm5sRY32IWZd8jLU8_s5imvY.roa (hash: udPQ8wWzpwcAiDjrHHyq/uTqqzcEbt4FowH3Qt/QIEM=)
2: LHDFKCfWLJp2mBfByLfhuS_iDkY.roa (hash: hhocfI4M747eSln+lUvkyI8Ag+8FG16kwPY8wAbPOQk=)
3: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: ZVGLkZHZZI2UDF4JwJgLEl2tV3+6LxN6JBwm/faBDTI=)
4: hE4J7-nVjBP1I1amWriRZQbCRjQ.roa (hash: t96fk3QnxrV27k+4LVx0l6UARkEoivZQZo9G+qQHzNc=)
5: tVLlOiV7SvnosXMuOA6u9tK4RqI.roa (hash: /FYDglX8ng94EWH9NM8VS2sIZeZUQbmdZE0FSeyFXmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:90:fc:22:46:d5:af:e9:4d:df:99:c2:68:f4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Aug 4 01:00:57 2025 GMT
Not After : Aug 5 01:00:57 2025 GMT
Subject: CN=21f08f886b0d5c8a0e56a847b488a89323a1e5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:33:75:b1:a3:e6:6b:c5:eb:4a:2b:d8:da:
ff:9c:a7:32:a8:ea:59:b0:01:48:40:96:ed:96:f4:
4e:c3:18:ab:24:64:ae:96:49:29:92:18:ee:84:79:
9c:2c:db:48:8a:3d:77:5f:77:e2:25:5d:a6:8c:3a:
48:5b:23:39:ba:a2:83:15:d2:ac:01:db:2d:4a:ba:
16:7e:56:de:b5:b6:10:90:fb:b2:30:26:a4:13:e6:
d3:3b:39:05:09:a2:93:d8:d3:9c:49:08:fc:f6:92:
07:e1:88:dd:c0:6b:cc:53:86:97:fb:cc:29:41:23:
6c:61:2a:92:fd:e1:48:bd:ed:6b:1b:38:6b:db:ab:
f7:c7:6a:87:24:69:6b:51:2c:c6:9d:23:f8:08:df:
eb:4e:d6:0a:99:4a:62:8b:69:57:a4:b9:99:c0:6c:
25:82:1a:45:67:45:03:27:5c:2b:f4:38:62:b3:68:
21:72:f7:1d:85:5e:27:8b:a1:01:ae:dc:2e:32:32:
66:07:3b:41:47:59:79:83:13:2f:9c:03:a0:86:cc:
76:89:9e:20:e7:33:53:e5:cd:e0:9d:f4:0a:39:a0:
10:c2:c1:03:b7:0d:62:0e:4d:bb:1a:e8:67:0e:9b:
0f:82:a1:47:68:bf:41:23:44:c3:72:6d:6e:3d:51:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:8F:88:6B:0D:5C:8A:0E:56:A8:47:B4:88:A8:93:23:A1:E5:E3
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:49:e0:05:35:cc:88:d7:5e:15:9d:76:5f:b8:58:fc:54:41:
6d:bd:3e:bc:af:20:67:a2:d8:bd:fb:fa:d2:e4:e4:b0:d3:9c:
56:52:5b:62:28:64:73:9b:a1:9a:17:7d:3b:7b:df:8e:ef:2f:
2e:3d:b6:5c:64:06:95:b1:09:ae:73:b4:2b:1f:31:f8:39:c8:
31:b6:ed:55:85:eb:33:b7:e2:89:c1:a9:a1:a5:b5:b5:61:68:
ea:82:01:72:60:32:bd:62:cf:92:72:f9:5a:1a:03:13:4c:f6:
4d:de:84:30:0b:4c:ef:f0:49:01:c0:68:56:0f:fc:1a:9b:3f:
18:18:08:c5:57:0f:11:c9:81:cd:a7:70:2d:79:08:af:ca:35:
75:cd:c1:82:57:82:1c:7f:05:4d:fa:a3:3a:3d:2d:12:d5:a2:
ba:50:31:b9:f4:30:30:24:df:55:88:49:ed:63:e4:13:c2:7d:
dc:21:4c:c9:9a:95:ac:26:35:ae:95:75:bc:10:76:0a:a4:2a:
03:68:c4:dc:cf:b0:7c:a2:8a:9b:c2:3a:d6:cf:b6:c0:7e:e3:
6b:c7:45:5c:19:c7:a7:38:94:a1:d3:d2:71:47:26:45:60:d1:
de:7b:95:82:80:bd:a4:40:50:42:21:72:a4:21:d6:8f:98:83:
fa:d7:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:06 2025 by rpki-client