Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: LOOzNDOkv2oQ0AJBCk3kvu3t2XVZJ7qJPUIeVKAm3RQ=
Subject key identifier: 47:A0:C2:A9:14:AA:45:2E:9E:4E:0D:86:43:99:13:69:22:DF:6D:37
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 019873E1E7DDEF85F4F179B3B7E26807E42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 07:00:41 +0000
Manifest this update: Mon 04 Aug 2025 07:00:41 +0000
Manifest next update: Tue 05 Aug 2025 07:00:41 +0000
Files and hashes: 1: 5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa (hash: XAzmjxdrpIx5mLyehPHseK/+jaakSPTIZ07v9R3ktfQ=)
2: 7gpUO99SfoacmIWvz5o-z3ESpPc.roa (hash: jBBU4x8HtuG0AJgjijT3pv++S+IgCjRtCv3AjftIABQ=)
3: JOJ9b2WkEIXJpzQl9CDXk_CHY94.roa (hash: SAmYAd0xvQRGMk1x62ICIfIVJyfWTunRcVeOhZ1E3l0=)
4: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: zBZJFAqCqOX4ISjN4mdJ5yYWBtASTZpLdrBztpNwQFI=)
5: _MMbboen6fjGZxdl1sjrAWa0F6o.roa (hash: lasMNF+CDNUkmhfnkFUMcQ2+Q/sn4RwC142SJaDCsYo=)
6: qTT5EzYYejgHx_-gozkgtiyWSxE.roa (hash: WcMM5EKO8L7zVDvgOOXzTCPHLyfkpMtxpa7CTFKHemk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e7:dd:ef:85:f4:f1:79:b3:b7:e2:68:07:e4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Aug 4 07:00:41 2025 GMT
Not After : Aug 5 07:00:41 2025 GMT
Subject: CN=47a0c2a914aa452e9e4e0d864399136922df6d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:59:ca:af:fe:33:38:29:da:d8:50:28:74:
76:ab:d4:1b:6f:63:bb:10:49:7d:ca:b1:18:9a:a2:
cf:5e:02:df:87:cf:ce:b6:ac:ee:de:85:dc:32:d4:
96:b7:4b:10:e6:eb:55:29:46:75:47:ba:2c:d1:f2:
fa:2c:90:60:a4:bf:4d:6a:5c:36:e9:ae:f1:83:43:
e1:2c:aa:36:95:81:98:b8:90:8b:7c:bc:40:b4:b4:
98:81:f0:08:11:9b:c5:d7:01:eb:38:80:67:e7:10:
f7:15:11:56:bb:a4:78:b9:4a:3b:dd:3f:7d:ef:3f:
80:55:0f:05:b4:9c:65:cc:d7:e2:73:40:35:ce:5d:
6f:47:3b:24:0c:0e:af:7f:bf:0a:17:dc:49:a2:3a:
e8:c0:b8:36:54:46:e0:22:e6:62:ef:62:6e:6f:08:
7e:9a:b0:62:07:fa:a7:76:78:c0:bc:70:d3:d7:b5:
4d:35:ba:47:20:dc:1d:0d:7e:8f:6e:9b:83:1a:57:
95:8f:de:0b:cd:b6:05:2d:e4:76:92:c7:26:de:73:
44:ed:e3:1f:6a:98:ee:3a:37:96:a8:43:a0:ac:06:
ee:9d:d3:f5:b9:99:98:69:37:6c:fe:6a:08:68:a4:
38:99:95:48:cd:aa:c4:e5:8a:48:af:48:78:0f:ec:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:C2:A9:14:AA:45:2E:9E:4E:0D:86:43:99:13:69:22:DF:6D:37
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fa:98:53:ca:0d:8e:75:54:41:16:46:a8:e0:ca:97:6d:ea:
38:7d:e7:74:57:60:7c:49:26:a2:5b:f7:84:75:55:17:32:1b:
10:a1:32:81:c7:a6:ed:85:eb:e2:bb:8d:c9:d0:47:b0:a4:5b:
bb:e1:c3:41:e9:ae:bd:7c:5c:e1:f0:5b:db:d7:08:0e:d6:ee:
7d:af:e1:f7:fe:63:97:90:31:eb:9c:1a:a6:32:9c:62:ae:6f:
94:55:a5:49:19:45:40:34:d5:2a:26:1f:64:64:df:8a:16:61:
69:ae:b3:ef:3f:10:f3:63:09:31:93:a3:69:f4:cf:ea:61:9f:
01:b2:29:4a:22:67:64:ff:15:6f:40:af:be:aa:df:50:d7:e0:
6f:1b:12:db:b5:3d:63:a0:d3:7e:06:d4:9c:ab:f1:4a:6f:da:
e4:77:3e:53:99:fb:b4:cf:35:2a:74:7d:88:f9:ec:c6:ee:72:
91:ce:da:fa:5d:17:0e:b9:2b:9d:69:ba:95:4d:66:4f:f1:65:
dc:df:84:20:f5:2f:88:eb:fd:6b:08:9b:b0:4c:d4:af:6f:c5:
51:cb:b1:cd:cb:0e:bd:2e:e4:85:33:84:d9:62:2c:a5:d0:04:
a0:42:e8:c9:4a:49:ae:59:e8:e0:87:8e:f7:a9:10:49:24:d7:
d8:d4:67:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:40 2025 by rpki-client