Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: 1TwxhSNSjtqU0EDfpXuubS/MEGejOwrixc3LJH0UPzc=
Subject key identifier: 02:B7:6F:B2:38:36:D1:83:32:1E:0F:14:82:FD:7E:12:52:A6:AF:8D
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019A53085CECE7DA421ABA0524BC7E029946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 08:00:48 +0000
Manifest this update: Wed 05 Nov 2025 08:00:48 +0000
Manifest next update: Thu 06 Nov 2025 08:00:48 +0000
Files and hashes: 1: DFvO543buXO6QAD6iga-2ghdPJM.roa (hash: OwW2BWhEe6SpLOjaLPnDoeeE6qmWEx2kPzz7nMDDwRs=)
2: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: rDqnmaJwR+kUb1QEOfjHF4QWVpbaTuX+rPNQwt6XDS8=)
3: b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa (hash: phtYuXPVmT4EIKYX0FwVqQycRaEtVPLsT/EPqn9XD1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:5c:ec:e7:da:42:1a:ba:05:24:bc:7e:02:99:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Nov 5 08:00:48 2025 GMT
Not After : Nov 6 08:00:48 2025 GMT
Subject: CN=02b76fb23836d183321e0f1482fd7e1252a6af8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:03:c1:b3:ce:90:d1:65:c3:99:af:86:1b:
6c:ef:2d:9c:2e:59:c1:50:5c:3c:7c:cc:e6:39:48:
e4:59:80:a6:d9:a6:cb:25:77:91:80:b9:04:5a:9c:
6b:4f:48:5a:f6:0f:b3:68:21:ca:f3:fd:aa:65:ee:
5e:85:9b:a8:d5:3d:38:3f:d6:fb:b5:79:41:75:02:
c1:80:dc:76:3c:2f:ea:fc:c0:55:9c:c5:86:c6:09:
12:f2:a4:eb:96:87:0a:23:50:80:16:ba:62:11:ac:
60:a1:2e:0d:33:18:dc:12:cd:d6:f1:8e:90:b6:d4:
77:ec:15:93:72:be:e1:fa:da:cc:86:93:19:84:30:
0b:67:e0:ea:3a:b0:64:57:51:de:54:bd:dd:39:3f:
75:84:e1:14:59:4d:52:dd:02:2d:6d:00:67:7e:07:
a1:c0:0f:f2:ea:3d:7b:ab:86:fc:18:2a:23:2a:c9:
2e:8e:e8:6d:d5:f9:e3:51:75:89:cf:4e:9b:c0:e5:
a1:a6:40:04:2b:5d:27:d2:2c:df:77:fd:b7:56:4e:
a2:48:10:1f:b8:ac:27:dd:b2:82:a7:b7:02:ac:60:
f0:6d:e6:41:2a:f2:08:93:88:19:b9:52:e6:ad:cf:
97:c6:4d:0e:c2:c9:d5:71:cf:1e:3e:04:77:74:23:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:6F:B2:38:36:D1:83:32:1E:0F:14:82:FD:7E:12:52:A6:AF:8D
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:2d:cb:b6:b1:38:46:93:de:cf:88:2b:8f:a1:e5:d7:2a:
ac:08:f8:c9:67:16:ed:7e:ce:c2:8a:13:6e:6d:00:04:66:33:
d4:f9:68:2b:44:e3:67:42:20:2e:10:ad:c6:6d:b2:4a:fc:16:
c4:ff:2f:66:8b:39:46:db:b4:d8:69:d2:ca:7f:72:45:c0:da:
51:16:33:59:9b:ed:20:af:04:eb:09:59:b4:ab:53:78:c7:c1:
e4:38:11:94:b0:a0:53:a0:e7:4b:8b:bd:1a:44:83:98:b1:fc:
77:14:d0:7b:4d:86:8b:37:3a:d9:64:0f:9e:49:ff:f3:4a:86:
a2:3b:f8:63:60:c8:25:02:28:ef:36:c8:a5:a1:5c:c5:cd:bf:
3f:4d:29:af:3e:87:28:e2:3f:45:c1:4d:19:a8:38:0f:61:05:
05:74:32:50:38:93:67:b3:24:74:fd:77:3e:ab:bd:df:e7:d8:
27:cc:46:c4:a6:5c:47:5f:ad:8e:ef:76:32:56:f0:79:25:86:
79:51:aa:46:db:80:79:af:05:a6:07:6f:77:80:24:64:b4:25:
f9:fa:83:55:b0:21:f8:e5:d9:c1:83:e7:77:07:15:67:66:29:
e5:2b:76:64:df:25:99:07:5f:26:1c:b4:c3:04:7b:38:a7:c1:
35:3f:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:56:43 2025 by rpki-client