Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: WKkyvoMd640ArjIkkGKor/LkkuugtIZ3AGQdVWp91Nc=
Subject key identifier: 65:67:F9:45:44:19:41:FD:13:F0:FD:17:AF:20:C9:F3:78:1B:F9:81
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 01988F228B35EEF1CD2EB7F3149B76952293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 14:01:02 +0000
Manifest this update: Sat 09 Aug 2025 14:01:02 +0000
Manifest next update: Sun 10 Aug 2025 14:01:02 +0000
Files and hashes: 1: DFvO543buXO6QAD6iga-2ghdPJM.roa (hash: OwW2BWhEe6SpLOjaLPnDoeeE6qmWEx2kPzz7nMDDwRs=)
2: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: 147AJRaLzcyNOiw7mcCDTlRgQOx2GYQ3HNV8QsgnwOg=)
3: b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa (hash: phtYuXPVmT4EIKYX0FwVqQycRaEtVPLsT/EPqn9XD1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:8b:35:ee:f1:cd:2e:b7:f3:14:9b:76:95:22:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Aug 9 14:01:02 2025 GMT
Not After : Aug 10 14:01:02 2025 GMT
Subject: CN=6567f945441941fd13f0fd17af20c9f3781bf981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:4e:7b:bb:ad:80:f8:f8:30:cb:98:80:85:
68:f7:33:5b:fc:55:14:fe:cf:5b:d4:9a:d9:2d:3a:
5d:f8:9d:6b:23:6f:db:b2:c4:d4:11:be:72:a2:7e:
c3:d0:b9:28:bf:f0:47:6e:c4:82:cc:50:f0:c2:4f:
2e:26:bf:88:6f:c8:5c:68:a5:5d:4c:e5:7d:74:1b:
96:52:58:70:16:4b:b5:c4:70:85:95:af:a1:0f:68:
e3:58:b3:76:08:0d:0d:48:84:0d:41:90:ab:9c:67:
08:c2:f3:ae:ad:22:27:4c:ee:9a:09:84:4f:88:e8:
99:85:cf:08:71:3f:db:4e:94:24:61:5d:51:0a:39:
12:84:e2:54:99:87:57:0c:84:3f:40:40:20:63:c0:
1a:27:c6:34:98:ee:94:35:63:fb:1c:2a:89:2d:b3:
4c:60:a8:91:69:46:ed:cb:ac:01:87:db:e4:4c:36:
39:d4:48:a0:cb:54:57:de:00:6e:10:9c:c7:04:f7:
a5:fb:24:cd:6b:b8:bf:20:e2:2e:dd:20:75:25:9e:
20:d0:d0:f5:13:a7:b6:6c:69:d9:70:a5:0d:c0:87:
11:de:0d:38:a1:84:96:07:dd:90:18:78:34:5f:e0:
ce:6e:f2:f2:66:bf:23:c1:69:2e:4b:b9:cc:96:b1:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:67:F9:45:44:19:41:FD:13:F0:FD:17:AF:20:C9:F3:78:1B:F9:81
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fb:7c:2f:3c:22:15:2c:e9:9b:c2:9f:fe:90:95:48:6d:b3:
7e:cb:0a:9f:d8:b9:66:92:2a:96:ac:22:a2:d7:5e:60:c8:f4:
e2:59:1c:bc:e3:a5:37:70:bd:06:fd:eb:82:6f:6c:8a:56:32:
22:09:09:8d:8c:18:cf:0b:a6:e1:ef:d8:62:2b:e7:a0:3f:da:
b7:9b:74:81:d2:36:ae:f4:27:87:6f:00:93:4b:9f:2d:15:ee:
d9:6b:70:2a:c4:65:fc:1f:91:1b:05:dd:43:de:a7:6c:96:28:
07:c4:67:8b:64:11:e4:43:6a:b9:06:65:15:c9:81:27:b6:58:
aa:c8:4b:71:b8:6c:6a:d0:c0:32:a4:f3:84:d3:17:a1:19:17:
fd:24:58:75:f3:7a:64:1b:b6:86:83:68:85:38:cd:67:f4:d5:
45:4b:07:72:ff:ae:35:e0:27:f2:7e:94:b4:92:e0:b7:6b:1b:
89:6f:4e:78:ad:2f:ee:43:f7:28:50:95:f9:58:37:19:b2:1e:
e2:b2:df:47:fe:7c:82:1b:8f:f8:ac:dc:e8:c5:19:8b:47:37:
73:7e:70:04:8d:3b:9d:29:0f:aa:ec:e8:1e:3a:51:53:e4:97:
2d:d4:12:2c:02:2f:b7:ab:13:6a:fa:34:5d:41:8f:95:f8:aa:
a8:8f:ef:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:29 2025 by rpki-client