Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: 13YcjTokcrHYUE3WTl8026MVKAxmvibBS6iHcO34jxk=
Subject key identifier: C7:BF:94:03:EE:62:B3:F7:C1:EE:DD:2C:4B:43:64:97:95:28:0D:4D
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 01984AE56B3C0250BF942FBC0D9A5337AC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 08:00:05 +0000
Manifest this update: Sun 27 Jul 2025 08:00:05 +0000
Manifest next update: Mon 28 Jul 2025 08:00:05 +0000
Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: wxemhfNLm2SDEWkscYldJwwz9ZGlKdRBi8DLgq9Mdy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:6b:3c:02:50:bf:94:2f:bc:0d:9a:53:37:ac:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Jul 27 08:00:05 2025 GMT
Not After : Jul 28 08:00:05 2025 GMT
Subject: CN=c7bf9403ee62b3f7c1eedd2c4b43649795280d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:61:9e:46:8f:2e:dd:92:c4:69:50:86:2f:7e:
00:82:2d:d8:91:83:8f:2a:4f:18:92:61:20:87:b1:
e5:b6:2d:d0:4d:3d:29:50:0d:c2:bf:fc:53:9d:8f:
0d:00:7c:69:3d:87:7f:c1:17:d3:03:2b:b4:dd:9d:
6d:06:2c:02:16:e7:dd:9a:1e:fa:7b:dd:88:ea:4a:
89:21:12:e3:22:00:89:72:40:1e:19:0d:1f:6b:ba:
70:26:79:73:7a:d5:a2:40:ba:83:fd:8d:3e:88:79:
a5:ed:4d:ad:5c:10:92:3d:22:2a:0a:79:97:72:a7:
00:51:90:07:21:d8:90:22:a7:c6:90:11:36:67:9c:
c7:2b:43:ba:3c:8d:e2:79:90:d5:32:f8:66:34:9a:
9c:28:75:f3:36:78:03:67:66:18:92:17:ff:7e:c8:
53:c1:1a:0f:7c:f1:e4:8d:59:55:35:4f:0f:1c:6c:
ae:62:59:58:89:44:74:64:b2:89:68:e5:bc:64:45:
8f:76:7d:62:25:1c:56:3c:36:85:68:97:25:3c:44:
44:64:60:19:79:60:4b:47:7f:0c:61:39:6a:95:85:
76:07:ce:fe:ea:88:33:2e:f7:12:11:e6:84:14:61:
0d:03:e2:2b:e9:28:22:da:1d:b3:c1:04:dd:1b:25:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BF:94:03:EE:62:B3:F7:C1:EE:DD:2C:4B:43:64:97:95:28:0D:4D
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:95:f8:b7:d1:d0:79:18:29:2c:df:a8:8a:5a:27:2e:61:b7:
95:d3:1a:bb:f4:bd:d3:29:01:a2:6d:49:af:d6:b3:7e:31:5e:
7b:72:fc:d8:70:1b:05:86:5c:e5:8f:b8:47:7a:49:87:ca:80:
3c:ee:d0:3a:da:3d:a1:58:7b:8b:43:02:76:38:c5:bd:aa:22:
62:73:05:ec:33:3b:81:c4:af:93:a6:0b:c9:27:d1:d5:e6:d6:
16:08:37:e5:85:59:bf:9f:da:43:74:66:b5:bf:fb:f7:35:8c:
f2:c1:34:08:62:ae:4b:74:98:43:a7:2e:3b:03:08:25:65:86:
01:59:f5:de:ff:0b:9f:d2:59:9b:1e:15:82:96:b7:e9:35:d6:
da:7b:52:05:23:cb:9e:1f:12:31:70:ce:6f:29:85:d2:e4:1d:
a7:68:5e:76:cf:c8:c2:d9:a9:90:55:53:1f:89:cd:ee:2e:ed:
18:db:25:06:fc:5c:1c:25:25:30:60:0e:d3:b8:9b:a3:86:62:
11:5b:0d:85:6e:ed:95:25:e3:b0:7f:47:c1:76:2c:72:ba:9c:
5c:eb:3b:fa:6e:ee:89:0b:d6:ef:92:4a:f9:ac:94:46:fb:b4:
e5:84:1d:7c:6e:b8:cc:7c:af:17:51:32:73:f0:e7:ae:af:23:
e5:5f:ad:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:41:04 2025 by rpki-client