Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: wYT0GukdVVwpPoo7fZodPgWIKaa4v32t//gygGt09GU=
Subject key identifier: 5E:CB:88:BC:8B:C1:C5:D6:9D:D7:62:5F:31:5C:DE:33:C8:E5:40:D6
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 01984A09E33065664A4D0E4E45EDF94B0DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 111B
Signing time: Sun 27 Jul 2025 04:00:18 +0000
Manifest this update: Sun 27 Jul 2025 04:00:18 +0000
Manifest next update: Mon 28 Jul 2025 04:00:18 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: JDQX7NNfgAHK6e4YH36Ahr9rQQDsEoYCZmeE4XWQNN4=)
2: jBg4c1TddaMZ79OO2ACO6rgKQkE.roa (hash: vxMjeBuQHvoGxQ3EbvzgsnvZ7fj/adVRxxvAS0tcfsE=)
3: yN3-coe-yJTzFymhuWAPFUYAkF4.roa (hash: IPNSpgYWxN2jcOf0NhOGeg6e+K9d2+ZzIVVpZsFLZDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:e3:30:65:66:4a:4d:0e:4e:45:ed:f9:4b:0d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Jul 27 04:00:18 2025 GMT
Not After : Jul 28 04:00:18 2025 GMT
Subject: CN=5ecb88bc8bc1c5d69dd7625f315cde33c8e540d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:87:0b:52:94:bb:91:c3:e7:31:95:85:bf:
9a:7d:b5:00:16:1b:4e:7f:74:b3:bf:8e:df:44:cb:
c7:91:06:46:11:38:56:77:15:b4:c3:35:73:a3:d9:
aa:67:6e:0b:f4:e0:c1:9a:3e:7d:eb:14:60:0d:86:
0a:67:6d:37:88:b0:a0:73:3f:32:29:da:28:b3:08:
9f:39:a1:46:8a:18:32:1a:95:fd:1b:72:09:4e:d2:
d4:8f:13:38:60:f6:91:42:64:87:3f:bf:42:0f:de:
0c:19:a2:ca:a7:ae:84:b8:97:ab:2f:80:92:b0:fb:
52:8f:9b:22:11:f3:ed:c8:ab:d0:d2:b3:00:ce:73:
8b:e7:24:2e:e1:01:0c:13:fa:d2:78:19:71:bd:5c:
ce:a4:73:cd:11:83:32:a5:e0:a1:30:a0:dd:db:16:
5a:49:51:c2:31:19:1d:f0:98:41:68:24:5e:dc:ae:
74:d3:34:b7:80:01:74:37:34:a4:cb:5f:23:cd:8b:
1a:c5:cd:44:e6:ac:ed:2b:21:22:47:00:a3:89:94:
c7:a0:b6:43:19:10:9c:5b:41:cd:3d:fe:2d:26:e0:
ff:3e:8b:ae:71:f4:17:1f:5b:a5:04:73:e9:b4:14:
29:d0:c3:0c:d4:43:d2:8a:3e:f8:b0:6d:40:fc:21:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:88:BC:8B:C1:C5:D6:9D:D7:62:5F:31:5C:DE:33:C8:E5:40:D6
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:39:76:8a:f1:67:55:a4:e4:e9:63:df:1a:5b:c2:12:25:a9:
ab:50:37:51:60:39:2b:1d:32:c5:ad:73:8a:64:8f:b0:53:df:
75:7b:a3:ea:47:40:c6:12:04:d0:25:4d:96:02:47:0c:44:11:
8c:37:ae:31:12:84:40:b2:03:62:b6:aa:c7:af:e1:6c:cb:c2:
25:17:94:d0:c7:da:d8:72:f3:11:95:6a:c6:b1:ed:6e:f2:44:
57:78:61:34:d6:55:c9:3e:d3:62:24:8e:02:e7:8b:34:ea:78:
84:9c:7d:52:21:28:d1:9d:b0:bf:2e:93:f9:aa:d2:0c:56:87:
6d:67:da:a5:a6:b9:47:b7:c1:dc:ac:74:51:33:59:0a:df:67:
7d:5a:8f:3a:f4:53:15:79:3a:5d:ce:d3:be:33:d2:e4:57:eb:
0d:85:d5:c4:6c:4a:ac:42:03:2d:a9:c9:50:be:1d:e4:5b:04:
c4:2c:bd:6f:7b:a4:08:c0:91:7e:cc:6d:d7:5d:e9:b6:0b:82:
e4:7f:3d:3a:94:cc:e3:90:93:fe:9d:84:71:4e:bb:cf:5d:38:
0d:2d:58:59:e4:6b:15:88:d0:cf:6e:fb:1c:06:b7:d7:54:02:
81:da:14:b7:6f:64:ff:e1:85:24:e8:c0:8e:9e:26:20:04:7e:
06:e3:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:55 2025 by rpki-client