Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: LMZefa8F2TqN/6Cme996x9jXGNVSsWetfO365JHOgXA=
Subject key identifier: 73:11:D9:2C:A3:ED:D9:B0:DC:DC:9E:5D:E4:7B:51:E7:EB:59:E8:62
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 01984B5502E2DC61906377CB95DB95B1E629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 10:01:58 +0000
Manifest this update: Sun 27 Jul 2025 10:01:58 +0000
Manifest next update: Mon 28 Jul 2025 10:01:58 +0000
Files and hashes: 1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=)
2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=)
3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: MDlg3sn090I7EWZtAF398+izwk5OwIqWJkNhGIxkFd0=)
4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:02:e2:dc:61:90:63:77:cb:95:db:95:b1:e6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Jul 27 10:01:58 2025 GMT
Not After : Jul 28 10:01:58 2025 GMT
Subject: CN=7311d92ca3edd9b0dcdc9e5de47b51e7eb59e862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:4c:d6:65:a2:40:72:69:f8:13:50:05:b8:
08:05:78:44:0a:d8:fa:83:c5:63:c8:eb:85:c3:aa:
1d:27:dc:77:9b:a6:3a:6b:8f:9c:3f:47:b7:c5:dd:
0e:d9:5b:a0:c9:47:ba:e8:75:32:19:55:06:b8:e7:
ef:35:cd:16:7e:4e:4a:23:5d:00:58:da:32:83:c0:
03:22:41:38:75:bc:34:b1:99:c8:6c:fd:1b:e6:d4:
fe:56:0f:3c:e5:59:f1:20:58:4d:cf:b6:b0:22:2b:
b5:33:9d:36:16:11:86:3d:52:75:c1:4b:fb:a3:1a:
bd:1e:1e:98:0f:a3:60:ce:6c:30:27:c0:4a:ef:48:
91:61:a9:91:2a:84:44:35:35:cf:14:ce:fe:c5:10:
8b:47:c7:9b:df:69:4e:3f:65:5c:2a:05:9f:bd:a8:
2e:b5:03:b2:15:d1:40:c6:74:5f:73:a6:e0:d0:d9:
1e:a5:78:2a:4d:4e:16:d8:fb:35:19:f1:81:fc:ba:
dd:9e:dd:d3:3b:1e:60:42:64:cb:ff:60:6a:7b:c7:
5b:34:e4:e0:5b:55:ea:cb:7f:81:36:af:7a:a2:63:
4a:f9:87:31:ff:19:aa:88:84:7e:15:58:fb:8e:da:
30:cb:f9:26:03:f3:f4:6e:ce:eb:4b:67:67:0a:5f:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:11:D9:2C:A3:ED:D9:B0:DC:DC:9E:5D:E4:7B:51:E7:EB:59:E8:62
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4a:65:5b:9f:de:e8:d0:57:ee:2a:e0:e8:cb:2f:e4:9e:9e:
6f:12:23:ab:96:d7:fd:95:d5:8f:12:e2:4a:02:eb:fe:9c:ca:
d9:ef:f6:b7:02:c1:02:f6:92:5c:27:e7:d2:67:b6:44:96:f5:
a1:fe:b4:de:67:4b:7b:8a:77:45:fb:e3:9f:83:b4:df:74:96:
97:fc:ea:09:8f:34:e6:44:a3:75:45:b1:0e:1f:88:b5:93:db:
bb:7a:f4:a6:bc:46:fe:a1:d9:52:cf:c5:2d:5a:4d:f8:ee:ae:
da:71:86:36:53:91:c3:47:e1:ab:ee:00:3d:28:48:84:98:5f:
ef:37:2e:82:72:cb:60:3a:2e:b1:81:04:90:4c:1f:17:79:2d:
b0:f0:3d:06:d9:99:db:c4:38:d7:b1:ba:1d:0d:9f:1b:84:98:
2a:f4:9d:45:61:13:34:af:15:f7:9f:7c:68:41:be:16:42:b7:
96:e6:3a:ac:eb:11:e2:67:c5:54:38:8b:19:ae:2a:ef:ba:b5:
7a:04:1b:bb:df:74:8e:7b:53:24:de:4f:f5:fe:6d:da:e7:0e:
21:62:b1:f5:3f:e9:fb:d0:a3:b1:53:f1:fe:a4:a7:0c:70:70:
f4:32:8f:8f:63:3a:bb:e3:a4:8e:17:33:1e:3a:1d:10:c6:77:
3c:1e:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:54 2025 by rpki-client