Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json)
Hash identifier: bAGcw4wJZky08yFU2AJKFiw+6QuxeeVcRybqF4StTsg=
Subject key identifier: 39:47:25:AB:7B:97:C4:42:96:E4:94:D6:C0:6C:64:B8:3C:30:F1:DC
Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364
Certificate serial: 01984AE5869309C1DEBF8ED039E0BF98A797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:12 +0000
Manifest this update: Sun 27 Jul 2025 08:00:12 +0000
Manifest next update: Mon 28 Jul 2025 08:00:12 +0000
Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: TzTQE+1vJlg2R9vgTKXHDIJeGFbD8hdTofoysOT/hZM=)
2: WAQz-NVz1tPP197fB-7kdlHEMDo.roa (hash: EfunuE83nVqoEWqBwZZf7jU1FPr/i4YaWTLI4hd6d6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:86:93:09:c1:de:bf:8e:d0:39:e0:bf:98:a7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2896897a9721678e684693993a5a884903364
Validity
Not Before: Jul 27 08:00:12 2025 GMT
Not After : Jul 28 08:00:12 2025 GMT
Subject: CN=394725ab7b97c44296e494d6c06c64b83c30f1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:22:27:b5:64:d2:ca:f5:33:62:44:fc:04:
ed:b4:34:30:df:3e:d5:1c:c0:d2:c6:e8:01:0f:c4:
57:96:52:ce:cb:33:5f:6f:dc:14:76:af:69:75:31:
76:e7:f2:5e:18:22:50:72:9d:a2:e6:6e:65:bd:ac:
df:cf:02:d3:9f:23:d9:c4:ed:ce:b0:dc:c1:ac:4f:
76:80:66:4d:0b:a5:71:22:27:54:d8:f0:4d:fd:14:
1a:40:9a:a3:19:1b:79:16:6c:d6:01:bf:3f:97:1e:
63:46:46:18:05:99:4e:92:6e:80:61:85:87:ac:03:
7d:d9:64:5b:54:1d:b7:05:03:ba:43:89:9b:cc:60:
7c:b4:24:3c:b0:d2:70:d1:59:61:00:4b:ef:2e:64:
f0:6b:c3:72:0d:ae:23:44:6f:83:88:a0:60:dc:c9:
e9:07:ee:48:b0:78:a9:25:27:ed:ad:a4:b5:70:6a:
37:97:2b:e9:60:80:84:43:41:ef:4b:00:3a:72:1a:
ee:57:8f:b9:e7:60:a9:a0:3b:4a:bd:e3:77:21:de:
15:9b:46:b5:0e:7f:69:a5:34:04:f9:20:81:a8:64:
5b:6f:bf:32:05:9d:9a:b2:46:9e:f1:e5:f6:6e:ab:
3f:6b:7b:fe:4d:8d:bf:cf:43:98:7c:c0:8f:78:8e:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:25:AB:7B:97:C4:42:96:E4:94:D6:C0:6C:64:B8:3C:30:F1:DC
X509v3 Authority Key Identifier:
keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:99:ba:03:c8:ed:13:16:8d:9f:af:e5:43:5d:25:c0:7b:45:
cc:75:8f:c5:cd:ed:a3:3a:01:c7:52:31:57:b6:56:14:fb:d4:
7f:87:9a:0a:bc:22:f4:58:23:dc:72:9a:52:cc:b1:f4:1b:fb:
23:a5:c9:6e:7e:94:e8:95:5d:be:bd:cd:a6:c6:d6:25:f0:7f:
48:99:3d:76:52:13:9f:b1:d7:0a:60:17:36:cb:1c:2f:d6:52:
be:95:5f:60:ab:99:7a:f6:0f:b9:06:d1:0e:fa:2f:6c:fb:db:
20:60:b0:3e:f0:48:47:2b:8c:a1:2c:68:4d:bd:02:48:3f:ef:
4c:d5:fd:c5:2c:dd:41:16:eb:03:b5:19:15:c2:5e:85:0d:94:
f5:a7:f9:98:90:19:21:67:c2:c4:59:9a:d1:bf:38:66:a1:9e:
4e:e9:57:08:43:6e:e6:87:6e:77:1e:9a:10:61:82:6a:11:7d:
de:c1:ad:29:cf:ae:5f:87:45:c0:5b:f6:a9:f5:33:d5:a0:0d:
2a:cf:06:aa:ba:cc:65:b4:55:a2:76:4a:a2:c1:cd:e3:a9:dd:
5d:14:0d:d5:04:c4:59:44:63:41:c2:65:8f:72:22:9a:4e:d9:
ee:8d:ef:cd:f1:c6:ac:02:48:08:42:f4:ee:0f:27:b0:f1:d5:
3e:27:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:19 2025 by rpki-client