Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
File: OkjgM962SsQkPHLOiZ1Tgi32mW0.mft (raw, json)
Hash identifier: Zpl7oJL1iDd6Jf1jIqepLr9XUY8tJckz9Q0Kerbg8cA=
Subject key identifier: 05:6A:A7:F5:BC:47:74:84:58:98:DC:D8:46:FB:82:A5:60:C8:3C:8D
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 019848C094917B81D5B69C4E1062B13EF359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 22:00:37 +0000
Manifest this update: Sat 26 Jul 2025 22:00:37 +0000
Manifest next update: Sun 27 Jul 2025 22:00:37 +0000
Files and hashes: 1: OkjgM962SsQkPHLOiZ1Tgi32mW0.crl (hash: a9eP9QP2jqVr9UAKgZDgvDorW+NyRRkgAbgXwv2fLuM=)
2: oU-Dh2GrIk6DJo0B3ckZobCZQLg.roa (hash: 3M/n9wvPmKU+uLTP2MTaGav/2cb5GDciUi4YXKv/+G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:94:91:7b:81:d5:b6:9c:4e:10:62:b1:3e:f3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Jul 26 22:00:37 2025 GMT
Not After : Jul 27 22:00:37 2025 GMT
Subject: CN=056aa7f5bc4774845898dcd846fb82a560c83c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:1a:53:0e:d8:1e:f0:0e:59:a0:06:8d:e7:
dd:a8:4b:b3:e5:36:33:6d:73:80:3f:cc:e2:98:72:
55:60:40:dc:94:6b:66:65:f6:3c:09:2f:65:ab:94:
9e:5f:77:c6:44:d2:3c:c3:c6:a2:69:71:8a:b5:a5:
14:13:74:ac:d2:47:c9:2a:fa:02:62:81:97:d9:9e:
f5:63:d9:0c:fc:6a:48:04:29:ad:c7:df:85:35:83:
27:74:71:40:c1:b9:84:e2:ff:f7:b0:d7:8c:a6:2d:
b6:d8:35:7f:70:1d:1e:40:96:3d:4c:d0:23:4f:ff:
47:34:86:bb:6a:22:8a:d0:27:31:12:fe:43:d4:af:
c4:0d:e1:e4:df:78:d0:46:db:a0:92:6f:52:28:2f:
fb:5e:ac:26:50:89:79:0d:e4:eb:d1:81:c1:10:4e:
67:e7:d3:2b:41:31:d7:9c:d9:8a:3a:6b:15:73:6d:
f9:5f:73:8f:97:b9:37:a6:c8:6e:1d:04:ba:9c:8d:
df:61:ab:a2:49:51:94:c7:0b:74:8c:fb:b3:93:7c:
e1:9d:43:a2:f6:9d:c8:40:d9:c3:09:01:cb:e1:55:
6e:dc:0f:4d:ca:47:be:51:a8:67:72:94:b6:0f:8c:
29:0b:f4:30:cb:40:a6:d7:c1:33:0b:a7:db:ee:08:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6A:A7:F5:BC:47:74:84:58:98:DC:D8:46:FB:82:A5:60:C8:3C:8D
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fd:7b:42:1e:31:4e:b5:37:f6:20:92:62:28:0d:4c:76:fa:
d5:4e:df:e3:e7:3d:f2:ed:d2:93:1e:c0:82:55:bd:d7:fd:f6:
b2:f4:00:57:e4:80:bf:10:0d:f2:f3:41:c0:50:d7:64:2f:2f:
6a:55:32:41:8e:0d:e7:a1:3e:15:a7:bc:0e:7b:58:cc:ab:a6:
24:e5:46:35:a1:43:a8:94:66:7c:73:a1:5b:55:ef:f1:d4:02:
69:2c:d6:64:87:79:ff:f8:98:15:c0:9a:5e:22:08:e6:8d:8f:
c2:7c:e4:b9:7a:66:3a:9e:cb:c4:e6:e8:9f:d8:b5:0a:71:49:
cf:a6:9c:1c:3b:84:60:19:58:64:46:18:5e:0b:8b:41:cd:73:
58:07:19:ad:24:fe:18:00:97:ec:4d:08:78:80:81:bb:c1:39:
37:46:9f:59:a5:5d:12:84:8b:df:88:80:95:c4:31:9c:c2:29:
56:33:7d:de:69:b6:6a:e4:3a:a3:b7:c1:84:a5:57:8e:69:35:
c4:7a:4d:87:53:f8:bd:6f:24:5f:c4:74:4a:7e:8d:0f:3c:de:
21:7f:97:3c:e4:db:ec:1c:8b:aa:ea:16:14:a8:bc:5e:90:f1:
4a:10:bb:af:e5:6e:16:08:cd:10:be:da:77:06:b5:9c:29:78:
a6:47:15:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:00:19 2025 by rpki-client