Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: Y9M+qtveUJIbCtihxowTB0ZWu5mgo9CF2Qq15h9stNI=
Subject key identifier: 89:5C:53:47:E3:14:CF:93:46:AE:B5:CC:B7:7C:14:F0:C0:FC:A6:D8
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 0198462D3D18C8F4BE8EDCD6215A3885048C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1606
Signing time: Sat 26 Jul 2025 10:00:26 +0000
Manifest this update: Sat 26 Jul 2025 10:00:26 +0000
Manifest next update: Sun 27 Jul 2025 10:00:26 +0000
Files and hashes: 1: 6dFmm5sRY32IWZd8jLU8_s5imvY.roa (hash: udPQ8wWzpwcAiDjrHHyq/uTqqzcEbt4FowH3Qt/QIEM=)
2: LHDFKCfWLJp2mBfByLfhuS_iDkY.roa (hash: hhocfI4M747eSln+lUvkyI8Ag+8FG16kwPY8wAbPOQk=)
3: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: ezSnqssH7UKEHSBnQBl+LG/twbI2Op0XbuI0OJ/hbIw=)
4: hE4J7-nVjBP1I1amWriRZQbCRjQ.roa (hash: t96fk3QnxrV27k+4LVx0l6UARkEoivZQZo9G+qQHzNc=)
5: tVLlOiV7SvnosXMuOA6u9tK4RqI.roa (hash: /FYDglX8ng94EWH9NM8VS2sIZeZUQbmdZE0FSeyFXmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:3d:18:c8:f4:be:8e:dc:d6:21:5a:38:85:04:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Jul 26 10:00:26 2025 GMT
Not After : Jul 27 10:00:26 2025 GMT
Subject: CN=895c5347e314cf9346aeb5ccb77c14f0c0fca6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:c5:b8:04:0b:da:bb:d0:3e:9e:26:e0:73:
1c:fa:40:5f:6e:e6:53:a9:1f:a0:d9:54:c6:ce:f1:
d0:78:12:f4:0d:6a:40:02:45:99:ae:da:b7:d7:20:
24:48:f3:90:27:8c:a5:d0:e2:e4:04:23:72:1b:ed:
5a:6f:c1:b2:f4:b5:75:70:43:c5:fd:77:e4:a8:0b:
02:14:1f:03:04:67:3f:11:fb:4f:aa:b6:61:de:5f:
61:f0:20:d9:9d:4f:ec:bd:67:4c:90:d7:29:65:5b:
92:a2:34:7e:87:af:30:c1:9a:11:cc:5a:27:a9:59:
28:3d:8e:61:9e:e3:8c:4c:c9:57:fa:a6:8d:95:25:
88:4c:5f:bd:ef:1b:47:41:65:4c:db:ae:00:2b:d3:
1e:3f:94:13:0d:2f:f3:f7:e7:38:33:33:3f:e5:89:
e3:91:da:6a:30:5c:62:c9:86:85:f6:0a:da:ff:46:
e1:03:79:c6:78:ad:58:3d:c6:35:ab:a9:9b:af:62:
23:00:f8:51:ef:33:25:89:5f:2c:06:88:0c:8d:2e:
8a:2b:61:27:98:7e:c5:36:81:cf:77:0d:5b:28:0e:
73:77:e1:e9:e3:ec:c9:3a:ed:88:7e:e6:fc:6d:9f:
a8:f4:42:30:a3:70:bd:67:3d:05:d2:e8:22:d1:bf:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:53:47:E3:14:CF:93:46:AE:B5:CC:B7:7C:14:F0:C0:FC:A6:D8
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1f:5e:99:e8:d1:ae:23:14:c5:f7:9b:ce:03:ac:80:48:83:
66:78:63:14:d0:7d:09:56:b0:0e:3f:44:ae:08:eb:92:57:df:
22:89:d9:a1:2d:64:ae:73:df:ef:ff:1c:de:23:3f:32:a1:25:
79:54:c4:84:d7:df:ff:f9:b1:51:88:dd:5d:83:80:18:db:82:
33:27:c4:38:d2:6b:ee:1a:fc:c6:c6:7f:48:b8:86:6c:7c:e9:
1c:8e:06:55:33:4c:9c:40:18:a5:cb:7a:b6:8f:d8:84:11:e0:
ba:0a:69:e3:94:73:bc:0f:f8:2e:16:e7:84:1d:53:da:1f:ac:
96:da:8c:ef:21:e3:eb:94:98:07:27:5d:af:37:f4:00:b6:ec:
4a:70:8e:8c:71:c6:ee:8f:33:ed:72:2c:5b:8b:4d:d2:fd:bd:
28:39:65:c4:81:ff:92:05:70:69:ad:6e:61:44:2f:37:ca:03:
8d:7b:c9:7c:42:f1:f3:ed:41:c9:5d:34:1b:e8:52:b3:10:20:
f4:57:07:b2:39:b7:13:68:1d:4b:ee:b3:0c:40:8e:ab:89:2a:
16:87:d8:23:ae:77:1c:15:3e:25:c8:3d:10:f4:bb:1f:ca:44:
61:5e:5f:b4:07:38:bf:e5:d6:81:c7:ee:47:61:8c:1b:99:7a:
e6:e6:e4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:55 2025 by rpki-client