Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: xtk49Iy4sQ1AduSWRgZdQmmNz0q4a833t8GXcukVz8Q=
Subject key identifier: 27:A8:D5:97:0B:F6:9E:EF:C1:F7:35:CE:C4:FF:C4:76:5B:30:04:63
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 01984399C5211FC9B584EC1E088D5149E173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 1602
Signing time: Fri 25 Jul 2025 22:00:07 +0000
Manifest this update: Fri 25 Jul 2025 22:00:07 +0000
Manifest next update: Sat 26 Jul 2025 22:00:07 +0000
Files and hashes: 1: 5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa (hash: XAzmjxdrpIx5mLyehPHseK/+jaakSPTIZ07v9R3ktfQ=)
2: 7gpUO99SfoacmIWvz5o-z3ESpPc.roa (hash: jBBU4x8HtuG0AJgjijT3pv++S+IgCjRtCv3AjftIABQ=)
3: JOJ9b2WkEIXJpzQl9CDXk_CHY94.roa (hash: SAmYAd0xvQRGMk1x62ICIfIVJyfWTunRcVeOhZ1E3l0=)
4: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: tqgAXnaxc1qEFBVShPcXRUK6+mVwjz9+p97gxwm3Q5g=)
5: _MMbboen6fjGZxdl1sjrAWa0F6o.roa (hash: lasMNF+CDNUkmhfnkFUMcQ2+Q/sn4RwC142SJaDCsYo=)
6: qTT5EzYYejgHx_-gozkgtiyWSxE.roa (hash: WcMM5EKO8L7zVDvgOOXzTCPHLyfkpMtxpa7CTFKHemk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:99:c5:21:1f:c9:b5:84:ec:1e:08:8d:51:49:e1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jul 25 22:00:07 2025 GMT
Not After : Jul 26 22:00:07 2025 GMT
Subject: CN=27a8d5970bf69eefc1f735cec4ffc4765b300463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:59:a0:30:44:a4:30:f3:15:62:b6:45:22:
2c:81:53:3d:6d:27:35:4a:1f:c2:7a:68:f1:f2:58:
75:19:a3:ae:aa:e3:d0:57:05:06:f8:bc:56:37:42:
68:85:53:c0:21:98:61:c6:44:44:55:06:d1:fb:31:
50:ab:1a:16:2d:45:90:2e:d0:6f:a8:5a:d3:a4:45:
4d:c8:db:cc:4e:8c:0e:10:9e:65:26:b8:c9:29:3e:
c2:4c:41:d5:9d:3a:6d:ba:6d:68:ad:8b:41:a9:1d:
fb:1a:0b:f0:36:a4:25:1d:da:38:91:b7:6d:68:15:
7d:bd:00:c8:fe:c2:f2:6c:08:15:b4:31:67:14:b1:
fa:af:c1:36:a2:4b:f5:06:15:bb:9c:64:ed:02:57:
3b:6c:2b:c1:6f:05:74:e5:d9:da:af:a9:2e:f7:c9:
c6:ea:8c:6b:6b:87:d8:69:3c:66:fc:87:79:65:40:
2a:54:e9:fa:aa:8e:f9:ae:82:27:65:5c:06:9e:5b:
0d:69:ad:57:e3:71:62:81:c8:b1:af:53:ce:18:77:
c0:f3:65:2e:ce:b1:d7:c6:d0:ae:f0:e5:d2:8e:a8:
8f:9d:62:a5:d0:4f:1a:59:b8:05:8b:c9:5a:9d:02:
e1:67:4c:ba:a4:5f:01:53:d0:12:40:ec:69:6a:b7:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A8:D5:97:0B:F6:9E:EF:C1:F7:35:CE:C4:FF:C4:76:5B:30:04:63
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:aa:34:4e:8f:ff:6b:2a:8d:a4:61:a7:f0:b9:a1:ab:06:2e:
68:20:c4:35:9d:15:13:17:f1:3e:5a:50:70:d9:50:79:3d:2c:
1b:35:3d:fc:ce:42:38:b6:6b:99:1f:29:30:03:76:64:1c:c7:
ca:e6:1c:6a:35:57:a3:7f:2c:85:4b:c4:e3:92:65:5c:92:4b:
02:85:7b:1c:2e:ad:89:e9:18:dd:ed:c6:e6:af:8b:6c:c6:83:
73:eb:b8:fa:05:57:16:3a:f2:41:63:23:b5:f8:d7:00:f8:aa:
a0:e4:f1:5c:44:d6:51:b8:e6:a2:2e:0f:5d:d1:37:77:ac:65:
43:a0:a5:d1:c4:72:2e:de:67:57:33:76:08:f5:2e:dd:0b:70:
6b:4a:c7:8a:51:ae:d4:27:6c:1f:4a:8e:2f:dd:0f:30:78:46:
39:fd:8b:cf:c6:db:d3:a6:57:e4:c4:3f:c1:73:06:1d:30:12:
04:48:e4:64:35:99:21:21:c8:46:f3:51:96:5f:42:04:21:44:
16:ba:34:12:4e:49:e1:87:14:c8:84:04:fb:b5:1b:72:db:f2:
c7:45:ee:b5:f3:41:7d:76:31:30:31:93:fb:c9:af:6e:ba:54:
9d:8b:27:5a:5b:b6:14:8c:df:d0:c1:3e:f3:73:e2:6e:77:a1:
e4:a2:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:07:08 2025 by rpki-client