
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
File: okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft (raw, json)
Hash identifier: qBrSZ/wUrqRJO39lzvWiaQ71bGm/evou5UXNgFO8Czw=
Subject key identifier: 88:5F:B6:12:12:74:29:B8:D6:FA:FF:8F:29:A8:F1:88:5A:9F:52:DB
Authority key identifier: A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
Certificate issuer: /CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Certificate serial: 01984964E60EB087CC20F981AB66BA8DF760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
Manifest number: B7
Signing time: Sun 27 Jul 2025 01:00:05 +0000
Manifest this update: Sun 27 Jul 2025 01:00:05 +0000
Manifest next update: Mon 28 Jul 2025 01:00:05 +0000
Files and hashes: 1: dV2LrBjIlql28uwMDcJVQI6s6A8.roa (hash: F8uj/t68nQ3cbE2EUpzLNyfLklCyKLVmpdDgkWw1Qw4=)
2: okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl (hash: fOAdW4DefuUP18KSI+cKD7mVILjzfRulmpDugXLCZpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:e6:0e:b0:87:cc:20:f9:81:ab:66:ba:8d:f7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Validity
Not Before: Jul 27 01:00:05 2025 GMT
Not After : Jul 28 01:00:05 2025 GMT
Subject: CN=885fb612127429b8d6faff8f29a8f1885a9f52db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:be:d7:8f:a4:18:a3:bb:4a:8a:5b:d7:fa:
71:b2:c3:f1:24:5c:2f:27:dc:50:eb:bd:1c:47:2f:
bc:2d:5d:eb:f2:ab:fd:fa:0d:94:67:6d:8d:4e:00:
97:d1:4c:7b:b8:44:af:ab:d2:1f:fa:cb:34:2a:35:
d9:fb:2b:43:d3:60:de:af:ce:d3:08:b8:70:61:56:
67:4b:c8:38:ab:21:21:23:48:ae:f4:52:1f:b5:08:
b1:e7:d1:d6:a6:fa:86:fc:e3:a3:18:13:ac:8a:e1:
99:69:3c:9b:70:c1:18:f2:41:79:37:f9:51:03:9b:
74:b7:a7:96:79:4e:4e:cf:b6:b7:e8:94:12:24:a5:
f3:28:c3:b4:84:87:9a:2c:f9:1f:8d:9a:51:20:b1:
bd:91:97:23:c9:c2:52:ae:ff:e6:0f:85:d3:19:aa:
59:39:ef:70:46:d3:83:08:e3:86:81:c6:46:e3:fe:
3e:16:54:b6:b0:b3:e5:8a:d4:1a:e6:85:81:7f:76:
a1:af:b3:27:8b:4e:1d:88:0f:56:26:b9:e8:79:cf:
0b:7d:88:94:98:21:9a:47:94:88:4e:b6:ef:dd:d1:
b1:5f:a3:22:00:cd:30:bb:bc:c2:80:2f:15:6d:67:
75:d2:ae:b0:b9:6d:51:70:4f:5a:6f:e2:a1:0a:1d:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5F:B6:12:12:74:29:B8:D6:FA:FF:8F:29:A8:F1:88:5A:9F:52:DB
X509v3 Authority Key Identifier:
keyid:A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5a:ff:a9:ba:84:24:da:5c:f3:f4:69:c5:0f:c6:42:8a:5c:
28:57:11:07:a8:40:d0:89:0f:29:3f:c7:3f:5f:88:84:15:d2:
57:ae:aa:a9:e0:87:36:10:db:8d:20:1a:e6:14:f7:8c:57:68:
f6:d5:ab:0a:1f:98:06:33:11:da:e9:c9:b8:c8:10:b9:2f:74:
aa:82:ee:cc:a6:ff:e7:21:30:ab:26:c3:bb:8f:eb:6f:69:99:
e1:00:f8:25:d9:ce:40:eb:78:19:e1:d8:6e:9b:72:7c:cf:31:
f0:5f:c2:6b:d4:3c:e5:ce:cf:72:77:92:cc:29:c3:53:eb:df:
c6:9e:31:63:2c:45:b5:09:cc:ab:ee:ae:2c:d1:42:72:33:d0:
68:ba:df:9a:b6:ee:b3:c5:3f:5e:88:9a:2a:1b:37:81:fb:3b:
b0:14:e5:5a:17:8d:53:70:65:cc:59:c8:5a:a2:55:a5:eb:05:
77:03:7b:23:16:a3:12:89:3b:19:bc:26:29:34:44:b1:2e:d6:
31:04:73:48:d2:73:e2:34:d0:1d:6f:59:af:4e:c9:43:cc:99:
07:24:e5:76:c8:1f:f0:ee:77:0d:b0:19:44:62:3f:54:cc:07:
63:d0:1c:c2:cc:8d:ce:be:d4:09:c1:54:2b:a4:42:be:54:c0:
89:29:55:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:19 2025 by rpki-client