Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft
File: OKN8JN3KNH1xPteU0zzUqBqLSYo.mft (raw, json)
Hash identifier: V3BUhLl4FuhU4YMR5CepJE+ijoiti4n/RYusyBoBUCI=
Subject key identifier: 22:E5:0B:A3:FD:03:C4:4E:3B:C5:9F:65:ED:3B:F9:CC:76:DD:9A:C2
Authority key identifier: 38:A3:7C:24:DD:CA:34:7D:71:3E:D7:94:D3:3C:D4:A8:1A:8B:49:8A
Certificate issuer: /CN=38a37c24ddca347d713ed794d33cd4a81a8b498a
Certificate serial: 01984A40EFDA542052BD622D1573DD0BE8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft
Manifest number: 15AD
Signing time: Sun 27 Jul 2025 05:00:26 +0000
Manifest this update: Sun 27 Jul 2025 05:00:26 +0000
Manifest next update: Mon 28 Jul 2025 05:00:26 +0000
Files and hashes: 1: KBxZJWrk1-bZEdk3S7yVEPMKVtM.roa (hash: BpbYbbHeyy+1nQHRcRldIZ4LwMax+kHyBfVOH0ykZeU=)
2: OKN8JN3KNH1xPteU0zzUqBqLSYo.crl (hash: 2mFFXMsf28oik6DE8STC8G8T5MSaAyt8rz3Dy0xybBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ef:da:54:20:52:bd:62:2d:15:73:dd:0b:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a37c24ddca347d713ed794d33cd4a81a8b498a
Validity
Not Before: Jul 27 05:00:26 2025 GMT
Not After : Jul 28 05:00:26 2025 GMT
Subject: CN=22e50ba3fd03c44e3bc59f65ed3bf9cc76dd9ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:fd:3c:55:62:f9:63:1a:d1:c0:a2:47:00:
61:a4:ee:00:8f:6d:24:c3:c4:71:77:1d:c3:54:40:
b5:25:64:99:3d:b5:6a:a4:4d:07:79:83:9c:84:a4:
58:e4:da:7d:a1:f8:5e:c6:d9:ba:a2:4c:33:5f:51:
19:5e:dd:d9:c3:2f:f2:2f:b8:b6:2a:67:2e:90:80:
88:4c:60:24:aa:51:c3:b2:7d:ef:3e:f1:97:1d:b4:
c4:b9:fe:95:81:47:d7:2a:d2:69:33:bd:3d:12:14:
8b:3a:a2:43:7c:4c:9e:9d:8a:24:1c:11:9e:dd:ea:
88:13:fd:a5:1c:64:35:b4:eb:2b:78:e5:6d:08:06:
07:5c:68:bf:18:60:7b:ff:35:99:85:dd:24:80:94:
c2:75:18:e3:32:18:4c:e5:19:f1:67:5b:aa:15:73:
d2:6a:07:31:ca:50:b4:fa:5c:0a:f4:74:39:09:c8:
7c:9e:83:5a:fa:f9:31:f9:f6:66:68:b0:8e:77:5e:
f5:31:34:3f:c2:13:b0:54:c8:0b:ff:3e:5a:35:cc:
59:36:f4:25:be:df:83:04:8b:27:99:b2:06:d6:46:
0c:bd:cf:b4:7f:26:87:b8:75:92:63:62:5b:01:f1:
b9:cf:e5:1c:a3:e0:c7:94:da:71:09:dd:b7:65:f9:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E5:0B:A3:FD:03:C4:4E:3B:C5:9F:65:ED:3B:F9:CC:76:DD:9A:C2
X509v3 Authority Key Identifier:
keyid:38:A3:7C:24:DD:CA:34:7D:71:3E:D7:94:D3:3C:D4:A8:1A:8B:49:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:14:97:82:3c:2a:f1:60:89:f9:30:6a:85:ba:01:9c:6e:3c:
7a:ee:51:d7:3f:1c:db:b4:5c:c5:36:85:b8:3a:35:e0:9c:d0:
e8:7f:30:4c:e6:94:7a:dd:87:b3:ac:cb:b2:03:cb:19:e0:c8:
ab:aa:f4:eb:ae:9c:56:08:c1:55:c3:ce:d8:1e:ec:7d:d6:d6:
88:a4:40:43:a3:0b:79:71:59:00:cd:1b:bc:93:48:d8:c4:5c:
2b:0e:a6:ae:3e:c0:6b:55:45:c6:00:32:77:5d:e2:f2:a5:c0:
d0:eb:a6:41:1f:4f:88:69:57:5a:8e:bc:09:65:13:47:80:ae:
20:57:f4:99:85:0f:b1:25:0e:03:e0:69:8e:7a:1f:a3:d9:75:
9d:57:c5:2c:3f:d4:b8:5d:02:11:83:59:82:7a:90:1b:52:30:
1d:74:8b:a4:d4:ea:bf:7c:7e:1e:d5:9c:01:b4:15:bc:07:24:
d0:7b:37:ad:e8:c0:57:a1:39:8c:f9:c0:7d:68:67:c8:f2:e6:
26:89:48:fe:39:2f:e9:2b:30:f1:67:1f:df:0d:fa:a6:62:cc:
a1:72:5a:0a:b6:f8:2c:5f:85:f3:71:8a:b1:04:1a:1a:de:31:
2d:b6:d1:39:c3:6b:fd:38:e0:fa:ee:ab:e3:19:a2:b4:22:41:
84:0e:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:00:24 2025 by rpki-client