Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: k7E4E++AYeFXcqre9GxLP9eMFGvQYPZC+GmPS4nnejM=
Subject key identifier: 12:B8:A4:95:2A:37:31:E6:A8:C5:B5:E0:F9:5A:70:26:2F:22:BE:77
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019849D35FBDF4CDA7308542BF982BE425B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:45 +0000
Manifest this update: Sun 27 Jul 2025 03:00:45 +0000
Manifest next update: Mon 28 Jul 2025 03:00:45 +0000
Files and hashes: 1: cdMOuRF7uOMr3eiWtLluBITicTo.roa (hash: 2zf3i/TaVgEDUbWisH1c3bo8xEvWjGA35Bw+WbjbFqQ=)
2: gPmJ919io92zLM0qUcMa5dmkecM.roa (hash: m1AiD3SH7JRse/Y0z+yKore/EQyRkJUXQ2NtfWymxSY=)
3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: LR/58CF2NZgc14k/9xJotNiGrPKdhvjjP4UWPlgetpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:5f:bd:f4:cd:a7:30:85:42:bf:98:2b:e4:25:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jul 27 03:00:45 2025 GMT
Not After : Jul 28 03:00:45 2025 GMT
Subject: CN=12b8a4952a3731e6a8c5b5e0f95a70262f22be77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:f6:ec:53:bd:13:db:b6:f2:0b:e2:73:35:
e3:ab:42:83:3a:60:c0:3f:94:a5:c2:ce:a7:3b:fc:
90:3f:d4:e8:5b:b7:c3:ed:66:fe:e1:e3:ab:16:7a:
61:28:1c:e8:80:1e:a6:6c:23:32:65:88:67:a1:42:
5a:98:ec:a9:66:cc:4f:46:cb:5f:9e:bf:19:20:63:
dc:e0:c8:5c:be:4e:77:07:6a:cf:5a:5b:7e:e1:02:
9d:2e:88:09:b8:1a:8a:77:2a:83:02:1a:e5:23:c7:
d8:a6:db:2d:49:ec:51:47:f9:cc:3a:4b:7b:a7:06:
4b:f5:bc:b8:d7:fd:86:f6:08:e5:14:da:cf:cc:e6:
0e:a2:9b:62:97:ad:a9:7b:85:19:9a:93:30:14:cf:
1e:3e:b6:0d:8d:63:93:c4:8b:d5:a3:5f:73:50:fa:
98:1f:1b:3b:c7:90:3d:a8:79:78:f5:46:14:60:7e:
40:0f:29:49:65:db:2d:35:a2:1c:ef:a8:c9:6a:dc:
df:81:27:1d:83:02:9e:13:32:9d:9f:c7:fe:92:35:
d6:b3:3f:8f:df:28:83:b7:a6:37:4c:c9:6c:3d:1b:
9e:48:65:16:ef:20:be:7f:f0:d4:3b:c8:41:2f:86:
e5:6b:f9:2b:8b:35:7b:b3:8a:97:df:e2:9e:7f:92:
10:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:A4:95:2A:37:31:E6:A8:C5:B5:E0:F9:5A:70:26:2F:22:BE:77
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b6:67:7d:31:dd:f7:df:e1:84:4c:4f:b8:43:64:b7:dd:7c:
b3:14:fa:1c:af:e3:be:7e:e1:27:b0:67:7c:3f:43:21:32:82:
37:c5:45:de:4b:3e:dd:05:26:3e:48:82:bc:5d:78:fc:a4:e7:
63:5e:ff:bc:13:2d:bc:17:ed:11:22:58:74:6a:4a:7a:69:dc:
a5:37:4e:44:34:22:56:f5:ca:84:61:bb:46:de:6e:00:20:a8:
32:0f:72:09:65:29:9b:f3:29:13:ba:44:7b:84:a4:3e:36:8f:
fd:23:db:d4:a8:fe:46:12:6f:8f:f6:3b:b9:fd:32:e1:98:e3:
74:5a:9b:c3:0e:d9:59:f0:4c:2f:d0:99:26:24:a6:dc:59:ad:
a7:43:8e:2f:b6:b6:52:c9:2b:f4:67:70:04:8b:83:66:13:97:
f8:cc:9f:a6:43:cd:3b:c1:d6:f1:5b:20:a9:b6:4e:c3:79:c9:
28:90:7b:61:90:b8:3d:cc:7d:f4:ec:dc:75:29:e3:f2:f8:c1:
f5:11:b2:13:1a:ea:c3:90:f0:90:c1:53:20:82:80:f7:5e:ce:
51:71:d7:f5:bc:4a:c8:e9:18:fa:3a:aa:f4:b0:fe:c8:98:6f:
68:03:eb:fa:fb:a9:30:b6:08:a4:de:5b:22:09:2b:d6:25:e8:
c8:64:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:13 2025 by rpki-client