Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
File: OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft (raw, json)
Hash identifier: 0cDcM5slgH7ZzJ3z6qFQ+myUv8yPw9rXpB4H84ipgOk=
Subject key identifier: 91:B2:27:B8:AC:15:EA:18:F7:09:26:34:2A:94:FF:D6:ED:CB:30:B7
Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
Certificate issuer: /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Certificate serial: 0199221EE4089354A130778C7F1F76429D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
Manifest number: 15D7
Signing time: Sun 07 Sep 2025 03:01:13 +0000
Manifest this update: Sun 07 Sep 2025 03:01:13 +0000
Manifest next update: Mon 08 Sep 2025 03:01:13 +0000
Files and hashes: 1: KBKNSo54C-UjedwUMFB9xB41sio.roa (hash: EOnhGNtgG2NlhPSt6QkJfBoHbT869foRrNlEhdeoqqA=)
2: OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl (hash: 4WP3aEDWo+LROVLW+nG+090wK8wIqynym/lME8des+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e4:08:93:54:a1:30:77:8c:7f:1f:76:42:9d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Validity
Not Before: Sep 7 03:01:13 2025 GMT
Not After : Sep 8 03:01:13 2025 GMT
Subject: CN=91b227b8ac15ea18f70926342a94ffd6edcb30b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:5b:58:2e:04:24:73:3e:a6:27:ad:cb:1f:
e1:28:21:09:c7:09:55:54:07:18:45:b4:3b:89:e7:
af:c6:f1:47:e1:71:3a:03:26:85:dc:fe:0a:5a:a4:
a7:97:66:e6:2d:bf:67:9d:6d:c2:06:9b:a4:21:7f:
a1:1f:a9:d6:91:c6:ee:ba:92:7e:8d:10:35:e5:03:
37:9f:19:86:fe:73:dd:2a:c4:8d:a1:28:da:01:3a:
eb:dd:b5:e6:7a:41:24:f0:0e:46:7f:b6:75:0a:af:
ce:7e:be:fb:9c:72:a6:20:6f:57:84:48:44:16:0b:
1d:a5:c5:90:e3:6a:0b:1a:a0:07:25:c7:7b:94:96:
4e:d9:99:8b:e1:19:03:95:bd:06:15:0e:ad:9c:47:
7c:b2:7e:f6:53:4e:b0:93:24:bc:78:55:09:20:74:
78:f1:1a:0e:82:a4:c5:de:a3:9e:61:b6:a5:f3:2c:
bd:d6:2b:bf:49:a4:a9:f7:6d:43:30:22:34:96:7c:
3f:c9:e2:2a:73:0a:ac:40:48:c6:ab:0e:11:ac:0a:
f8:7d:4b:fc:f8:37:9f:cb:8a:d0:7c:36:ab:92:3e:
b8:0c:c8:d3:7e:ac:af:ea:3a:b2:ab:be:a5:e6:27:
55:3a:4e:71:1d:31:db:7c:8b:7d:7a:1f:0c:36:fa:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:27:B8:AC:15:EA:18:F7:09:26:34:2A:94:FF:D6:ED:CB:30:B7
X509v3 Authority Key Identifier:
keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6a:9d:e0:fd:fd:78:4a:50:ce:02:33:0f:be:68:74:e7:72:
66:ff:fa:eb:72:a6:38:c8:7c:74:21:2f:2c:0c:6e:1e:ec:ec:
81:68:9d:28:96:23:7f:db:cf:21:cf:56:e2:c0:b9:f5:86:c1:
b7:47:d7:95:95:2b:78:ad:fb:b3:4b:e7:87:3e:a6:bb:9d:f4:
92:6b:85:1c:fe:74:0a:87:0c:b9:79:49:db:66:68:0b:bd:bc:
3e:df:1a:f1:9f:60:c5:bb:8d:ac:9d:f9:fe:88:4a:5d:8a:bf:
28:40:f5:f3:72:dc:45:8b:11:7a:59:56:f1:ba:66:0f:64:93:
83:ab:e2:18:03:ad:fa:30:2c:ed:4a:0c:40:76:17:b1:71:a7:
64:96:42:3a:23:da:67:11:e5:ce:55:ea:e7:26:32:10:6e:99:
57:f4:8c:02:f5:fd:33:69:5b:13:39:c5:65:89:41:5a:49:3d:
24:65:3e:4f:59:1c:37:69:06:2b:4f:17:27:c4:15:d2:4c:56:
6c:6d:e3:1a:8b:bd:d1:bd:00:b4:d3:c5:ed:b3:d5:dc:78:83:
2b:8b:16:ce:13:70:41:f3:69:5c:4a:bc:dd:ad:c3:bf:64:de:
6b:39:44:b4:55:91:d5:b5:91:b2:02:a2:41:c4:14:62:cb:66:
de:ed:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:05 2025 by rpki-client