Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: 6iGJmLu4E6DiXDzmCL+VXXWLW2UPh95hXUw7gjAFzbk=
Subject key identifier: E6:72:C4:5A:3D:51:C0:BD:52:2E:F7:0C:06:5C:58:16:4A:B2:85:A3
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 01993681155A10DE12254E8E9B362FE60234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 1684
Signing time: Thu 11 Sep 2025 02:00:53 +0000
Manifest this update: Thu 11 Sep 2025 02:00:53 +0000
Manifest next update: Fri 12 Sep 2025 02:00:53 +0000
Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: Fm/hGcRqAyw/A7pepHVhzDW0BiIxwUkwFuNzkAScnb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:81:15:5a:10:de:12:25:4e:8e:9b:36:2f:e6:02:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Sep 11 02:00:53 2025 GMT
Not After : Sep 12 02:00:53 2025 GMT
Subject: CN=e672c45a3d51c0bd522ef70c065c58164ab285a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:d6:a4:8e:d0:bd:dd:8c:03:f0:af:8d:35:
78:42:60:ae:0f:c5:d9:4e:15:82:dd:3e:0e:3e:c2:
4c:2b:37:49:2d:ae:81:ff:61:7a:29:e3:5c:f9:b4:
1e:5b:b9:08:7d:5a:48:ef:73:9c:01:52:5f:d2:56:
b9:da:25:ed:94:da:fb:c1:6e:b8:4b:6e:81:d5:6d:
e4:4f:d0:65:00:8f:ab:35:86:37:ef:2f:49:01:30:
a9:54:0b:72:11:ee:3d:78:da:bd:3b:e9:d0:5d:16:
25:8d:ad:f2:fe:f7:e7:e6:5f:85:6f:1c:0f:09:01:
ed:4b:f8:67:3d:38:bb:a2:d6:2d:a8:9b:80:89:f0:
20:ee:7c:fd:ac:ee:46:be:bb:69:86:23:15:42:7e:
fc:98:85:71:bb:5d:dd:63:c5:9a:61:66:78:bb:94:
3e:a9:9f:75:39:17:f7:10:a2:f2:8d:1e:0d:89:e0:
ce:f6:22:26:ac:97:5c:92:44:cf:6b:bd:d3:01:4e:
f6:d9:46:d7:65:fe:ae:2b:7f:fc:e4:23:85:15:d4:
85:92:1f:d1:fb:f8:f7:fd:81:bc:2d:ae:88:9c:32:
ee:d7:07:b6:b6:d4:3b:db:24:05:54:02:31:22:11:
ae:a9:a5:3b:1a:4b:01:26:ed:00:c2:73:39:1a:68:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:72:C4:5A:3D:51:C0:BD:52:2E:F7:0C:06:5C:58:16:4A:B2:85:A3
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:34:2a:e1:94:2c:4a:0f:3a:52:c7:40:d9:a3:92:d4:7b:90:
84:18:12:e5:4f:e9:de:5e:9b:f2:31:22:f8:41:c3:35:7f:79:
f1:b0:b2:fb:1b:4b:b3:ea:64:64:13:8e:45:f4:17:f7:29:98:
76:9e:40:94:b6:32:92:d8:2c:af:73:5b:a2:97:de:07:3a:13:
e8:02:e1:08:1d:89:12:56:cf:45:6f:63:3f:af:6b:1b:af:c7:
a6:db:71:69:04:3d:85:07:47:69:63:2e:88:fe:a8:30:a4:01:
f7:12:b2:2a:ee:c8:84:cb:2b:3b:3d:79:fa:03:21:4b:8d:e8:
02:8f:2b:8e:d7:27:63:bc:1b:f7:41:1a:54:4b:17:a8:b0:c5:
8e:93:cd:ba:b8:83:f6:26:45:21:af:3a:b8:73:a2:b4:07:95:
83:8d:b0:82:b0:8c:c3:e2:fc:c9:0e:bf:2d:53:a1:a2:8f:2a:
0a:09:4f:05:91:65:f6:cb:c5:29:12:e8:15:ef:62:0d:10:84:
47:2d:00:54:06:79:f7:32:45:d3:34:d4:e6:49:8c:eb:89:bd:
f4:a4:44:dd:4f:ca:aa:ab:86:b2:64:54:75:e8:d3:1b:76:ef:
0b:c0:03:36:47:49:bb:7e:16:a7:f3:7b:74:43:f4:bb:db:f0:
e0:bf:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:11:12 2025 by rpki-client