Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: 8Fm3z0CemXzVuPQ5zfDx44ggz8Swj10N1tuBQ7TJaEk=
Subject key identifier: FE:98:93:A7:46:0F:B9:12:53:4D:B4:E3:F2:73:6A:73:2F:A1:CC:5E
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 019751C6466D5DB021AFDDA2056E24D15F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 1589
Signing time: Sun 08 Jun 2025 23:00:38 +0000
Manifest this update: Sun 08 Jun 2025 23:00:38 +0000
Manifest next update: Mon 09 Jun 2025 23:00:38 +0000
Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: rkFrNO1F9YYkxQRnfIQMI4RVYvwIjn9o+VqHjEXyMxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:46:6d:5d:b0:21:af:dd:a2:05:6e:24:d1:5f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Jun 8 23:00:38 2025 GMT
Not After : Jun 9 23:00:38 2025 GMT
Subject: CN=fe9893a7460fb912534db4e3f2736a732fa1cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:57:61:11:71:4d:f0:ab:2b:c5:c2:30:c0:58:
12:25:df:c7:5a:a4:f5:84:5d:a5:19:61:eb:be:7b:
e9:78:30:07:8a:f0:35:f0:80:01:be:e2:74:15:ee:
5f:8f:bb:fc:b1:18:4e:75:b4:2b:33:dc:e5:18:b8:
d7:16:b9:cb:7f:61:a9:91:32:0b:a0:bc:6c:b4:7f:
63:bc:c3:5e:25:55:e2:c0:42:c4:01:1d:87:38:46:
3f:f0:3e:5e:1c:68:14:c9:da:50:b4:92:b3:c7:4e:
89:6d:cf:0b:8c:49:fd:44:02:67:ac:73:7c:2e:54:
b4:4c:07:d3:22:55:11:0c:83:3b:eb:50:22:17:bb:
7b:bf:be:15:2c:c5:ab:00:d8:59:43:dd:39:3f:1a:
35:df:ae:a7:9a:1f:2c:15:cc:29:cc:93:65:3d:98:
06:cb:dd:06:62:42:95:89:a2:7f:aa:30:0a:f7:b1:
e9:df:5a:5e:06:ff:d7:9f:57:b4:6c:46:ad:8a:6f:
94:af:a1:a8:4c:5f:af:01:ff:b5:df:35:ec:45:bb:
16:e8:d1:d2:40:1e:36:a6:1c:17:ba:1f:55:6f:80:
eb:4e:4a:6b:95:b0:24:f3:17:c7:e0:f4:cf:6e:6c:
43:ba:ac:24:a1:a8:44:8e:b9:f7:c1:e5:81:24:ae:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:98:93:A7:46:0F:B9:12:53:4D:B4:E3:F2:73:6A:73:2F:A1:CC:5E
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cc:58:3e:bb:2f:9f:b3:f4:02:2b:38:88:ce:21:33:97:2b:
2f:52:f2:b7:72:20:a0:54:2d:88:7e:e0:2d:8c:71:6f:6e:72:
a4:83:60:ba:8f:1a:b4:3f:a7:ec:b4:b2:d5:d4:38:1e:1c:33:
16:72:27:e5:6e:8e:8c:07:d7:c2:d0:00:ee:8c:21:a3:65:d3:
18:70:67:46:57:60:5e:6b:f2:ae:90:b0:ac:48:99:29:aa:fb:
7f:7d:1e:d5:d5:9e:8b:68:35:7e:ec:11:ee:51:35:87:c4:24:
3c:de:a7:ab:69:05:b8:64:50:cf:3f:14:ed:36:7d:25:07:68:
6b:4e:7e:34:50:a4:9e:1d:63:c7:30:5f:87:e8:18:3a:0b:19:
51:2a:71:87:36:48:91:0f:86:8d:e1:08:c3:1a:c5:02:ad:b1:
51:3a:1e:66:a5:4b:27:a3:d7:24:f8:da:08:7e:77:2f:5c:0c:
12:34:78:23:d4:90:85:b1:5e:a5:1f:42:51:84:6f:ef:06:71:
0f:d1:60:78:a1:f5:69:eb:63:2f:80:c4:79:2e:51:8d:8c:0f:
93:b0:ef:91:1b:16:a4:b8:31:da:45:f7:14:e1:12:07:20:a8:
7f:0f:be:79:c2:c0:34:9b:ec:9c:8d:21:c9:76:91:bd:5b:32:
e8:39:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:59:03 2025 by rpki-client