Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: 27GMdOF3RD1BK61Q4F0hgmHvChvt4GSNRNEReS7Od7o=
Subject key identifier: FB:E9:DF:C3:FB:DD:AE:2B:CB:B2:88:3D:74:7C:E4:9A:FB:84:58:10
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 01993794F1432E529013D13E647B301A0AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 1196
Signing time: Thu 11 Sep 2025 07:02:11 +0000
Manifest this update: Thu 11 Sep 2025 07:02:11 +0000
Manifest next update: Fri 12 Sep 2025 07:02:11 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: 5gNeoJVB8TM8yTzrGXEFuShjmYAfDrQ84QCGhdiQkE8=)
2: jBg4c1TddaMZ79OO2ACO6rgKQkE.roa (hash: vxMjeBuQHvoGxQ3EbvzgsnvZ7fj/adVRxxvAS0tcfsE=)
3: yN3-coe-yJTzFymhuWAPFUYAkF4.roa (hash: IPNSpgYWxN2jcOf0NhOGeg6e+K9d2+ZzIVVpZsFLZDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:94:f1:43:2e:52:90:13:d1:3e:64:7b:30:1a:0a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Sep 11 07:02:11 2025 GMT
Not After : Sep 12 07:02:11 2025 GMT
Subject: CN=fbe9dfc3fbddae2bcbb2883d747ce49afb845810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:58:8c:34:ac:7e:16:19:53:9e:c6:60:53:
59:f2:43:b8:02:34:d9:e3:ad:ac:45:25:ce:47:0f:
18:27:84:1f:80:2f:f4:9f:58:4f:05:e7:4d:6c:98:
21:a3:83:05:1e:00:72:fd:93:c9:6b:72:2c:ae:bb:
6b:22:da:fc:b2:6e:ff:53:c7:cd:ff:a1:df:88:89:
65:55:03:3f:3f:c2:2e:13:7d:a5:45:db:cc:dc:35:
63:10:32:b9:6b:ed:73:7d:3a:5c:28:93:ab:d0:64:
7d:06:52:18:3c:ea:9e:39:9b:c6:9f:03:3b:23:79:
51:16:86:a1:d8:90:6f:a9:f5:ef:07:ff:e8:cd:47:
86:c4:dc:15:d1:d3:d4:71:54:ee:0d:3d:b8:20:0a:
f4:e7:3c:8d:23:8a:aa:53:05:53:6b:3c:14:44:b3:
83:e8:22:6a:02:ec:63:6f:4f:00:ad:54:6b:2d:1c:
ca:e8:7d:e4:a7:15:40:42:1b:0f:52:88:d3:77:83:
97:b5:bc:de:63:e6:9d:05:bc:f8:7c:18:87:9a:91:
dd:34:ce:b0:ce:5a:fb:0a:40:8e:8b:5e:e7:6d:32:
2a:70:a1:0d:cc:23:f3:a5:01:93:8a:46:2c:2c:41:
2b:23:e9:57:2b:98:81:e1:b8:93:c2:ac:9e:18:00:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E9:DF:C3:FB:DD:AE:2B:CB:B2:88:3D:74:7C:E4:9A:FB:84:58:10
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f1:28:43:b8:9c:2a:07:00:b1:ec:8e:2c:35:90:a9:dc:f3:
53:47:9b:0e:a3:0a:70:39:1e:5d:86:19:f0:d7:67:79:56:5a:
f9:44:74:50:50:a4:d5:eb:c6:f2:0a:82:18:31:99:e1:f2:27:
67:0a:83:30:0d:4e:c6:c0:87:dd:ef:2d:df:f6:3f:07:b6:7e:
9b:57:21:d4:d2:93:d5:a4:d2:09:74:d8:fa:8a:86:d3:23:b3:
aa:a9:b3:3e:fd:e2:dd:44:e3:12:40:a3:4a:3a:03:a0:51:12:
ee:86:6d:2c:ca:2a:16:13:16:94:c4:99:0a:f1:09:3d:8a:c8:
f7:9e:27:82:b7:71:6d:4c:79:a0:3d:16:89:f2:62:20:55:9a:
2c:fc:6b:ca:4b:50:10:57:1e:35:82:78:59:6b:3b:dc:94:67:
4e:73:17:3a:61:7f:87:cd:ca:b2:94:70:f8:11:ee:38:2f:0f:
a1:0d:79:c6:10:60:6a:07:e5:3d:4a:0e:6c:d4:4d:e7:46:32:
ac:b3:c4:90:2e:7b:58:71:9b:49:07:6e:9c:0d:aa:f3:49:78:
d5:45:14:cc:81:f2:e3:b7:9e:3d:21:b1:ad:a4:74:ba:e0:83:
6f:f2:6f:ab:d9:35:3d:02:1a:0f:a8:49:30:70:e3:6c:e9:31:
9f:e8:22:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3lPFDLlKQE9E+ZHswGgrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDhmZTA3MDRlNGFjOTVlM2E3MGU5NWJlYjg0NDI1YzMx
NmI5YWQwHhcNMjUwOTExMDcwMjExWhcNMjUwOTEyMDcwMjExWjAzMTEwLwYDVQQD
EyhmYmU5ZGZjM2ZiZGRhZTJiY2JiMjg4M2Q3NDdjZTQ5YWZiODQ1ODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwdYjDSsfhYZU57GYFNZ8kO4AjTZ
462sRSXORw8YJ4QfgC/0n1hPBedNbJgho4MFHgBy/ZPJa3IsrrtrItr8sm7/U8fN
/6HfiIllVQM/P8IuE32lRdvM3DVjEDK5a+1zfTpcKJOr0GR9BlIYPOqeOZvGnwM7
I3lRFoah2JBvqfXvB//ozUeGxNwV0dPUcVTuDT24IAr05zyNI4qqUwVTazwURLOD
6CJqAuxjb08ArVRrLRzK6H3kpxVAQhsPUojTd4OXtbzeY+adBbz4fBiHmpHdNM6w
zlr7CkCOi17nbTIqcKENzCPzpQGTikYsLEErI+lXK5iB4biTwqyeGADTWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvp38P73a4ry7KIPXR85Jr7hFgQMB8GA1UdIwQY
MBaAFDpI/gcE5KyV46cOlb64RCXDFrmtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tqLUJ3VGtySlhqcHc2VnZyaEVKY01XdWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85MTcxN2MtZWI3Ny00ZTgzLThlYWEt
ZTEyM2U0ZTMwM2UxLzEvT2tqLUJ3VGtySlhqcHc2VnZyaEVKY01XdWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS85MTcxN2MtZWI3Ny00ZTgzLThlYWEtZTEyM2U0ZTMwM2Ux
LzEvT2tqLUJ3VGtySlhqcHc2VnZyaEVKY01XdWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuvEoQ7ic
KgcAseyOLDWQqdzzU0ebDqMKcDkeXYYZ8NdneVZa+UR0UFCk1evG8gqCGDGZ4fIn
ZwqDMA1OxsCH3e8t3/Y/B7Z+m1ch1NKT1aTSCXTY+oqG0yOzqqmzPv3i3UTjEkCj
SjoDoFES7oZtLMoqFhMWlMSZCvEJPYrI954ngrdxbUx5oD0WifJiIFWaLPxryktQ
EFceNYJ4WWs73JRnTnMXOmF/h83KspRw+BHuOC8PoQ15xhBgagflPUoObNRN50Yy
rLPEkC57WHGbSQdunA2q80l41UUUzIHy47eePSGxraR0uuCDb/Jvq9k1PQIaD6hJ
MHDjbOkxn+gi1Q==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:56:00 2025 by rpki-client