Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: n4nHZyxoqeoDHd7E4wcrATaPFyUZ0FEbtjHbmPabPNM=
Subject key identifier: 44:0E:5C:87:00:80:C0:AD:6B:D3:9D:97:32:D8:48:4A:85:2F:42:9B
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 01974742B69E58656DBD34438E5B5D93E669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 1095
Signing time: Fri 06 Jun 2025 22:00:43 +0000
Manifest this update: Fri 06 Jun 2025 22:00:43 +0000
Manifest next update: Sat 07 Jun 2025 22:00:43 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: IFLr2boZf+swtUX+RJzXs4iRo9twOxL1kyvIarvVkLM=)
2: jBg4c1TddaMZ79OO2ACO6rgKQkE.roa (hash: vxMjeBuQHvoGxQ3EbvzgsnvZ7fj/adVRxxvAS0tcfsE=)
3: yN3-coe-yJTzFymhuWAPFUYAkF4.roa (hash: IPNSpgYWxN2jcOf0NhOGeg6e+K9d2+ZzIVVpZsFLZDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:b6:9e:58:65:6d:bd:34:43:8e:5b:5d:93:e6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Jun 6 22:00:43 2025 GMT
Not After : Jun 7 22:00:43 2025 GMT
Subject: CN=440e5c870080c0ad6bd39d9732d8484a852f429b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:e2:d3:2e:e1:d6:66:3c:99:16:f4:86:97:
f4:94:f2:a5:07:39:97:6e:7d:8a:db:5c:07:07:fe:
69:73:68:b7:8c:e5:e6:a4:b8:12:bf:f0:7f:24:c1:
6e:dc:82:11:d4:97:25:9e:9a:cc:f1:df:f6:37:78:
dc:d1:a5:e1:9d:f9:f8:29:57:cb:48:d8:bc:52:56:
76:a3:ea:cd:cb:6d:0d:21:5b:f6:bd:92:f0:6f:1f:
da:e9:b9:ba:4e:3f:ae:d1:2c:90:bc:9d:27:71:6f:
bb:e1:1d:ee:50:75:f8:0b:ae:ca:5f:8d:a5:7a:d6:
53:00:40:74:98:d2:60:ab:c1:14:f0:ad:13:46:59:
79:c8:e1:1b:6e:4e:e0:df:2c:4f:22:44:dc:19:dc:
10:66:da:cf:f1:9d:98:6a:70:78:0c:b0:ef:32:bb:
46:b2:dc:95:18:1d:fa:a9:75:7f:2c:ff:35:64:8a:
7c:47:f2:cd:c8:f8:b1:4b:11:56:64:97:d0:dd:fb:
30:59:89:5e:f8:e7:6b:77:9e:95:a1:8a:86:78:a2:
e8:b9:0f:55:9f:ec:a5:65:6c:51:b1:fb:b0:53:56:
5e:75:87:09:fb:41:b4:44:0f:14:ff:fd:04:3f:10:
9d:b0:f2:95:0a:b5:8e:0a:ce:62:3a:d5:a3:78:ff:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0E:5C:87:00:80:C0:AD:6B:D3:9D:97:32:D8:48:4A:85:2F:42:9B
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:14:41:ca:29:e0:eb:ef:87:c8:7a:c0:3e:d5:3f:20:35:72:
9e:ef:5d:7d:f3:17:16:94:6d:f4:5f:26:15:9f:e4:3b:b0:c6:
a5:c8:26:11:08:b4:19:be:3d:bd:b6:8d:58:da:e1:c7:32:20:
07:13:f3:96:1b:16:87:4c:50:92:65:be:72:f6:8b:7b:08:92:
d8:90:e8:37:18:6d:b2:13:7b:e3:eb:3c:2e:d7:7e:f8:44:9f:
26:37:d5:e1:19:fd:22:d2:99:b2:db:18:1a:3b:25:05:8f:0a:
6b:9e:9a:25:2d:0c:f8:48:b6:bf:1b:c6:70:98:9c:42:9e:a3:
09:4d:57:9e:00:ff:f4:14:f4:d3:c1:55:3c:46:f3:eb:c9:29:
d7:44:84:60:e2:52:d4:e5:ae:92:e8:da:8d:17:68:c3:23:a0:
23:89:fe:0a:e0:59:da:e7:d9:27:34:f7:1a:fe:57:f1:69:21:
cf:f5:65:67:c1:66:18:57:88:0f:ba:ac:42:0b:a3:10:37:b4:
b3:5c:5e:35:69:c2:75:4e:30:c5:fd:8f:95:e5:18:93:f5:08:
8f:3b:07:42:df:ca:82:e7:9e:d2:5f:ba:85:37:74:67:ae:44:
31:79:41:fb:4d:9b:a8:eb:e1:29:9a:95:1a:cf:02:c1:18:77:
79:43:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:44:40 2025 by rpki-client