Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: GBfGO87jcsG3EzPl9NZg7/cGSUu9hs/FztCbco2PMIQ=
Subject key identifier: 99:8F:E8:B2:5B:9B:61:3D:03:98:CC:EB:F7:F1:3E:93:20:5E:69:82
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 0197481E48BE775C82DA7579E140BF3B98BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 02:00:33 +0000
Manifest this update: Sat 07 Jun 2025 02:00:33 +0000
Manifest next update: Sun 08 Jun 2025 02:00:33 +0000
Files and hashes: 1: 6dFmm5sRY32IWZd8jLU8_s5imvY.roa (hash: udPQ8wWzpwcAiDjrHHyq/uTqqzcEbt4FowH3Qt/QIEM=)
2: LHDFKCfWLJp2mBfByLfhuS_iDkY.roa (hash: hhocfI4M747eSln+lUvkyI8Ag+8FG16kwPY8wAbPOQk=)
3: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: AXVFsL3NR5ZsOtTPG6AivC/pqN71IsXNBGXGus2+stM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:48:be:77:5c:82:da:75:79:e1:40:bf:3b:98:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Jun 7 02:00:33 2025 GMT
Not After : Jun 8 02:00:33 2025 GMT
Subject: CN=998fe8b25b9b613d0398ccebf7f13e93205e6982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:f5:73:2c:58:de:d6:45:bc:38:a7:4c:bb:
4c:5e:61:73:25:66:0d:5c:81:b1:8c:c7:dd:95:62:
dd:3b:7b:66:75:27:e5:ec:a6:9b:69:6b:ce:cf:b8:
22:9f:f5:a9:9c:90:85:34:96:da:e1:cb:c7:b3:62:
87:83:2b:6b:bd:7a:60:55:2b:dd:a0:4d:51:02:65:
c7:ed:f4:0c:8b:13:0b:ac:34:24:0c:fc:40:10:6a:
b0:49:be:1d:f7:1a:92:5e:a3:42:51:9d:cc:b8:a6:
da:17:59:31:45:ba:33:b8:1a:3d:6b:11:d8:04:3e:
97:80:45:c0:98:0a:29:bf:7a:e7:47:6d:1b:61:2a:
7c:38:b9:74:79:69:19:26:49:5f:7a:5e:09:2c:6c:
8a:a8:75:91:27:5c:a4:d6:46:b9:ec:45:2b:f5:31:
57:e7:5d:5a:a6:b8:51:23:1e:a2:29:15:39:8b:66:
34:ff:1c:2a:f5:5d:9e:aa:fc:f4:f8:53:f7:25:14:
71:03:56:c4:21:40:3f:ac:98:52:e5:00:fc:d2:b0:
d6:e1:0b:5a:89:ad:62:92:84:ab:ea:e2:7f:28:83:
ef:f7:c8:50:89:5e:f4:a4:5d:24:0d:dc:be:b9:4a:
5c:11:89:41:b6:be:d0:18:66:44:41:cd:ca:4d:3d:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8F:E8:B2:5B:9B:61:3D:03:98:CC:EB:F7:F1:3E:93:20:5E:69:82
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:34:b6:e5:8f:52:3a:83:c2:1f:2d:f9:12:9f:52:4d:cc:04:
b2:6b:8f:95:54:07:e4:9f:f7:c6:d3:c9:5d:d7:cc:8c:8c:71:
8f:80:4e:5f:0e:ed:ee:27:58:29:4a:6b:89:38:4e:0f:5b:2c:
07:34:84:ce:9e:96:39:12:96:b4:a3:1a:6f:28:38:07:8d:3e:
25:fd:14:fa:4a:06:f6:53:7c:05:46:84:96:1c:f3:8f:9e:03:
e6:23:c1:a9:c6:0d:0e:45:09:34:0e:33:86:4c:25:15:f6:03:
16:44:a6:72:a4:fc:14:5f:5c:4b:27:42:1e:80:74:ed:2e:41:
73:05:e0:b6:6a:34:68:f1:45:0b:d3:d4:44:5d:bd:e3:b0:5a:
21:76:38:bb:8f:05:a9:de:1e:62:3f:76:a4:af:c4:a8:b2:3f:
45:cb:30:fe:f6:82:ff:b3:cb:dd:e4:ba:b5:e6:72:a5:b6:a2:
d5:54:69:88:26:10:f1:2f:16:a0:96:1e:22:50:78:ce:5a:65:
11:d1:2e:c3:2d:7a:8a:29:ba:2d:66:68:6e:47:21:2a:38:b9:
be:ca:15:9a:ce:88:d5:58:38:7f:9e:90:2a:fa:87:71:12:5f:
4a:b5:a4:7c:29:ee:16:fe:29:7b:12:01:b6:24:24:e5:65:aa:
5d:4b:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:16:19 2025 by rpki-client