Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: 14IIB1QCZa6OUiERLUQcEjKwDp7ibl+SWhBpmWDxX+c=
Subject key identifier: 58:60:E1:98:92:F7:C7:2A:AD:AD:34:48:05:F6:2C:32:03:68:8B:28
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 0198C724D85693D00FAC766C3684500D34B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1641
Signing time: Wed 20 Aug 2025 11:02:17 +0000
Manifest this update: Wed 20 Aug 2025 11:02:17 +0000
Manifest next update: Thu 21 Aug 2025 11:02:17 +0000
Files and hashes: 1: DFvO543buXO6QAD6iga-2ghdPJM.roa (hash: OwW2BWhEe6SpLOjaLPnDoeeE6qmWEx2kPzz7nMDDwRs=)
2: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: TCr0zasiWvnRIJYkfFne3n9VrBmVMnpCiDGrjy5BxMM=)
3: b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa (hash: phtYuXPVmT4EIKYX0FwVqQycRaEtVPLsT/EPqn9XD1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:24:d8:56:93:d0:0f:ac:76:6c:36:84:50:0d:34:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Aug 20 11:02:17 2025 GMT
Not After : Aug 21 11:02:17 2025 GMT
Subject: CN=5860e19892f7c72aadad344805f62c3203688b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:60:a8:c6:62:a6:25:11:c8:09:58:d6:57:
3f:2b:b4:56:1e:9a:92:76:03:59:9d:36:1b:63:91:
f0:0a:83:4f:5e:ff:06:38:c6:50:47:76:5c:9c:41:
7c:3a:93:e6:2c:63:93:c4:1b:f0:74:f2:ad:75:70:
06:26:94:41:46:a1:a4:ef:9d:ff:6c:05:57:7b:bc:
a4:e8:af:05:50:b0:59:93:32:af:3f:54:61:3d:77:
85:6c:be:2e:27:dd:a9:bb:da:2f:73:02:f9:5c:83:
5c:ac:9c:75:54:d4:f5:d3:6e:74:82:95:2a:4a:44:
49:39:15:47:38:cf:86:07:c1:45:c2:70:85:e2:4b:
43:c5:6f:45:dc:50:c9:02:4b:f9:49:6a:d8:54:47:
54:96:cc:a3:f5:1f:71:c7:a0:39:da:df:f6:88:d1:
5c:d5:c9:9f:0d:d4:8f:ac:ae:8d:7e:8e:2e:de:d4:
d2:38:4e:4b:21:ee:dd:44:e5:dd:9a:6c:1b:a2:b3:
4f:83:1a:7a:62:eb:ab:57:f0:da:65:01:94:e7:a5:
9c:e0:20:79:d3:08:49:7d:08:5e:fb:5d:9f:33:b6:
16:c5:56:f1:01:b3:b0:35:b2:59:97:2b:2d:ed:c7:
4d:18:88:08:9f:c8:b4:f7:47:f7:cc:60:49:35:df:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:60:E1:98:92:F7:C7:2A:AD:AD:34:48:05:F6:2C:32:03:68:8B:28
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5c:aa:00:a5:91:c0:8c:22:d1:ba:a7:7f:12:e5:0a:da:53:
0d:df:e4:bb:4b:80:3b:54:ea:80:71:cc:08:c9:5d:35:a2:70:
2d:7d:00:05:61:8d:09:89:e5:c1:51:95:a2:c4:ae:ac:f3:9d:
4e:47:ec:ae:e4:65:29:23:7c:68:b0:21:f2:c8:d4:08:9d:53:
fe:ee:8d:c3:29:73:93:47:33:58:66:0c:d3:3f:b1:aa:e2:e0:
58:e9:9b:93:39:cc:40:14:12:4a:e0:82:4f:16:45:a8:73:3e:
05:13:3a:55:64:2d:82:36:be:e2:a0:6b:3c:ac:70:7a:bd:78:
00:20:e2:56:05:a7:96:d8:9b:33:02:0b:ab:75:bb:1f:b9:19:
e2:c0:6a:82:67:d2:92:ac:20:03:c8:5f:79:26:25:a0:69:40:
3b:aa:f6:d3:96:9b:31:29:bd:2b:2c:da:bc:09:2c:a3:60:5e:
cd:fa:59:ba:c6:59:30:a5:6e:52:8a:fb:cf:73:3f:e0:7d:fd:
6b:52:c2:e8:25:aa:5d:d4:27:82:a9:1c:f3:ba:6f:35:18:f7:
26:99:45:82:47:6f:89:04:b0:7a:f5:c2:2a:64:33:b9:8e:ae:
3f:e3:e8:cd:72:d1:a6:82:7e:0e:e0:64:54:95:bc:9d:6b:7e:
05:bd:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:53:25 2025 by rpki-client