Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: MAYdj+AEGWO4OcaNvln4N2xdIBmUpDJOZ31O5zQiMk4=
Subject key identifier: CF:50:D5:B0:7F:05:A8:06:B8:98:15:26:14:C5:CF:09:DD:1C:A1:D5
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019746D48A39BD1FBCB9831D277734A4B39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 20:00:23 +0000
Manifest this update: Fri 06 Jun 2025 20:00:23 +0000
Manifest next update: Sat 07 Jun 2025 20:00:23 +0000
Files and hashes: 1: DFvO543buXO6QAD6iga-2ghdPJM.roa (hash: OwW2BWhEe6SpLOjaLPnDoeeE6qmWEx2kPzz7nMDDwRs=)
2: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: QrvlHp+w9SLJWDT6jLqlOhYoVBO4lWdmgP/juGrkYJE=)
3: b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa (hash: phtYuXPVmT4EIKYX0FwVqQycRaEtVPLsT/EPqn9XD1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:8a:39:bd:1f:bc:b9:83:1d:27:77:34:a4:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Jun 6 20:00:23 2025 GMT
Not After : Jun 7 20:00:23 2025 GMT
Subject: CN=cf50d5b07f05a806b898152614c5cf09dd1ca1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:16:2b:c6:f3:e1:6a:26:39:51:b2:07:d7:
c4:b2:d7:1b:55:29:e5:72:5f:2e:a6:4e:ef:1f:0f:
ef:ad:c1:50:d0:46:42:65:71:0e:44:54:61:1e:ba:
f3:8d:03:df:d3:83:6a:36:81:04:04:82:bc:26:d2:
ab:00:1a:8e:00:79:62:d4:14:ce:93:81:33:af:85:
60:60:e0:13:64:08:d9:34:75:94:a8:37:ee:8e:9e:
16:e0:82:94:b0:a5:73:8d:54:18:30:38:d1:eb:0c:
8d:48:e9:3c:90:ef:35:b2:11:a6:eb:f0:19:2c:c0:
f2:c8:e5:7d:12:51:f9:1b:a6:1c:c0:92:5c:1f:ad:
61:1d:c0:18:e0:98:4a:0e:3a:3a:a3:45:87:00:93:
78:5d:ff:ab:17:f8:b0:2f:01:ee:aa:ad:50:c9:0f:
0c:bf:a6:dd:cb:70:36:a3:56:e7:1a:45:92:00:b1:
83:de:f2:41:e1:7d:17:c2:d1:a8:a0:c4:d6:31:74:
c6:1a:43:af:f7:1f:fe:0a:79:4e:1c:67:8d:27:ae:
ec:88:87:51:a4:95:88:60:2d:9e:6d:35:1e:c2:f8:
0b:59:93:64:53:1d:a5:c4:14:cd:9f:62:06:b0:cf:
ae:d0:97:df:1d:e2:61:bd:d2:b9:0e:dc:7d:7e:63:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:50:D5:B0:7F:05:A8:06:B8:98:15:26:14:C5:CF:09:DD:1C:A1:D5
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8a:af:b8:60:9c:a4:c8:b8:5f:f1:90:37:a6:28:2f:d4:9d:
fd:d4:8d:76:42:0f:7a:d6:60:90:a7:6d:d7:5a:78:e2:ae:22:
2c:e3:7d:47:9c:64:20:91:5d:44:c3:3f:36:a5:ac:d3:b1:c4:
59:9f:8a:d4:20:39:43:7b:f6:7a:59:91:73:f3:b4:b2:a0:01:
ed:a7:4d:34:74:48:a9:5b:0e:fb:a1:5e:f1:19:f7:33:b7:2c:
12:a4:79:db:1e:01:83:45:96:42:a0:9f:70:b7:54:97:b7:c2:
bf:9d:e1:80:2f:8b:82:e7:d6:01:c2:67:89:44:01:e4:62:cb:
58:7d:36:51:89:bf:e7:33:ef:9d:1a:2c:08:77:9a:7f:e7:b4:
0d:cf:e0:1d:74:be:97:8b:ed:30:45:67:a9:47:ef:7d:de:90:
4d:a9:56:01:50:4d:89:7a:fe:ff:e9:ee:53:ca:e3:3c:70:c4:
19:67:77:81:1b:a8:4e:75:68:19:2b:d2:fb:0d:ff:8f:dc:cc:
08:49:e8:3a:88:b7:b4:4a:cc:b8:c9:8e:31:7b:81:09:8a:cf:
25:46:83:b0:94:e4:75:98:b4:9e:ef:8a:08:fa:82:c1:eb:a7:
c2:97:96:37:02:f7:45:a8:2e:ab:cc:77:9a:08:22:ea:f6:7d:
e0:2c:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:30:23 2025 by rpki-client