Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: 2d6YFfh5ayWOnnXApnL0/oZckQY1dbftZ6sesG4ugeI=
Subject key identifier: 34:E0:CB:A8:7A:EE:B7:0B:1E:FB:4A:4E:D8:D7:CF:BC:9F:6E:32:AE
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 0198D6CD92B28CED3BCCCC3020452E55A3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:53 +0000
Manifest this update: Sat 23 Aug 2025 12:00:53 +0000
Manifest next update: Sun 24 Aug 2025 12:00:53 +0000
Files and hashes: 1: cdMOuRF7uOMr3eiWtLluBITicTo.roa (hash: 2zf3i/TaVgEDUbWisH1c3bo8xEvWjGA35Bw+WbjbFqQ=)
2: gPmJ919io92zLM0qUcMa5dmkecM.roa (hash: m1AiD3SH7JRse/Y0z+yKore/EQyRkJUXQ2NtfWymxSY=)
3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: ZhKkYY7XNZpYHE5R2+8fOV9TNfok6BI/l9dyAxZ1B1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:92:b2:8c:ed:3b:cc:cc:30:20:45:2e:55:a3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Aug 23 12:00:53 2025 GMT
Not After : Aug 24 12:00:53 2025 GMT
Subject: CN=34e0cba87aeeb70b1efb4a4ed8d7cfbc9f6e32ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:81:25:2a:dc:4c:19:6d:7a:b5:42:e4:a8:
70:11:b5:2c:19:eb:a4:24:28:b5:57:f4:ca:c2:3d:
b3:a3:35:1d:3c:31:8d:9a:c1:09:e2:02:13:3f:ab:
c4:9c:7a:de:19:43:f4:02:e6:d8:5d:17:12:a8:c7:
c9:d2:bb:6c:3e:e7:26:fb:5d:d2:32:a8:f1:24:c4:
17:31:d1:54:4d:b6:1a:d7:f7:36:35:51:14:8e:3f:
2a:77:71:3a:e3:d3:69:09:ab:0a:ef:54:18:54:28:
17:6f:33:dd:41:66:94:ae:d1:88:02:4b:6d:d1:79:
1c:46:6d:5c:81:19:78:67:75:fe:7b:9e:38:14:79:
ff:ac:66:29:a7:be:ad:b3:f4:5e:89:98:7e:c7:80:
a9:16:2c:ac:fb:c0:89:a3:b4:f3:73:db:aa:e4:b0:
d3:a8:98:0b:bc:4c:cb:32:61:56:00:33:23:7c:d3:
e5:58:89:9b:d7:d4:bb:92:07:cb:22:a4:c1:03:c6:
24:1f:b5:5e:97:ed:1c:6f:a7:f1:b9:8f:91:d0:9e:
ee:28:fb:ac:0b:e6:7f:d6:98:e6:f6:57:8e:28:f6:
15:0d:c5:12:24:28:2f:6a:7c:77:a4:94:d7:bb:ab:
70:77:5e:2f:06:f1:10:03:ee:38:2a:a6:77:25:91:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E0:CB:A8:7A:EE:B7:0B:1E:FB:4A:4E:D8:D7:CF:BC:9F:6E:32:AE
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0a:0d:cb:bc:68:32:cb:dd:1b:de:af:23:9f:4a:17:b0:22:
6d:3c:bd:8a:15:fb:07:de:11:57:d6:b6:83:60:a0:2c:1f:25:
a9:9b:a6:0c:37:0b:45:71:28:95:5b:9a:4b:c2:e6:f8:0c:e3:
e9:6b:d8:e3:98:8d:7a:4f:aa:42:27:73:a7:d2:d0:19:a8:da:
c7:fd:f1:09:e3:28:1c:8d:1a:35:b6:94:5a:5d:03:a1:b3:da:
46:0d:ad:73:f6:8d:b5:e2:16:21:7c:a8:b3:32:00:fb:c9:e8:
be:b8:22:af:b3:5d:98:61:d3:27:a8:0c:b0:fb:08:b0:cf:70:
ab:54:63:f2:6c:25:cf:fc:f7:b5:40:a9:33:41:47:e2:be:e0:
7a:54:17:94:61:88:71:81:dd:4e:4f:02:15:f7:96:c4:7d:93:
9d:1c:65:c9:fb:cf:ca:27:31:2e:3b:15:2c:47:18:36:0d:fb:
8b:1e:15:5e:34:3c:2c:05:1b:c8:00:2f:87:73:24:11:6a:ee:
c7:96:72:43:cc:e8:62:42:23:6a:33:74:07:3b:2e:73:7b:c7:
22:91:46:ee:03:10:15:c9:aa:a5:3e:8b:c9:73:28:3e:67:fa:
96:b9:ff:0c:1d:0f:14:33:f9:e2:86:23:5c:c1:54:34:bb:f4:
21:41:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:54:50 2025 by rpki-client