Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: fnG1x6ZahRCyj/+w8nB4oH/yzMumgA6l4jEYSWlmRgI=
Subject key identifier: C6:C0:BC:CF:76:41:CC:EC:AA:1E:64:A0:89:F6:04:FE:6E:EF:71:F9
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 0198D4044B2CA3B1E36CA6C428A561DD65DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 1651
Signing time: Fri 22 Aug 2025 23:01:47 +0000
Manifest this update: Fri 22 Aug 2025 23:01:47 +0000
Manifest next update: Sat 23 Aug 2025 23:01:47 +0000
Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: 5ECpujW9PcamDkc2uCPqn1QMoNZbKmnAU9R5awGpbME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:4b:2c:a3:b1:e3:6c:a6:c4:28:a5:61:dd:65:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Aug 22 23:01:47 2025 GMT
Not After : Aug 23 23:01:47 2025 GMT
Subject: CN=c6c0bccf7641ccecaa1e64a089f604fe6eef71f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:1b:17:12:fc:c3:97:71:53:0e:e5:50:35:
11:b7:ae:36:e1:ac:cd:a2:fa:10:02:a0:86:5b:0a:
bb:9c:4b:f0:53:1f:bf:83:12:b6:ba:b0:4f:d4:82:
b8:f1:42:10:22:3c:d2:67:d7:5c:00:83:c2:eb:d4:
07:98:be:5a:7e:5a:1f:b6:e4:da:d5:50:26:54:04:
82:b9:7c:17:46:8d:49:be:7b:49:af:ca:f3:84:d1:
3b:e1:28:36:8a:55:68:0c:d5:9b:c5:2b:71:99:27:
de:e8:13:69:06:3a:34:78:e9:d7:b8:84:2f:6a:a8:
b7:d1:5f:2a:f3:18:46:3f:ee:7b:11:38:95:66:d2:
79:e2:9b:42:6d:e5:32:4a:ba:64:e3:ea:8f:4a:71:
6a:27:60:fa:7a:f6:92:a5:e4:01:45:84:36:44:6d:
ec:af:fa:6a:c6:a7:b1:e2:c8:8a:1c:9b:6b:5a:09:
79:bf:ee:9e:6b:e2:5e:5f:1b:a1:24:b2:02:c3:af:
9f:47:c3:e3:a6:5c:0d:37:d8:d4:85:cf:0f:ad:f1:
32:97:43:3c:c6:ab:df:64:11:17:a6:c7:40:b7:8f:
22:a3:4b:c8:7e:a8:ab:0d:d4:91:1f:35:7f:2d:a6:
9d:10:39:a3:10:57:3a:c8:96:67:f9:77:bb:fd:4d:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:BC:CF:76:41:CC:EC:AA:1E:64:A0:89:F6:04:FE:6E:EF:71:F9
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:dd:c3:d2:f9:ed:fe:76:49:a7:07:34:47:45:66:ca:3d:51:
57:c4:de:0e:ac:4d:a4:35:df:76:c6:a8:a1:14:e4:36:22:99:
b4:e8:22:65:c1:5d:c4:a4:2d:dc:89:e9:7e:7b:6b:de:dd:ca:
89:52:76:f2:bb:59:9b:43:89:45:4b:0b:5d:ea:a4:f2:fa:ce:
e5:ba:76:c5:72:4c:5d:46:9c:31:75:c5:cc:4d:7e:56:a4:98:
f7:23:91:bf:f6:c0:17:4d:e5:da:75:05:33:06:a6:38:a8:26:
0b:dc:f2:8d:90:f4:18:ef:7b:e9:69:f1:cc:ad:93:ad:91:f0:
cd:13:0b:e6:70:1b:aa:4d:8e:f6:72:79:bf:60:7c:7a:24:d0:
93:7f:84:70:3e:90:ca:ed:d7:35:15:73:60:de:a0:b2:4d:06:
bd:22:78:d1:e3:85:8b:10:cc:84:be:85:e4:fe:be:55:28:eb:
a3:71:73:71:d0:34:f2:5f:5b:b7:d7:69:e2:12:6b:ee:25:76:
9c:b0:a1:26:d5:e2:9a:97:b4:cd:ea:10:4f:85:99:d5:88:0d:
0f:da:12:b7:d1:93:ef:36:1b:45:28:34:6d:8a:ff:49:71:48:
10:8e:ff:73:1a:75:53:69:5f:c5:53:fe:e5:62:8f:ec:08:97:
8c:be:3a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:42 2025 by rpki-client