
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: jkOxFVohi1OR90+vlEg3NlVa/Ao6dGpZMP/51QYdyt8=
Subject key identifier: 7E:F8:B4:14:DD:6E:6D:BD:A8:3A:16:55:3E:E3:2E:5B:16:8E:41:B5
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 0196D06240982341821A1302BE79A8EED582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 1546
Signing time: Wed 14 May 2025 20:00:21 +0000
Manifest this update: Wed 14 May 2025 20:00:21 +0000
Manifest next update: Thu 15 May 2025 20:00:21 +0000
Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: NAzgCTQIP6f6i9+oeFra3B4nP8+JgItsVK/LLDH8Gh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:62:40:98:23:41:82:1a:13:02:be:79:a8:ee:d5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: May 14 20:00:21 2025 GMT
Not After : May 15 20:00:21 2025 GMT
Subject: CN=7ef8b414dd6e6dbda83a16553ee32e5b168e41b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:4c:92:e7:eb:db:18:f1:b0:52:f7:b7:e5:
11:1a:8f:9b:86:78:9c:12:00:db:0d:0c:5e:5a:b7:
47:cf:95:d0:72:9c:ee:98:1f:43:21:05:f3:21:56:
d3:d6:d3:ea:b7:e9:1f:f7:bc:3f:ae:98:e4:d8:b1:
c2:6f:cf:70:87:f4:50:5c:87:4b:46:5d:b4:d1:ec:
e3:23:1d:28:2a:b2:aa:88:4c:03:8b:a9:e3:0b:96:
6c:f0:fb:c4:7c:18:ce:e7:46:f0:48:d9:46:10:cc:
c6:35:a0:89:7e:d6:ee:0b:a1:d6:3c:21:3c:ae:c7:
fc:d3:68:a9:20:74:23:97:0b:5a:19:06:e1:17:fa:
78:96:b0:7c:0d:c8:9a:f5:00:de:fd:c4:fd:95:65:
f4:e8:0c:ae:6b:17:d1:4b:56:10:a3:c6:4d:16:69:
ea:6c:e1:66:93:c1:6c:9d:b7:f1:1a:de:c9:2c:1f:
31:3a:5e:80:dc:b1:c0:e8:39:26:61:fd:a4:d0:fe:
e2:2b:93:4e:6f:10:19:a2:cd:1f:80:5f:8e:9d:2a:
d1:78:63:c0:9e:ca:21:81:94:47:a8:1b:5b:4f:96:
e1:b4:46:e9:dd:b2:80:d2:71:1f:7f:ae:2c:f8:7a:
ce:e5:2a:8f:2a:2f:9e:23:ad:3a:9b:22:e1:51:dd:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F8:B4:14:DD:6E:6D:BD:A8:3A:16:55:3E:E3:2E:5B:16:8E:41:B5
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:87:85:a0:76:ee:58:cd:2a:09:30:92:a4:de:98:b3:a2:08:
50:ca:a7:3f:d3:31:b4:46:7e:99:5e:be:78:de:7d:6a:c6:1b:
e9:1f:53:3b:ce:10:c2:f5:50:10:9e:2f:5f:3e:c7:8c:0c:4b:
72:23:e5:00:c5:a0:a2:1f:56:77:d1:8e:b2:c9:ca:83:28:0b:
fc:30:fc:71:d3:0d:05:7b:e7:ef:5c:8a:7f:b1:4d:63:34:76:
38:5a:11:cb:be:9f:6d:64:b2:ca:40:cb:82:c1:6a:88:8e:cb:
e4:98:51:5a:37:7d:f4:3c:22:6e:63:76:21:70:0e:ef:0c:a2:
77:ce:f8:01:49:4a:9c:54:6d:c1:73:cb:ff:09:64:1d:f8:ca:
45:75:32:18:4d:31:9a:30:a7:9f:1f:62:62:f0:7a:00:90:30:
2a:b6:c1:41:18:25:06:aa:e4:7a:18:9f:a8:32:f4:d7:81:3d:
fc:bd:01:d6:3e:5d:96:f9:07:a7:c9:56:09:e1:ec:cd:a4:2f:
9c:08:9b:17:33:c6:09:3b:76:28:68:74:f2:aa:bb:30:b8:ff:
7e:26:35:6a:12:8b:83:db:33:86:3b:65:35:f3:f1:e8:ed:61:
36:24:ae:aa:bf:62:f7:64:cf:a9:12:7c:e0:82:2b:bc:a6:ed:
77:88:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:56:02 2025 by rpki-client