Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: 4brJVyTnn79JwfXpD0i29P/g+Udjud7Z5xXqOf9Gqjw=
Subject key identifier: 3C:93:DF:7F:CB:47:6E:DA:D2:06:22:36:0B:03:F3:C4:8F:E5:0A:F9
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 0197C982C917DE2817A423F84F3E3C14CF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 15C7
Signing time: Wed 02 Jul 2025 05:01:20 +0000
Manifest this update: Wed 02 Jul 2025 05:01:20 +0000
Manifest next update: Thu 03 Jul 2025 05:01:20 +0000
Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: Ou07AFq8/9jkfH84kMwf9Lw3/G9j3esp/NQEkN1eajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:c9:17:de:28:17:a4:23:f8:4f:3e:3c:14:cf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Jul 2 05:01:20 2025 GMT
Not After : Jul 3 05:01:20 2025 GMT
Subject: CN=3c93df7fcb476edad20622360b03f3c48fe50af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ee:54:74:ff:d3:75:98:1d:77:7b:14:27:c9:
63:e1:c3:76:3f:ad:75:6c:82:f8:c6:5f:d7:c8:2e:
04:30:59:cf:6d:d4:1d:3c:19:2b:9a:10:34:9f:7b:
a8:4d:5a:75:0d:97:74:69:d5:8c:7f:65:35:12:ce:
90:29:09:ee:86:92:9d:bb:97:94:a7:4e:e5:a9:fc:
2a:e0:14:e8:8b:2e:a7:65:1e:5e:e3:21:e4:e7:b1:
a1:3a:57:42:08:46:cf:b7:e1:e1:2d:39:a0:94:aa:
e6:98:88:75:c1:e9:ca:53:f1:8d:85:61:14:53:d0:
9f:a6:b0:cf:84:c5:62:1d:4f:35:86:25:db:69:7d:
e8:f2:77:d0:7c:57:f6:0f:1e:3b:0a:a7:f2:7c:eb:
52:79:de:5b:e2:74:a9:63:77:2a:00:3b:02:0e:7b:
5d:aa:cb:ea:23:80:3f:b2:12:19:dc:45:55:ae:a1:
c9:99:0f:84:f2:f2:5c:b2:cf:55:81:b8:a3:61:44:
0e:b9:90:e5:7e:d1:2a:de:4b:36:cf:a1:b4:50:e2:
77:df:04:42:cc:9d:c1:85:5d:6e:9c:e4:30:71:97:
8f:ad:e0:7a:98:65:db:e4:3a:0e:a6:5f:9c:41:8e:
6a:d6:ad:1e:c5:9d:96:fe:d9:48:d9:d4:d2:41:79:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:93:DF:7F:CB:47:6E:DA:D2:06:22:36:0B:03:F3:C4:8F:E5:0A:F9
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:be:56:35:91:f6:58:0b:9a:b3:89:54:ec:8f:d2:18:06:a5:
d4:30:31:ee:ab:dc:71:47:9d:31:99:1e:0b:6a:62:b9:5e:e5:
b2:ed:39:a7:85:e1:e6:14:d0:a0:55:a0:11:4b:07:f1:3e:2b:
d2:59:3b:8d:2b:36:96:ed:4c:97:fb:d1:71:8d:2d:ab:3f:a5:
e3:45:43:5d:da:5f:df:c3:9d:dd:fa:6d:21:fe:54:a9:72:d1:
01:3b:cf:d9:79:9f:99:f6:5a:56:d6:9f:d1:f5:b3:05:57:18:
3b:13:9d:8d:4e:40:52:c8:77:2f:ba:cc:ce:90:9a:e4:dc:c7:
15:72:92:22:35:1d:a9:e3:3c:65:4d:59:c9:ed:e8:e5:87:98:
eb:90:cb:b5:a5:5d:45:a6:b2:8f:a8:de:52:1b:5f:32:eb:bf:
c5:83:03:ef:53:2f:c4:41:41:05:c9:ed:88:bd:f6:f2:c3:d2:
0b:c1:a9:ca:46:33:e7:d5:45:50:e3:97:07:64:40:a1:a9:73:
6c:6d:c7:5e:f3:63:4b:26:7d:25:d6:88:4d:9d:4f:ee:5a:07:
ba:a2:9d:1d:82:47:1e:ba:92:62:b4:52:1b:8d:2f:fa:d0:49:
eb:db:c0:be:45:b7:f4:71:5d:c8:a8:54:04:8f:e6:ae:46:ae:
3b:38:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:28:01 2025 by rpki-client