
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: xiQcjtHhAvPuHTuHi+q/kuR6rud20Nvugr5StlmHLVU=
Subject key identifier: 61:DF:2F:32:A6:86:66:4C:F3:8B:48:40:33:A1:17:AC:D6:66:E0:71
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 0199FDD9130D70C52871C21271DEF1A39B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 19:01:25 +0000
Manifest this update: Sun 19 Oct 2025 19:01:25 +0000
Manifest next update: Mon 20 Oct 2025 19:01:25 +0000
Files and hashes: 1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=)
2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=)
3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: YgVZYctCGV8if+nM/9naVNtcv2AQ06vvnxvHKVPvPDQ=)
4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:13:0d:70:c5:28:71:c2:12:71:de:f1:a3:9b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Oct 19 19:01:25 2025 GMT
Not After : Oct 20 19:01:25 2025 GMT
Subject: CN=61df2f32a686664cf38b484033a117acd666e071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:b5:29:7d:26:fb:3e:83:2a:a7:16:a5:d1:
94:92:de:28:96:f2:53:b3:b3:eb:18:ee:a7:77:87:
9f:af:e0:8c:99:e8:cf:b4:8d:e6:c9:80:c5:1e:a4:
c7:15:a7:ed:99:09:5f:e6:2f:cd:d5:4f:61:89:d7:
48:f4:5a:c0:8c:11:fa:67:d3:8d:35:cc:c0:39:8d:
51:dc:17:0e:b4:4f:9e:45:c8:13:41:ad:34:97:0d:
ee:97:9e:cc:71:d7:9e:e6:6f:99:8d:fb:6e:cb:04:
33:df:9b:65:ef:e9:62:64:57:a6:ca:f1:1f:98:97:
5c:05:c7:88:56:22:72:f0:bf:9a:04:c7:d0:cd:89:
a4:0e:44:75:17:98:e2:4e:84:12:c3:da:a2:48:02:
90:bb:c4:14:84:dc:07:05:db:ec:d0:76:3b:a8:59:
22:0e:9b:ef:31:63:48:8a:ea:0f:a6:74:a9:35:49:
68:34:ed:ac:ff:7c:74:cb:20:06:34:9e:f5:c0:29:
33:38:b0:e7:06:3d:bf:66:b4:7a:5e:dd:6e:c8:fc:
36:dd:15:e8:a0:dc:f3:0b:86:8d:eb:87:02:9d:50:
b4:f2:50:8f:17:4b:8a:ab:01:92:43:61:06:bc:52:
e4:48:8a:ea:33:fa:ff:b1:69:81:60:1a:80:86:6d:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DF:2F:32:A6:86:66:4C:F3:8B:48:40:33:A1:17:AC:D6:66:E0:71
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c8:9f:2c:8d:f0:84:91:5d:1e:e3:94:bf:16:68:5a:73:ca:
24:92:fd:13:7a:b2:78:2c:9a:d5:7c:f3:4f:4d:ef:77:ec:2f:
e7:97:24:bd:2e:91:5a:cd:cd:74:51:8a:3f:3c:30:41:2e:15:
e0:b2:b2:a0:01:ea:b1:00:6f:9a:87:0a:92:07:13:33:c3:e6:
6a:8d:57:54:55:6a:47:25:b2:b1:32:bd:62:fd:68:31:9a:96:
06:57:a5:26:63:f2:78:f9:05:6f:8c:6a:73:58:5f:58:4a:9c:
ff:36:67:ba:af:88:36:f5:37:50:ac:41:5d:1f:7a:3c:94:2b:
c0:2c:07:0c:34:c9:e2:fe:c6:39:9b:17:8d:05:aa:c5:a0:ed:
0a:fe:b0:7c:ed:76:0f:3f:d1:77:49:59:97:cc:70:d4:74:e0:
3b:91:cf:25:06:b2:7d:49:6b:12:21:a4:aa:a8:3c:92:a8:11:
80:66:7c:ea:1b:bc:4a:da:df:eb:69:19:a9:e0:a9:30:b1:6a:
8c:01:df:e9:ee:c0:c4:c9:7b:9d:8c:64:ec:67:70:d5:d5:97:
6b:44:e8:84:ce:e6:26:0f:80:1c:b5:9f:76:3b:82:91:8b:11:
af:81:e2:f6:00:2c:2f:d8:08:7c:9b:12:93:c2:84:99:2e:c6:
32:7b:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:08 2025 by rpki-client