Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: jctMjQYTGAuVO51speXXWE0y1+AZDLUxuvmIgXy3Dls=
Subject key identifier: A6:54:33:1E:4C:56:0E:57:5E:8E:4E:1D:6D:8A:B1:37:73:DF:B9:07
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 0198D65F4593FAFCF22ADA338BF84D9FF2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:00:24 +0000
Manifest this update: Sat 23 Aug 2025 10:00:24 +0000
Manifest next update: Sun 24 Aug 2025 10:00:24 +0000
Files and hashes: 1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=)
2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=)
3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: Q6RNzXDi/MWFOc+bL+OQUVKQXS7M0lfx0HmTOZLk/7o=)
4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:45:93:fa:fc:f2:2a:da:33:8b:f8:4d:9f:f2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Aug 23 10:00:24 2025 GMT
Not After : Aug 24 10:00:24 2025 GMT
Subject: CN=a654331e4c560e575e8e4e1d6d8ab13773dfb907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:1d:23:af:af:10:6a:a7:da:9b:9e:3d:c2:
9a:ff:c5:d3:23:02:74:16:72:c4:15:85:18:fd:e8:
e2:56:1b:b0:83:fa:2c:cc:f9:27:d7:4f:32:d2:6d:
5f:fc:7d:e7:b9:98:d6:1a:11:e2:9d:43:bf:23:27:
fa:f2:ca:81:a8:41:84:f0:db:b1:5f:d6:b3:27:aa:
f8:19:0d:07:40:fe:5b:08:17:68:10:d7:be:ea:3b:
78:b9:a7:70:49:a6:45:02:c0:bf:75:c3:e8:5d:57:
2c:3c:10:e7:f7:ba:ab:db:af:d1:6e:49:63:1e:a1:
22:7a:d7:a5:50:ac:32:1f:02:c3:25:82:7f:9d:33:
9d:bc:8c:77:70:9c:b2:0b:20:3b:ba:46:e8:87:2a:
c1:53:bf:74:8d:77:21:9e:c1:67:11:65:1d:a5:83:
a8:35:69:66:4a:aa:f3:96:90:f1:39:6c:45:0d:69:
78:30:d0:c9:e4:b8:d4:5c:69:ed:48:e6:b8:75:3e:
72:c8:06:57:b1:6f:05:51:4b:a0:a3:e7:b3:53:a8:
4d:62:ea:dd:94:11:96:56:7f:6b:f5:7c:86:6a:f2:
89:b7:e2:80:62:99:0a:e7:b8:b0:8d:62:a7:c1:58:
2d:06:9d:02:cd:60:3a:9d:b2:80:ec:ef:53:75:a3:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:54:33:1E:4C:56:0E:57:5E:8E:4E:1D:6D:8A:B1:37:73:DF:B9:07
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ba:8c:5c:e3:3a:33:ce:8d:31:59:78:8a:c0:a7:7d:48:7d:
45:1d:74:1b:72:35:8e:e8:da:bc:52:ea:77:1c:ce:41:f0:50:
2e:92:b1:a1:08:80:8b:1d:69:5d:43:14:96:b6:c8:a6:6d:bb:
21:aa:08:7d:4c:83:3c:57:4e:ec:a4:00:36:ca:2a:89:32:a1:
43:dd:9a:d2:fb:36:a4:27:2e:08:a4:57:17:fe:09:c7:52:7e:
ea:3b:1b:98:ad:f1:d9:a0:c2:1e:ae:98:09:15:68:db:46:1d:
3f:b4:73:d7:19:7d:71:69:0a:df:3b:4f:a0:f3:7c:56:46:4a:
8e:9d:44:c4:fc:e7:01:18:a9:c7:79:91:12:6c:e2:b0:4d:13:
6b:bb:71:5f:b6:03:3e:2b:74:28:df:2f:7b:f0:52:bc:99:40:
c4:ec:04:17:19:64:08:ea:73:b4:78:8e:d5:79:b6:d5:be:c9:
e1:b7:27:ba:9b:f7:cf:f9:dd:34:e0:fc:a2:17:77:33:ec:3d:
9d:32:bf:7d:5e:40:8f:6e:ec:22:6b:63:e9:98:11:0d:27:68:
15:85:8e:fe:92:e0:c4:8e:d8:1e:38:36:07:9d:8e:23:0c:da:
42:ec:05:ac:a4:22:07:99:c5:31:34:19:18:d7:d0:53:1d:dd:
23:d6:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:00 2025 by rpki-client