Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
File: r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json)
Hash identifier: Si73L4ztdKQpgq3iYT8cvpWZd9AvQyWBkdaC5IoUmUk=
Subject key identifier: F1:72:F3:3D:DD:AA:62:D9:08:D8:AE:F8:44:00:06:B1:26:44:2D:C4
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial: 0196D1ACB4D1B4701EAEA4CDDB5980867C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
Manifest number: 153F
Signing time: Thu 15 May 2025 02:01:18 +0000
Manifest this update: Thu 15 May 2025 02:01:18 +0000
Manifest next update: Fri 16 May 2025 02:01:18 +0000
Files and hashes: 1: YXk4VQ9w2ydeFfWUpTPAL38DI14.roa (hash: 63k2DxSPaDP/x2Jl3oeCNKnb4PXDg6/RYTgk7tLrZPw=)
2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: bR9jpFSRqqlW44rViLiuk2YjWfvc8V0Wfee51nqlbGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:ac:b4:d1:b4:70:1e:ae:a4:cd:db:59:80:86:7c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Validity
Not Before: May 15 02:01:18 2025 GMT
Not After : May 16 02:01:18 2025 GMT
Subject: CN=f172f33dddaa62d908d8aef8440006b126442dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:7d:1b:a3:14:c6:9c:55:e4:7f:e6:60:22:
21:7a:ea:e0:b1:42:68:f7:79:98:4e:d1:49:ec:a7:
de:ff:ea:c0:a2:be:ef:b5:27:ca:ab:e2:8d:5a:06:
7f:48:eb:5b:cc:17:ef:d3:bd:e8:58:f7:e7:06:ca:
38:95:9d:ee:8f:ac:fb:10:1c:2d:d4:0e:6d:d0:ed:
db:bf:e0:4c:e5:29:4a:f2:16:cb:56:f1:f5:4f:e5:
90:ae:e1:4c:ca:fd:89:8b:13:63:d8:fc:d8:d7:59:
27:0e:a0:e4:59:54:7b:aa:83:37:35:78:a1:a6:9a:
fd:69:fc:b0:e5:5a:91:da:c2:ea:94:c5:39:b1:80:
0f:bf:9e:f6:6f:35:8e:a9:5c:4b:c8:69:1b:9f:ce:
7d:60:67:a9:dd:56:20:de:6f:5b:e4:7d:6d:ce:74:
b8:a0:2e:0f:17:63:af:4f:be:10:2c:61:b0:74:63:
ea:d8:d3:a9:b3:64:57:ff:dc:49:f1:c3:dd:b2:b9:
76:c5:e4:f8:81:99:77:6d:77:3b:a8:90:f4:2b:8a:
dd:75:64:11:f7:ee:de:34:9f:89:95:b4:f6:e7:6b:
63:97:04:18:f3:18:7c:52:20:b4:57:65:e9:fd:fc:
82:db:8e:dd:d0:07:ad:7a:87:16:fc:3d:c9:c3:38:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:72:F3:3D:DD:AA:62:D9:08:D8:AE:F8:44:00:06:B1:26:44:2D:C4
X509v3 Authority Key Identifier:
keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:44:a9:58:0d:a4:35:3b:e8:87:ce:87:90:4d:fc:22:6f:89:
b1:24:da:11:7d:8c:9b:2a:5a:54:60:5b:44:11:5e:2d:23:8c:
2a:8b:e5:1d:ff:0a:cd:7a:29:2b:ac:c5:30:1f:fa:f7:d5:07:
b0:3b:af:63:96:a0:95:5f:bf:9c:aa:a4:83:74:7a:b1:00:e4:
16:4c:6f:43:0d:66:4d:5f:88:8a:f0:de:21:29:6a:e5:1d:8d:
65:ab:b5:7b:d0:66:7a:5c:fc:c5:5f:73:a6:41:b1:9e:35:f0:
a1:cb:4a:0f:4f:1c:c4:d9:48:b6:bb:a5:dc:26:dd:8f:e7:63:
55:18:73:79:4a:8a:20:52:77:a8:e6:a0:11:d9:c9:83:65:29:
f4:d0:59:3d:9c:b4:ad:b9:d0:16:b6:17:2b:84:03:5d:1e:6b:
06:61:31:5f:45:99:82:85:0d:58:80:73:2a:b6:cb:b1:0b:fd:
48:fe:21:b8:8a:5d:a4:82:c1:0e:c7:ae:26:df:67:97:8c:f3:
da:45:28:41:e2:04:b9:83:71:7e:3e:6e:f9:1e:5c:f3:7a:e8:
cf:ea:bc:c6:67:04:f4:10:53:74:86:fd:a1:7e:25:97:5b:96:
b7:5b:9b:ec:67:44:0a:3c:16:48:27:0d:fb:d9:cd:5b:38:67:
6f:40:bb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:32:52 2025 by rpki-client