Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json)
Hash identifier: wT5xvA3/Ti0D30iMo5Vnnsxq3VwnkYJA+rynmKdxAK4=
Subject key identifier: 4B:6D:41:40:2E:89:1F:5F:08:D6:73:20:F6:CE:A9:31:02:6E:79:2C
Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364
Certificate serial: 0197B632EA94A2DCA3ECF1616BA34B7E2855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:19 +0000
Manifest this update: Sat 28 Jun 2025 11:01:19 +0000
Manifest next update: Sun 29 Jun 2025 11:01:19 +0000
Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: hjvTfr3PpOVZqAl6q5H02j2AA88NAcSq3g7KhdoHU28=)
2: WAQz-NVz1tPP197fB-7kdlHEMDo.roa (hash: EfunuE83nVqoEWqBwZZf7jU1FPr/i4YaWTLI4hd6d6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ea:94:a2:dc:a3:ec:f1:61:6b:a3:4b:7e:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2896897a9721678e684693993a5a884903364
Validity
Not Before: Jun 28 11:01:19 2025 GMT
Not After : Jun 29 11:01:19 2025 GMT
Subject: CN=4b6d41402e891f5f08d67320f6cea931026e792c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:e2:5f:9c:28:86:cd:40:13:a4:de:86:3d:
82:61:0d:4f:a0:68:d2:94:d8:89:74:af:97:67:9b:
9d:84:7d:f1:24:89:b5:6e:46:97:0b:bc:f5:aa:38:
7e:97:56:f8:75:1f:1e:a6:ec:e0:df:1f:25:ec:c8:
d7:4c:cc:eb:8b:fc:2e:83:4d:f2:9b:e1:88:86:7e:
d6:1d:9c:aa:75:69:01:6b:3b:1e:8d:a5:8f:3e:43:
21:7b:0e:40:70:44:8b:6c:96:34:5b:38:00:bb:26:
a5:90:b1:f4:38:56:ad:c1:41:ad:5a:f3:0c:ac:69:
29:76:c9:09:66:c7:ff:7e:1d:aa:ea:81:11:4d:9d:
9c:ad:5b:54:f0:d4:47:ac:9e:60:61:ca:3f:fb:98:
cf:aa:7b:06:18:19:9e:8b:e3:0d:69:62:1b:f0:91:
eb:e1:b4:7f:f4:e2:51:d3:b7:23:73:c9:76:6a:3d:
37:8e:c4:d3:bf:53:9b:b1:80:e4:39:f3:67:68:40:
17:e3:25:48:69:7c:67:12:78:51:65:58:4c:5e:1b:
8e:9a:50:d4:be:ce:db:62:f1:02:1c:7b:0d:ba:32:
ef:a7:5a:7a:4c:c4:23:04:39:64:d5:6a:c1:3c:fb:
73:15:a8:68:9c:a3:fa:f8:42:cf:72:56:d0:17:a6:
22:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6D:41:40:2E:89:1F:5F:08:D6:73:20:F6:CE:A9:31:02:6E:79:2C
X509v3 Authority Key Identifier:
keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b0:ab:95:54:8d:6c:e4:28:b9:34:f9:7e:b6:72:9e:b3:75:
8a:ce:a1:a2:37:5b:00:74:64:a6:58:a8:d2:1b:f9:db:95:08:
27:95:56:ae:bf:76:91:09:8b:bc:17:38:bb:1c:6a:c8:f1:bc:
0d:6b:9e:71:79:4e:f3:ea:49:8c:22:e7:fa:c5:66:76:d8:c1:
67:be:90:09:87:0b:c5:1f:5e:65:2b:2b:7d:b3:b4:4e:91:da:
d3:90:0d:3e:fd:5a:cc:e1:0f:12:25:fc:19:49:72:5f:ae:cc:
c2:09:b8:7f:a9:61:52:3e:48:76:3c:9b:4d:42:2c:6d:2a:97:
c2:b3:53:ce:e5:c3:3c:5e:e4:54:a7:6b:2d:0d:94:f3:fd:2c:
19:46:5b:02:32:d4:4d:5e:66:e1:ee:b3:eb:b9:aa:44:e7:ac:
04:24:a2:c7:ad:38:4a:c5:92:b9:08:a8:72:0e:3c:8e:1c:90:
d5:b2:ec:7d:3c:7f:f3:f4:db:33:5a:1e:9d:82:fe:8b:42:20:
14:15:b2:52:90:1b:08:97:79:82:bb:05:04:e2:60:3e:44:d2:
a2:14:61:ae:77:e2:0e:61:f6:df:ed:90:f7:56:1d:a4:8d:16:
0a:00:41:60:5a:ce:51:5a:61:1f:f9:1d:ee:21:ed:7d:d6:64:
dc:00:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:17 2025 by rpki-client