Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json)
Hash identifier: uz4GNIRhEgelW/El4QBrKyd6QL2pF9pIDCS7vCc0KG8=
Subject key identifier: 70:26:F6:7F:C4:8B:9E:49:61:83:1F:C5:C4:05:E8:71:A4:EB:B7:32
Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364
Certificate serial: 0198D5F1B16624AF368AFF271E3AB01254D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:43 +0000
Manifest this update: Sat 23 Aug 2025 08:00:43 +0000
Manifest next update: Sun 24 Aug 2025 08:00:43 +0000
Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: g/3vWCZygY2wiJ02isqoJ4Q7UnQeoH/YGA86BjYNVis=)
2: WAQz-NVz1tPP197fB-7kdlHEMDo.roa (hash: EfunuE83nVqoEWqBwZZf7jU1FPr/i4YaWTLI4hd6d6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b1:66:24:af:36:8a:ff:27:1e:3a:b0:12:54:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2896897a9721678e684693993a5a884903364
Validity
Not Before: Aug 23 08:00:43 2025 GMT
Not After : Aug 24 08:00:43 2025 GMT
Subject: CN=7026f67fc48b9e4961831fc5c405e871a4ebb732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:06:3f:5d:03:d6:d5:58:55:16:49:40:db:
80:4c:78:1e:39:72:e2:32:15:28:f3:13:fa:89:ea:
b6:b1:54:87:72:1d:7e:01:36:08:4a:6c:5e:1a:0a:
62:4e:a1:7a:f9:74:e3:4e:e5:5d:ab:60:10:b1:85:
8c:01:2d:ec:c6:4d:93:5d:34:76:64:5a:9c:78:0c:
5e:b8:8f:d6:1f:ad:8f:c5:bb:32:8a:35:66:ce:83:
fa:1b:ac:3f:b2:4d:20:30:7b:e7:46:9b:27:8a:88:
7a:bf:72:96:e7:3d:bb:1e:d7:e2:71:bf:a3:51:0a:
6e:4a:96:92:18:80:14:9b:20:0d:5d:d2:cb:cf:a3:
24:28:e2:ba:86:fe:17:f8:2b:bc:42:44:8d:90:ab:
fd:15:2b:ab:42:f9:9e:76:c9:fa:80:42:6d:06:90:
b7:d9:b2:4c:fb:bb:a6:1d:e4:79:52:6f:d3:36:84:
7b:ed:eb:71:2d:71:2d:db:2c:b3:5b:f8:5f:bd:f6:
06:4d:71:3e:2d:ae:28:af:44:51:dd:3c:01:1a:b5:
dd:e1:1f:c0:be:a9:3b:11:7a:40:94:37:ea:f9:ad:
2f:b3:25:1e:03:d3:e8:0b:98:3d:03:57:1e:6d:6f:
34:b9:89:1e:b4:fe:f0:cb:a0:06:2a:23:a1:85:08:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:F6:7F:C4:8B:9E:49:61:83:1F:C5:C4:05:E8:71:A4:EB:B7:32
X509v3 Authority Key Identifier:
keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b6:14:db:99:be:50:4a:f8:5c:0d:1f:d2:ce:1f:5f:09:06:
21:a9:40:cc:d7:6f:53:6b:a5:97:57:a3:24:13:f1:78:53:18:
7a:53:6d:7b:68:3b:46:b6:4b:92:99:07:c6:3a:8b:8c:67:eb:
c5:00:60:bc:90:33:5e:1e:3f:de:d3:05:f5:49:f5:af:08:da:
67:49:52:47:a8:28:e4:b9:d4:85:9e:03:ae:2b:7e:f6:97:39:
a5:53:b4:bc:50:95:62:a1:49:a0:a4:2d:56:66:47:2e:9d:c8:
9e:fa:d1:68:00:16:3f:a4:05:5d:09:8c:27:dd:6d:5c:d5:30:
42:35:36:49:50:74:18:d3:3c:4a:99:6a:13:cd:44:6b:66:19:
07:a8:74:e8:3f:59:ce:97:e9:52:83:98:96:a0:b3:c4:47:af:
66:da:7c:9d:bd:0d:1b:1a:6a:1c:f7:93:23:65:85:b5:8c:35:
fa:fc:d3:ba:a4:b5:b0:e6:96:5d:b9:b7:5a:41:68:6f:d3:aa:
75:07:8c:3d:5a:cb:f0:55:53:e6:4c:cf:10:3a:fb:e2:d1:e4:
c2:4b:c8:d4:95:ca:b7:8d:c5:a8:5e:a8:d6:e1:dc:0b:9d:70:
86:4d:c7:e3:03:fe:d8:99:1e:9d:09:6a:6b:7d:20:56:fd:1a:
65:cf:14:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:35:56 2025 by rpki-client