Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: DwNUgrnYB66rYgXrsYyucyme/ORKoaWmbXAYmXfhnl0=
Subject key identifier: 2E:CA:7E:23:58:DC:1F:2C:18:EF:D1:1C:A7:F9:F5:7E:86:81:EC:45
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 0199FC214FFA6373DC8CC65C58DC43429387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: DFvO543buXO6QAD6iga-2ghdPJM.roa (hash: OwW2BWhEe6SpLOjaLPnDoeeE6qmWEx2kPzz7nMDDwRs=)
2: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: TCMGiRB+wuEiBOaafQPtTZW8ExzmDqIctveyPnPOjwU=)
3: b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa (hash: phtYuXPVmT4EIKYX0FwVqQycRaEtVPLsT/EPqn9XD1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4f:fa:63:73:dc:8c:c6:5c:58:dc:43:42:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=2eca7e2358dc1f2c18efd11ca7f9f57e8681ec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:f8:23:30:4c:a9:bd:12:ad:79:30:0e:fc:
64:78:5b:bd:7b:2b:1e:22:ca:6e:68:7e:0a:14:db:
af:67:03:3e:89:9b:13:4d:c9:c0:0c:0c:f0:80:00:
15:03:96:25:a4:db:93:a3:2c:9c:8e:44:b2:eb:b1:
b3:49:f9:58:ee:3b:1b:cc:d6:d5:cf:5b:a5:12:86:
7f:cc:9a:46:7d:74:39:46:7a:3b:40:3e:19:43:c7:
d1:1c:13:3f:16:b1:37:28:ac:01:85:72:c2:18:54:
65:e6:f9:55:bf:14:69:a4:0b:04:f1:70:53:4e:f8:
c4:f6:85:17:ba:9a:55:94:be:89:b9:8b:de:1a:7c:
df:43:5d:a8:bc:2e:0a:78:b1:c0:41:bc:d6:c3:e6:
6d:34:68:a1:9d:17:80:d4:a9:c6:ae:32:29:ce:4a:
01:c3:3a:e9:a5:03:a5:b5:db:a5:0e:01:47:90:a7:
18:8b:52:65:c5:50:67:59:d8:40:f2:f7:ce:d2:fd:
c0:bc:34:56:9f:61:81:51:56:b4:36:11:b0:fe:4a:
19:4d:80:87:8a:b6:ad:80:5d:82:41:dd:3e:a3:40:
9a:06:fa:2d:ee:8a:4f:42:b6:1a:f5:92:3f:9e:76:
ad:e8:af:50:f3:89:8f:05:7f:f2:bc:93:66:b0:63:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CA:7E:23:58:DC:1F:2C:18:EF:D1:1C:A7:F9:F5:7E:86:81:EC:45
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:18:33:b6:2a:6c:bc:e7:b1:17:9f:b1:f4:dc:9a:89:52:8f:
3a:71:63:9b:c4:e7:66:87:37:a0:ce:33:65:59:7e:c7:43:85:
09:68:ac:66:c5:90:5f:2b:e2:a1:f9:94:df:eb:c6:3c:e2:80:
70:cc:d5:47:5e:ac:50:0c:c6:f3:02:02:a0:83:01:c1:6c:91:
4a:4f:44:f8:22:e1:76:02:f9:18:ea:4c:7a:28:d3:5d:3b:18:
98:c4:84:2f:c8:ea:e9:60:53:69:83:ea:60:85:b9:92:73:5f:
75:51:bb:5d:5a:76:de:24:e0:30:29:67:8a:bb:02:ae:3e:89:
8c:cc:13:a9:6d:82:0c:f0:ed:9c:0f:0a:0c:07:ee:9f:a3:a4:
ed:1e:fb:f8:14:64:53:a7:63:c5:4d:60:4c:2f:79:43:f8:57:
9a:52:c2:b2:3f:bb:f7:17:e4:e2:23:21:88:98:40:ae:e9:e5:
b5:22:15:77:80:03:5d:dd:a5:4d:7d:e3:c5:63:c0:0f:14:6e:
66:85:95:a0:13:6d:21:b5:2d:54:50:b8:57:9d:f8:2c:dd:89:
c9:57:f6:a6:15:7f:f2:27:c9:c2:52:03:e9:ff:96:08:b6:4a:
db:ce:4a:03:b1:2f:28:5c:cd:5e:7c:47:e3:ca:3e:56:e2:e0:
cb:6a:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:42 2025 by rpki-client