Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: 0MBzEzmQ+rKGv4OZhWz/VXBAnCa6MYPdxXGTgsOSozU=
Subject key identifier: 62:C9:02:DC:0F:52:EF:CF:BF:2A:AA:EF:27:2B:1E:17:49:39:C2:68
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 0197D3CF0380CEB3A297967D95EBD5FE88A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 15C3
Signing time: Fri 04 Jul 2025 05:00:48 +0000
Manifest this update: Fri 04 Jul 2025 05:00:48 +0000
Manifest next update: Sat 05 Jul 2025 05:00:48 +0000
Files and hashes: 1: DFvO543buXO6QAD6iga-2ghdPJM.roa (hash: OwW2BWhEe6SpLOjaLPnDoeeE6qmWEx2kPzz7nMDDwRs=)
2: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: LJSgLmLBD9C8E+Z4CwKtH6lj7OgnjSiDrItCpn1JfK4=)
3: b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa (hash: phtYuXPVmT4EIKYX0FwVqQycRaEtVPLsT/EPqn9XD1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:cf:03:80:ce:b3:a2:97:96:7d:95:eb:d5:fe:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Jul 4 05:00:48 2025 GMT
Not After : Jul 5 05:00:48 2025 GMT
Subject: CN=62c902dc0f52efcfbf2aaaef272b1e174939c268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:4e:ba:0b:ca:d8:bd:45:e2:14:d0:36:74:
fa:af:57:a8:ef:a2:65:7f:66:84:ba:34:22:5e:a9:
f9:33:e4:7c:cd:1c:5b:9c:37:23:8a:33:35:89:c0:
00:54:8e:05:b7:9d:2f:14:34:ca:4b:b6:34:9b:57:
1a:fb:d0:7a:3a:6a:73:5e:9a:af:6b:06:5a:b4:84:
62:cb:49:14:3e:0b:b2:47:19:e4:2e:ac:38:59:73:
3e:7d:57:e6:a9:4d:4a:9b:38:e9:20:cd:21:0a:33:
53:ee:e4:49:f3:5d:34:0d:3b:31:50:a4:92:00:4a:
e8:2b:e8:bc:89:41:5a:ed:06:9d:73:2f:4a:6b:64:
10:35:28:3e:1a:96:07:96:bb:ac:4c:a6:a3:67:2b:
96:18:6c:18:7e:a4:a5:2a:31:9a:93:bb:8d:c8:37:
0d:8d:a7:7c:bf:1a:7f:ef:22:4f:56:f5:11:ce:cb:
9c:5b:61:42:21:97:8c:32:93:99:36:26:b2:06:09:
f7:c2:68:db:ba:df:c0:30:94:02:57:0d:a2:fc:44:
76:4b:8d:a7:05:74:82:de:14:f3:ce:ec:42:73:6d:
05:25:17:b9:f8:d3:24:07:69:0c:dd:7d:d4:19:3b:
3b:df:0c:0a:1a:12:9b:e9:d9:38:a8:05:44:7c:a7:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C9:02:DC:0F:52:EF:CF:BF:2A:AA:EF:27:2B:1E:17:49:39:C2:68
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:55:ed:3f:fa:2a:c8:5b:ff:5a:8c:09:08:f4:fd:87:bb:3b:
64:52:34:9a:8f:fa:d2:14:c3:c4:cb:39:cc:c6:56:c7:2f:d0:
44:a9:32:f6:6c:df:a8:02:39:66:f9:85:5d:28:25:b3:25:e4:
5b:8a:af:69:89:c1:3e:a9:6b:fc:5e:ae:17:3c:37:6f:c8:0c:
15:ca:a5:24:59:7a:1e:1a:ef:28:13:77:b0:29:33:33:0d:e4:
7a:03:bb:f6:e7:c3:51:ce:0c:bd:ef:87:0b:50:69:19:d5:1a:
04:ac:ef:58:23:38:ed:18:96:f0:f8:07:94:97:85:6a:50:7f:
82:2d:e3:d7:48:64:8f:0a:a9:8e:3a:93:81:9c:31:c9:0f:3d:
9a:d2:25:b0:f0:b6:24:a1:73:d4:f0:fe:92:50:b2:ea:0b:e2:
e2:b7:8c:88:21:68:6f:6d:4e:92:b6:3d:4b:0d:5a:50:5a:59:
3d:72:47:65:7e:75:28:b1:fb:fe:a9:00:6e:5b:e7:bb:d5:8b:
7a:9a:a7:91:80:61:42:d5:90:36:68:c6:3a:d3:61:f8:80:50:
1a:cc:a5:59:01:4a:6c:c3:9c:90:ac:f1:24:6d:f1:3b:d4:91:
f2:94:b8:71:41:3d:71:56:19:5e:e1:a6:fb:82:c6:c3:43:2a:
1b:2f:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:53:30 2025 by rpki-client