Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: KwpShgpknx8ZcnUD8vliON8+2QkaZbGG1HXyJg5S9Zg=
Subject key identifier: BE:47:6E:01:F3:57:F6:5A:48:86:CC:89:D1:5F:81:6D:36:A3:2F:E2
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 0197C8028DABD7344AB47724787A589B26B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 1060
Signing time: Tue 01 Jul 2025 22:01:39 +0000
Manifest this update: Tue 01 Jul 2025 22:01:39 +0000
Manifest next update: Wed 02 Jul 2025 22:01:39 +0000
Files and hashes: 1: c7xqGqZ0KnoVgSHP1uxqIn-gcow.roa (hash: fgA4jW+G01sd+KIFTnm2o/eJLY8zge2zWEftjWqJRcE=)
2: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: 3tmewaBNHTN4OaL/P+Z5b+5vKx1rvGC1plkdzzuNfbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:8d:ab:d7:34:4a:b4:77:24:78:7a:58:9b:26:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Jul 1 22:01:39 2025 GMT
Not After : Jul 2 22:01:39 2025 GMT
Subject: CN=be476e01f357f65a4886cc89d15f816d36a32fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:c9:6d:dd:98:5c:fc:c9:1f:18:b7:81:37:
c9:8a:81:a6:77:b9:93:15:51:8f:75:88:9e:83:7d:
44:cb:85:1d:45:2c:19:8c:9d:af:c4:7c:c3:7e:57:
ac:67:b2:ad:29:28:c8:0b:21:0b:07:e5:e6:da:d7:
42:12:86:05:0b:fe:a6:fe:6b:60:a2:6f:71:b9:45:
6b:a7:05:b8:0a:36:e1:d1:2f:7d:5a:e0:79:79:11:
f0:e5:2a:38:0a:ba:aa:35:2a:88:2a:19:94:6f:14:
cf:dd:1f:82:d9:a3:05:9f:3e:46:57:76:78:88:fe:
20:e7:92:d1:97:5b:d7:c1:5b:25:03:db:be:fe:87:
ed:30:0b:64:50:24:25:69:32:e2:e7:16:42:d9:74:
9e:5c:b2:8e:c5:32:e2:04:82:f6:b1:36:53:d5:cc:
db:54:0d:b4:87:04:1c:4c:a3:73:12:7a:39:db:42:
64:ff:53:01:aa:bf:b2:42:0d:80:db:73:a7:31:96:
2b:c6:52:47:f4:02:5c:5f:fc:2b:31:d0:a4:d9:ac:
54:39:e7:0a:14:26:b9:a6:a1:ec:e6:43:f5:8f:d5:
e1:33:13:b4:da:fe:97:5a:3b:f3:46:e8:7e:9e:84:
d8:fb:c2:dd:e7:37:f3:2e:6e:dd:23:55:35:8c:61:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:6E:01:F3:57:F6:5A:48:86:CC:89:D1:5F:81:6D:36:A3:2F:E2
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c4:7e:4e:50:26:62:0e:60:fd:3b:69:d4:74:37:9e:66:34:
7d:ec:ea:ed:a9:1e:0a:be:1c:76:a3:4d:52:4e:ca:80:92:5b:
b9:44:fa:4c:bf:0b:32:cd:51:1a:8b:cc:34:4c:f3:c5:01:b0:
84:f0:c7:0d:c3:6c:ec:f7:77:ad:35:00:5c:9c:a8:2e:0e:3d:
cf:6e:f7:10:1d:da:45:2c:41:ad:8b:63:97:45:2f:2d:3c:3b:
84:55:19:33:a2:38:35:de:fc:88:01:e8:1f:a3:83:1a:cb:ee:
41:eb:62:d8:a4:72:e0:2c:dc:a0:21:f8:f4:40:37:c6:d2:ab:
2f:72:36:b8:85:a2:42:63:ce:ab:da:85:41:93:4d:63:62:cf:
94:1a:08:96:94:25:0d:7f:25:9e:d7:29:47:26:00:c0:01:d6:
37:4d:47:b8:6b:08:a2:3d:35:a5:33:46:b8:a9:82:df:99:98:
86:bc:76:69:5d:11:a6:22:da:2f:7d:17:0d:00:a3:50:ad:c0:
de:3c:d7:07:56:84:7f:ff:03:57:0d:71:fe:42:8c:b9:69:dc:
da:c1:82:26:f3:e3:6e:cd:4b:bf:81:39:15:75:58:71:6f:ca:
20:0a:e4:df:52:89:ce:ef:af:4e:0a:d4:48:20:83:b6:02:07:
78:c1:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:39:40 2025 by rpki-client