Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: /qlkQH/kX5guE7wEFsvY0eILt53DSH0wNDTGHgzWoIU=
Subject key identifier: 3E:D6:2F:07:BD:5E:56:C3:15:FC:86:21:33:84:0E:80:5C:6A:CA:35
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 0197B7EA51915806C3003A213A37FC400569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 0571
Signing time: Sat 28 Jun 2025 19:01:16 +0000
Manifest this update: Sat 28 Jun 2025 19:01:16 +0000
Manifest next update: Sun 29 Jun 2025 19:01:16 +0000
Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: A9PlUfu/H6MpN+FgOCqjhvbga8fObZZ+k4oBkhpXrlQ=)
2: YKP2-mUbLqVt8YjjDalCzO3YP4U.roa (hash: Yz1Fy2JsuM7B/qCN027yJ5VSafRq6NaaRWcEtGjJrwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:51:91:58:06:c3:00:3a:21:3a:37:fc:40:05:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Jun 28 19:01:16 2025 GMT
Not After : Jun 29 19:01:16 2025 GMT
Subject: CN=3ed62f07bd5e56c315fc862133840e805c6aca35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:21:8e:73:8c:25:0a:ee:cb:7d:20:5b:6a:
2e:7f:7b:45:0a:67:20:4b:c1:54:5e:9b:1f:6e:c3:
a4:78:4b:c4:10:2a:cd:f4:72:1e:91:25:b6:c7:1b:
e0:1e:06:7a:3b:5b:ad:83:fe:0e:ba:d1:52:95:f0:
71:62:b5:b7:41:c4:0e:1c:7d:b2:be:a9:88:14:87:
6a:b2:b2:14:0f:75:0b:af:32:46:00:08:5c:5b:fb:
32:f2:c6:cd:b5:25:1e:60:94:19:fc:3d:c6:3f:52:
67:ed:07:72:0e:1a:ad:9f:a6:ec:a4:7a:d9:f3:11:
bc:70:86:03:60:6a:3e:3e:24:1f:49:b3:5f:5b:63:
39:ae:d6:4c:80:90:75:19:3f:d4:3c:36:66:21:d4:
f6:4d:6e:df:b5:ac:76:bd:e0:e8:6f:ea:e3:4b:36:
b9:e7:56:ba:b8:44:e4:e9:9f:e9:6a:34:2c:41:99:
0d:64:17:87:cb:4d:31:69:a5:b3:df:f7:8d:a4:25:
69:af:70:b8:23:66:67:b4:98:97:79:0d:87:16:9e:
34:e8:ff:c3:4b:50:20:12:f0:cd:e2:11:41:2c:c4:
55:44:7b:5d:e7:4f:4c:3f:47:6f:3e:f6:f5:da:93:
89:1b:3a:0f:15:7e:27:96:c7:2b:6b:c4:87:31:4e:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D6:2F:07:BD:5E:56:C3:15:FC:86:21:33:84:0E:80:5C:6A:CA:35
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:21:5d:23:5a:35:7f:b3:95:d8:bb:d2:fd:4f:e3:0a:fc:c5:
02:fd:0e:6d:41:98:5d:49:f8:59:de:50:01:4d:3f:66:f1:0f:
e1:8f:ae:0d:cd:a5:3e:d9:2c:3d:e2:52:cc:ee:12:b5:cd:4d:
79:56:72:2a:3a:14:a2:79:78:5b:0a:56:b2:eb:09:cb:78:2a:
a2:3b:88:49:0a:f0:0a:3e:6a:61:9b:68:1c:86:ed:13:0f:df:
4e:ba:c7:f7:d3:40:63:80:3f:f1:8e:7c:a4:26:20:e1:43:46:
18:01:ba:d5:ff:5d:1a:55:8f:3f:1e:c3:cf:a7:b6:23:e1:1b:
74:bc:2d:e3:71:57:29:d5:f7:14:36:88:b5:ec:0e:6b:3b:69:
75:38:0b:8a:0b:6e:45:e2:eb:2c:df:8d:f5:78:d8:a6:2b:ca:
dd:dd:10:b0:53:24:55:6c:1c:fb:42:29:4c:1f:a2:7e:a1:f5:
d5:51:97:64:52:db:b0:8f:16:8a:0b:0a:e0:3c:95:8c:33:34:
e7:0f:05:63:99:a9:b0:bf:57:58:d8:e8:e1:d2:cb:62:03:94:
09:68:2c:c3:3e:92:3e:7b:6f:09:c3:bd:49:11:b6:44:87:10:
a2:5f:aa:db:e4:a0:d9:8a:17:29:5f:2e:82:8a:5e:18:81:a1:
f5:d7:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:14 2025 by rpki-client