Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
File: otGlH74MLlJmesWiVSySo3nOre4.mft (raw, json)
Hash identifier: 89pFJeETfgBGD0r34YQQFeoVpydCfXw8aLW54bSmfYk=
Subject key identifier: AC:CD:B3:95:3A:55:E2:3C:DB:DC:A6:A4:3E:3E:B4:03:A6:B5:DC:E5
Authority key identifier: A2:D1:A5:1F:BE:0C:2E:52:66:7A:C5:A2:55:2C:92:A3:79:CE:AD:EE
Certificate issuer: /CN=a2d1a51fbe0c2e52667ac5a2552c92a379ceadee
Certificate serial: 0197B8213D9F845690CDC81093891C079320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
Manifest number: 018F
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: otGlH74MLlJmesWiVSySo3nOre4.crl (hash: +Rw3oi12ZK6qmpct6xaTA6MCE3kyb4IG0SGZQtxl6nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3d:9f:84:56:90:cd:c8:10:93:89:1c:07:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d1a51fbe0c2e52667ac5a2552c92a379ceadee
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=accdb3953a55e23cdbdca6a43e3eb403a6b5dce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:7d:8e:6b:36:91:3f:d7:f5:bc:0d:50:d3:
8d:a8:91:fb:2a:d2:df:9d:5e:47:62:d5:8a:7d:11:
eb:f9:38:2b:e4:d0:72:36:62:41:3f:5a:30:dc:b2:
50:e9:28:8c:83:87:fe:fc:83:98:69:20:74:dd:16:
13:08:02:b6:de:26:2f:4d:f5:00:6a:59:29:df:bc:
44:0d:ee:52:18:27:a7:8b:2c:11:fd:00:b7:92:a3:
ea:99:a4:23:84:cd:5e:90:a9:40:4e:f4:42:79:e1:
a7:44:91:41:94:07:25:fb:0f:c4:ec:3e:e2:bc:ba:
63:f6:a9:ef:2f:06:a4:8a:50:4f:a7:75:24:60:5b:
16:51:9e:39:cf:6b:eb:05:f7:fe:f3:5d:55:ac:df:
a4:08:a3:11:4a:d7:30:f0:e3:9e:75:6c:7a:5e:e9:
ff:71:04:59:19:ba:52:e0:91:96:63:79:c9:c8:c4:
b5:63:2e:c1:82:2d:f9:bd:8c:47:7a:46:90:62:c7:
e0:41:fb:ac:0a:6f:79:17:6d:50:d6:54:6a:c2:0f:
64:24:b3:2a:79:59:c1:1b:16:66:55:19:de:af:ee:
48:a5:b0:27:29:74:77:19:79:4a:80:9e:26:90:6d:
e7:6a:a9:61:63:fc:b4:51:f3:6f:6a:e6:48:16:c6:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CD:B3:95:3A:55:E2:3C:DB:DC:A6:A4:3E:3E:B4:03:A6:B5:DC:E5
X509v3 Authority Key Identifier:
keyid:A2:D1:A5:1F:BE:0C:2E:52:66:7A:C5:A2:55:2C:92:A3:79:CE:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:06:96:be:78:2c:82:af:b8:14:79:9c:50:af:17:69:f6:90:
1f:38:70:fe:f4:82:d1:be:f0:8f:e4:ea:93:5c:56:b1:72:4f:
8c:82:63:f8:94:5c:27:95:d5:93:13:25:d1:5d:c5:3a:ff:e5:
b7:92:b5:f3:77:c6:4a:05:b7:8f:9b:14:f2:5f:ec:3d:1b:8e:
24:d2:a5:62:14:99:4d:f2:7d:27:b9:7b:0b:92:16:91:56:d0:
1a:c8:93:02:77:99:fe:8f:41:91:0d:7e:42:7a:d0:59:35:28:
49:7b:de:e0:e5:a3:e1:d7:69:05:28:43:e0:e0:eb:72:68:a6:
0e:f7:64:1d:50:d6:bb:29:79:65:7d:47:e8:3a:ee:e5:ed:45:
a4:2b:c2:ce:4d:1e:0a:93:c3:2c:bc:15:0f:17:88:9b:4d:14:
b3:d5:93:00:7e:f4:df:48:a4:f5:50:68:83:e5:5e:da:cd:37:
20:5b:52:3b:71:00:6d:7b:5f:14:85:f4:16:5d:90:ff:0c:54:
63:70:4b:a4:79:31:e4:93:99:5f:b1:e9:ce:43:bf:09:72:03:
6c:fc:c0:83:11:fc:b6:1a:04:fd:d6:dc:01:9f:ac:2b:52:b9:
c8:d6:05:4f:c8:d8:94:9e:c8:0b:a8:cd:b7:c6:9f:a9:15:1c:
69:6c:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:15 2025 by rpki-client