Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: 23ZuK8GwgZilJ6ovAcB94rSoKRvsfeVpW/0n+QbnS7I=
Subject key identifier: 05:C5:C6:BC:2B:25:31:26:33:BD:89:37:A3:CB:67:C2:E6:6B:67:4E
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 0198D5BBBBEB39D6A05B171ED0FD25C8CF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: kfoXrgUtQt5Pa9Pwbu7efA/LLa7Iy+679GrDFKSBT10=)
2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bb:eb:39:d6:a0:5b:17:1e:d0:fd:25:c8:cf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=05c5c6bc2b25312633bd8937a3cb67c2e66b674e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:34:bd:b7:6f:ea:1a:cf:bc:78:39:cd:ae:8a:
47:9d:70:2a:6c:ee:6b:6e:85:91:20:62:b3:fb:2e:
26:9f:2b:d0:23:41:fb:9b:ce:35:e8:42:de:92:d5:
2f:8f:7a:00:98:f6:c7:a4:31:d4:20:1e:b3:9f:a0:
e2:22:d6:6b:5d:17:94:81:fa:15:1d:b8:7a:1e:b1:
7a:af:dc:43:a5:7e:b1:a7:57:e0:fb:f0:2d:f3:95:
bb:cc:fe:17:10:0f:59:e8:f5:a2:16:b1:89:7b:6b:
ea:5e:21:ce:b7:47:c3:67:1c:d3:a0:68:dd:c7:5e:
f2:e0:3a:92:a5:64:87:f7:ca:55:6a:96:66:01:62:
48:2b:3f:6e:60:2a:3f:9d:e4:c2:1d:8a:b7:eb:26:
75:78:e5:a6:a6:e4:13:61:e6:62:bf:ae:9c:8e:62:
0c:e9:5c:ec:c9:ae:fb:f8:3b:d2:a6:9c:7d:a1:82:
01:b6:81:d3:31:c4:99:07:fd:b9:31:11:86:53:7f:
42:b3:bb:90:bf:c9:35:79:44:55:e8:25:52:47:8f:
fe:cf:e8:99:e5:ec:f4:a1:38:65:25:fc:95:38:b1:
c1:7c:c8:24:4c:67:1f:4e:a5:66:76:84:f9:41:6d:
2d:19:73:11:15:e8:4b:30:a9:6d:47:84:d4:03:87:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C5:C6:BC:2B:25:31:26:33:BD:89:37:A3:CB:67:C2:E6:6B:67:4E
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e1:a7:bd:bf:fc:2d:65:91:33:e5:2e:0b:eb:29:0b:b2:df:
66:6e:ac:1d:e2:a0:a6:7c:44:ba:79:e5:ec:25:30:2b:69:3c:
40:25:29:e3:42:47:a1:e6:6c:66:ac:1f:d9:df:5c:94:79:f3:
32:63:47:4c:79:19:91:ef:db:62:0f:72:c9:cc:82:d5:a6:c7:
f4:3e:63:3f:f0:73:ce:e9:d3:a6:02:0b:36:f3:50:3e:19:b5:
df:65:5e:86:5e:ae:50:8b:19:f9:98:04:85:68:6a:a0:48:7c:
e3:2f:b3:d6:64:23:8d:64:2a:13:6a:11:9b:54:55:d2:76:91:
67:33:f3:bc:0b:81:eb:c0:8e:94:df:c4:2e:f0:df:13:24:3c:
8e:13:7e:35:02:71:80:46:fc:12:87:6d:c6:30:fc:a0:1d:2b:
56:ec:6c:d6:6f:0a:af:6b:33:9a:8c:9f:7b:37:f4:7f:f2:f0:
47:f3:8f:24:c4:0c:d0:8d:37:c3:e8:47:6d:98:d5:57:e7:43:
05:6e:15:e4:7c:26:3c:52:5e:50:8f:c9:e7:29:f5:e7:d9:31:
22:38:c6:15:7e:e8:58:0e:1d:e5:e0:0e:d4:f3:09:10:44:89:
ee:6b:5b:b8:a5:7d:63:60:b5:b7:72:18:55:93:92:b5:d7:8b:
6e:01:95:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7vrOdagWxce0P0lyM9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm
YjEzZTgwHhcNMjUwODIzMDcwMTQ3WhcNMjUwODI0MDcwMTQ3WjAzMTEwLwYDVQQD
EygwNWM1YzZiYzJiMjUzMTI2MzNiZDg5MzdhM2NiNjdjMmU2NmI2NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDS9t2/qGs+8eDnNropHnXAqbO5r
boWRIGKz+y4mnyvQI0H7m8416ELektUvj3oAmPbHpDHUIB6zn6DiItZrXReUgfoV
Hbh6HrF6r9xDpX6xp1fg+/At85W7zP4XEA9Z6PWiFrGJe2vqXiHOt0fDZxzToGjd
x17y4DqSpWSH98pVapZmAWJIKz9uYCo/neTCHYq36yZ1eOWmpuQTYeZiv66cjmIM
6Vzsya77+DvSppx9oYIBtoHTMcSZB/25MRGGU39Cs7uQv8k1eURV6CVSR4/+z+iZ
5ez0oThlJfyVOLHBfMgkTGcfTqVmdoT5QW0tGXMRFehLMKltR4TUA4fvRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXFxrwrJTEmM72JN6PLZ8Lma2dOMB8GA1UdIwQY
MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt
ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw
LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuGnvb/8
LWWRM+UuC+spC7LfZm6sHeKgpnxEunnl7CUwK2k8QCUp40JHoeZsZqwf2d9clHnz
MmNHTHkZke/bYg9yycyC1abH9D5jP/BzzunTpgILNvNQPhm132Vehl6uUIsZ+ZgE
hWhqoEh84y+z1mQjjWQqE2oRm1RV0naRZzPzvAuB68COlN/ELvDfEyQ8jhN+NQJx
gEb8EodtxjD8oB0rVuxs1m8Kr2szmoyfezf0f/LwR/OPJMQM0I03w+hHbZjVV+dD
BW4V5HwmPFJeUI/J5yn159kxIjjGFX7oWA4d5eAO1PMJEESJ7mtbuKV9Y2C1t3IY
VZOStdeLbgGVnA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:15 2025 by rpki-client