Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
File: OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft (raw, json)
Hash identifier: L/Rkmw6HQm9wWlbbmFhI3p6gtZjLLl/BQ3X0OK/Q1Qs=
Subject key identifier: 88:51:17:E2:58:D6:55:5B:CF:76:11:14:EB:07:75:EB:54:4E:31:D3
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 0197B7EA93670464C37C0C674165C1C0ADA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
Manifest number: 10CA
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: 4iN5nDTRDVV1CTGuGlGWY0Ybm9Y.roa (hash: EMh2tz4i0xV1ZX0fHy8PWh0LdLWVBXB/z2TGKHCydUo=)
2: OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl (hash: PBwMU8hTdSYTgNHulsyv8Hz9maaY9QjJPhSdwQANxWY=)
3: lKnLzY94Z9zOTG6_1gzuoDIJ_5Y.roa (hash: veP44H4IXhWwV/CHwiAUB7r/bJ77LhyJozTjkioLQx0=)
4: rYkWvcE_3GQZ3jkaDTUiqjj986g.roa (hash: FOkCN5CJZuWhjjVzqhCAbEwhLO4+xpDqIO3h/0CpxnA=)
5: xvMwGEntPrsPSijtn7qckfPF1Lw.roa (hash: cfgqt0GeV7LUHA50FIbHHM6KEXg5Xmqps/DGbUwBUAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:93:67:04:64:c3:7c:0c:67:41:65:c1:c0:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=885117e258d6555bcf761114eb0775eb544e31d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:d4:d6:65:e9:d8:ff:4e:90:89:b9:70:6c:
37:30:32:fc:50:bd:d3:2d:5d:df:bd:d1:fe:d8:17:
87:c2:a5:a2:a4:10:f4:64:c9:72:71:da:3c:df:37:
2f:f0:2d:3f:7e:89:43:fa:f1:0f:7a:6c:c0:72:3c:
97:a7:e2:cf:f9:d4:8e:76:a9:a6:7b:58:c0:48:1c:
5c:08:13:85:c6:c9:e9:d3:b1:a6:61:3e:06:25:ae:
27:5f:79:f0:17:aa:27:6a:ab:ed:39:d2:cd:2b:14:
b5:dd:c5:17:eb:e8:2f:b6:2b:5e:8e:b4:da:dc:f1:
07:f7:16:eb:03:b6:5f:99:47:dc:4e:af:4c:ba:fc:
1a:89:78:12:ae:6a:4f:3a:56:b9:80:0d:da:cf:68:
8b:19:d7:0c:30:8e:bd:ca:bb:9c:b4:5a:77:78:c1:
1e:af:e2:8d:3e:dc:9f:c9:52:79:80:4d:68:c8:a9:
8a:25:bd:6b:d4:a2:30:d2:2c:00:d3:38:03:56:03:
29:34:11:37:63:ba:8f:fb:5b:a2:12:75:35:6c:36:
4f:2e:2e:bc:fd:41:d5:58:62:f4:52:4e:19:47:31:
a9:7a:7f:fa:16:48:93:0f:40:ad:30:57:05:5f:d9:
de:0d:b6:b9:c8:83:30:08:7b:bb:50:ac:b2:8d:a8:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:17:E2:58:D6:55:5B:CF:76:11:14:EB:07:75:EB:54:4E:31:D3
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:44:25:38:be:bb:eb:36:70:30:a2:67:ef:81:61:5a:b1:7f:
91:9d:61:5e:13:4e:d7:71:e8:eb:f1:ff:60:f3:9d:03:0d:47:
3d:24:f4:24:2b:b9:c3:61:bf:4e:49:3b:9f:fa:74:d9:7e:33:
23:85:7f:28:7f:95:78:b3:b6:39:c6:73:ed:dd:a9:56:12:e2:
45:13:62:bf:8e:e5:32:2b:d1:1d:3b:e3:95:72:bd:11:c4:b5:
8d:e2:86:bf:f8:ab:bc:8e:9e:8b:96:13:26:9a:5c:2b:a2:ec:
19:9c:1a:50:02:3e:21:5f:5e:c6:a5:c5:ac:7f:5e:8e:de:0f:
da:c9:e6:b9:fa:8c:8f:ef:b2:e7:3e:b7:43:83:51:05:21:66:
c2:79:ea:5a:fa:9d:3d:17:d8:5c:db:e9:f7:3a:17:9f:a6:8c:
dd:41:7c:be:d6:da:c9:e0:02:5c:f8:bb:a0:9b:3b:4c:43:7c:
7d:2e:35:66:78:34:f9:5b:d6:06:58:b7:73:6b:13:6b:de:94:
c3:39:61:42:0a:f1:24:8a:48:ab:94:c9:1e:cc:4e:18:31:33:
c9:41:3e:86:43:6b:a3:24:b9:da:8b:4a:a0:9c:51:c5:8c:6f:
05:6c:d7:cf:0f:60:5d:69:4d:70:a9:97:f6:6b:f5:b6:0f:89:
60:f0:39:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:57 2025 by rpki-client