
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: Ptjrq8qEfwe/jaWECWPfLs6HwZxn7jRac3pr9Xtcl0s=
Subject key identifier: DA:A0:25:8B:2D:EA:90:49:82:3E:A9:90:05:B4:6C:64:4A:78:E8:18
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 0197D406396359E1BAC237A34D38EF7AAED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 0160
Signing time: Fri 04 Jul 2025 06:01:07 +0000
Manifest this update: Fri 04 Jul 2025 06:01:07 +0000
Manifest next update: Sat 05 Jul 2025 06:01:07 +0000
Files and hashes: 1: NR0WsT059Uu9ocKkEY9pXlrin1E.roa (hash: VV0hNdxr41R7/bkmPoA35nvmhlKGJglGwfeyHr+U+LY=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: t7PzNElNpbKG+Fw+kvuwF2oi/x4BV/Q+bloCXfr0of8=)
3: SEh_0GqoSaiRBqWseUujp9ajyxU.roa (hash: 4qBD/oh8RDMtbEgS97ZhV1TCABNjw7BvgNSejlDS+ZM=)
4: g6a9uq2KRc9wYONVhtFPPZGaBr4.roa (hash: Jcii24w5hELShXLMXhNP2/DuSUjwnJEfN84e/8CYORI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:06:39:63:59:e1:ba:c2:37:a3:4d:38:ef:7a:ae:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Jul 4 06:01:07 2025 GMT
Not After : Jul 5 06:01:07 2025 GMT
Subject: CN=daa0258b2dea9049823ea99005b46c644a78e818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:20:3b:92:2a:2d:9a:62:7f:a6:2d:49:b1:
f2:2a:a5:ee:c5:7f:75:89:ec:f6:8c:c8:dd:30:22:
b0:a0:88:ce:f6:a1:b8:26:02:43:c5:54:2d:b8:1f:
43:64:0e:6e:1a:a9:45:61:60:13:74:23:db:87:8d:
0c:9d:cc:18:ea:75:21:f6:85:ec:ca:49:2f:a6:f9:
49:5a:9f:ce:1e:41:c3:ee:cd:a6:f1:05:b6:a9:e8:
0c:58:21:2c:6d:ee:5e:ca:18:42:73:dd:36:3e:76:
ce:8a:2d:ef:0c:bf:e7:5f:00:ab:88:73:2a:78:ba:
c8:eb:fb:16:bb:10:fc:e9:4b:ea:81:53:da:da:cf:
b1:fe:67:1c:8d:61:32:78:3d:74:d0:93:5a:06:78:
30:9f:8a:df:5c:44:a3:e5:c8:9f:21:7d:fb:c3:62:
48:ac:5b:e5:da:88:e0:4f:42:a3:dd:70:d0:90:46:
31:da:5d:fd:2a:54:96:9a:d5:b2:91:d7:72:df:be:
83:1d:54:0c:f2:64:e4:92:dc:1e:d5:7e:f6:dd:23:
24:40:33:00:9e:14:23:4e:b1:39:ad:ff:3d:67:4e:
e5:00:c0:1b:1e:25:a2:ea:4a:ed:91:5b:73:bf:4f:
55:38:a2:b1:f3:4b:ec:c5:05:51:bb:84:5a:8e:cf:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A0:25:8B:2D:EA:90:49:82:3E:A9:90:05:B4:6C:64:4A:78:E8:18
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b3:1e:c8:3a:ab:08:24:bf:29:ba:51:95:72:5e:7e:cc:57:
09:70:33:90:5d:21:49:7d:ae:8b:17:59:28:0d:b0:99:20:42:
7b:92:69:59:c0:2d:02:f1:9a:14:be:c2:58:d3:8f:0e:31:af:
0a:08:84:7a:c4:fc:4d:9d:6e:80:db:ec:88:67:b7:4e:ff:c9:
ba:8a:83:50:65:5a:bd:74:f3:31:7e:5c:56:39:14:07:a5:e9:
78:8f:50:3c:fb:2d:a6:32:fb:a4:a0:64:3f:7b:04:ed:8e:a4:
e2:8f:c0:35:9c:de:43:c6:b9:6b:77:5b:e6:6b:4d:61:36:e0:
94:aa:94:79:59:00:a2:ef:ed:76:49:a0:7f:34:94:42:42:d5:
b3:1a:15:db:95:30:3e:94:b4:ac:fc:73:b5:a0:be:eb:40:4d:
9d:f0:46:2d:25:92:44:c3:94:02:00:0c:5a:d1:66:5e:bc:b6:
87:9b:b5:52:6c:fa:57:7c:b9:de:1d:fd:4a:5c:63:de:fb:37:
5d:ed:e2:57:22:72:30:6d:ca:ea:7b:aa:5e:72:ae:f3:7c:a0:
8d:16:2c:5f:30:31:a4:19:1a:90:d7:a0:9e:3e:d5:0a:f8:bc:
1a:b0:2a:20:a2:ed:10:45:2b:b8:be:e8:0b:c5:a5:69:ef:e4:
6a:3c:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:07:20 2025 by rpki-client