Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: /znudq/1cqVPMkRtGfuq35vtpIK+jU3s6NVqIpm5uMM=
Subject key identifier: 3F:8D:DC:31:57:CA:96:D8:FA:3A:28:70:EE:F7:64:09:07:6B:00:AE
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 0197B6A162B1BB4106A483B1BA2AD140A9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 090C
Signing time: Sat 28 Jun 2025 13:01:59 +0000
Manifest this update: Sat 28 Jun 2025 13:01:59 +0000
Manifest next update: Sun 29 Jun 2025 13:01:59 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: ZtSL8CXsn+h9WtUPXHzGPEr2rJb5DpfkTXDUoEUD+xY=)
2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:62:b1:bb:41:06:a4:83:b1:ba:2a:d1:40:a9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Jun 28 13:01:59 2025 GMT
Not After : Jun 29 13:01:59 2025 GMT
Subject: CN=3f8ddc3157ca96d8fa3a2870eef76409076b00ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:4c:1e:c1:6a:4f:6d:95:65:e7:91:38:c9:
f8:fd:31:66:3d:94:b4:e9:f2:1c:f9:8b:84:4a:50:
78:54:f8:f1:a6:a4:d9:14:07:0c:05:03:61:1b:3a:
47:7a:cc:5c:14:78:5b:f0:53:ae:b1:43:53:41:b5:
86:7c:d1:25:e4:fd:8e:0d:93:91:c9:ca:01:cb:77:
1a:8e:0f:9c:d9:1a:54:c1:d1:2e:81:e7:17:31:37:
85:41:5c:98:d0:73:d2:41:8c:5c:e5:41:ba:9b:db:
7a:57:d9:b6:24:47:47:01:52:3d:a2:21:78:f9:82:
b0:42:37:68:d2:f2:f5:25:52:43:10:7d:fc:ab:57:
72:4b:99:ec:74:d7:08:9b:d6:e6:9c:ef:4b:f8:bd:
76:92:3d:8b:c5:cb:c5:ca:46:2f:f7:80:ec:4e:ae:
48:c1:36:f8:52:82:1c:e7:76:27:4a:06:aa:28:57:
0f:08:e7:d6:cc:37:ca:2f:86:2a:ea:c5:d7:25:24:
b2:56:f6:32:ea:9f:c3:25:46:93:48:a4:c5:82:dd:
78:d5:53:0f:cd:cb:68:5f:6a:c8:d0:1c:25:d7:9c:
54:22:7e:29:f3:05:7b:53:48:08:c1:dd:52:7c:54:
e8:ca:5b:52:da:59:eb:2b:9e:fa:54:a5:1d:bf:b8:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:DC:31:57:CA:96:D8:FA:3A:28:70:EE:F7:64:09:07:6B:00:AE
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fb:d1:66:f9:f1:26:77:5e:ad:12:66:97:b9:8e:a6:6f:c9:
40:9e:22:23:5f:4e:66:a9:bf:0a:c7:8b:59:3a:fd:90:45:71:
9e:9b:ff:31:41:cb:83:ff:53:e9:de:98:03:57:2a:9e:a1:0a:
05:05:4c:4f:fb:8e:e2:66:8d:87:aa:d2:d9:81:a3:98:b7:2d:
57:4c:2c:1f:f7:8d:68:c2:4e:12:b7:03:07:6b:a1:6f:a8:0f:
df:70:4c:bf:79:16:38:a9:ed:64:9e:83:e1:a2:06:73:82:dd:
87:c9:e7:13:76:ee:10:4c:78:b1:79:f8:a9:eb:0e:e7:89:a3:
1d:b4:b9:64:28:22:5a:c9:b2:3c:4a:e5:5f:b0:08:71:44:a5:
89:35:19:8d:05:21:32:aa:21:81:ec:4a:d5:99:3a:51:71:ca:
40:21:57:b9:37:d3:67:65:0b:f1:0a:93:eb:70:5a:6f:c2:0e:
4d:7b:f5:ba:59:b9:13:29:2a:81:b4:5e:66:79:e3:0d:8c:77:
e4:73:9b:06:46:bd:a3:c4:26:b8:86:e5:24:09:fb:b2:b0:ff:
02:98:26:c5:86:e7:ed:07:df:fe:d8:fc:4d:a6:ad:8b:57:6c:
4b:56:fc:eb:df:d5:c2:4e:73:73:dd:55:97:8a:30:07:66:7e:
db:80:4f:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oWKxu0EGpIOxuirRQKm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzhhOTA3NzcyYTU5ZmRmNTlmNjJmOWFkOTBiZTUwMjE3
MTk0NmUwHhcNMjUwNjI4MTMwMTU5WhcNMjUwNjI5MTMwMTU5WjAzMTEwLwYDVQQD
EygzZjhkZGMzMTU3Y2E5NmQ4ZmEzYTI4NzBlZWY3NjQwOTA3NmIwMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonRMHsFqT22VZeeROMn4/TFmPZS0
6fIc+YuESlB4VPjxpqTZFAcMBQNhGzpHesxcFHhb8FOusUNTQbWGfNEl5P2ODZOR
ycoBy3cajg+c2RpUwdEugecXMTeFQVyY0HPSQYxc5UG6m9t6V9m2JEdHAVI9oiF4
+YKwQjdo0vL1JVJDEH38q1dyS5nsdNcIm9bmnO9L+L12kj2LxcvFykYv94DsTq5I
wTb4UoIc53YnSgaqKFcPCOfWzDfKL4Yq6sXXJSSyVvYy6p/DJUaTSKTFgt141VMP
zctoX2rI0Bwl15xUIn4p8wV7U0gIwd1SfFToyltS2lnrK576VKUdv7iK+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+N3DFXypbY+joocO73ZAkHawCuMB8GA1UdIwQY
MBaAFDk4qQd3Kln99Z9i+a2QvlAhcZRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjct
ZTVjMWM2MmNmZTM3LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjctZTVjMWM2MmNmZTM3
LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfvRZvnx
JnderRJml7mOpm/JQJ4iI19OZqm/CseLWTr9kEVxnpv/MUHLg/9T6d6YA1cqnqEK
BQVMT/uO4maNh6rS2YGjmLctV0wsH/eNaMJOErcDB2uhb6gP33BMv3kWOKntZJ6D
4aIGc4Ldh8nnE3buEEx4sXn4qesO54mjHbS5ZCgiWsmyPErlX7AIcUSliTUZjQUh
MqohgexK1Zk6UXHKQCFXuTfTZ2UL8QqT63Bab8IOTXv1ulm5EykqgbReZnnjDYx3
5HObBka9o8QmuIblJAn7srD/ApgmxYbn7Qff/tj8Taati1dsS1b869/Vwk5zc91V
l4owB2Z+24BP1w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:59 2025 by rpki-client