Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: Dz/zngtb5jgyeCg92lsqvCPtTl01tKoMktaL9EjNQrg=
Subject key identifier: 75:94:80:37:CD:99:91:FE:99:04:78:A2:53:C3:D5:06:D8:B9:FB:14
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 0197B6D7259B6EA3AC16DFC4E77E2791ADCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 099C
Signing time: Sat 28 Jun 2025 14:00:42 +0000
Manifest this update: Sat 28 Jun 2025 14:00:42 +0000
Manifest next update: Sun 29 Jun 2025 14:00:42 +0000
Files and hashes: 1: Oc5Exwy6ZGrRe3cJEpFcoAoZ8LY.roa (hash: GCIh2gF/E3yjQMebTbwaKQU3aGp4E0TQ+qUjMjQObt4=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: lIR+hopDuS6SlSWij93D0U4SxdDwxgoJdprK5EgQcCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:25:9b:6e:a3:ac:16:df:c4:e7:7e:27:91:ad:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Jun 28 14:00:42 2025 GMT
Not After : Jun 29 14:00:42 2025 GMT
Subject: CN=75948037cd9991fe990478a253c3d506d8b9fb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:ab:96:51:dc:bd:89:12:7f:a3:7d:f3:d3:
14:40:d8:93:97:62:1e:c8:b7:dc:b0:20:2e:fd:98:
5a:61:76:64:a4:5d:49:8a:fa:80:16:e0:f9:33:11:
20:2c:0b:82:1e:dd:69:8a:42:c8:2e:34:e5:04:e8:
a0:98:29:7a:39:45:e0:4d:d4:32:f9:48:42:64:77:
27:65:2a:cf:99:17:36:c6:7b:09:b9:c4:dc:d7:b5:
6d:c6:42:a7:cb:1a:df:ac:d5:16:b6:d5:f0:ad:6a:
16:57:5c:af:06:09:d2:07:85:dc:0c:86:29:96:63:
db:9a:bc:e8:3e:63:e1:20:d1:a5:e1:23:a8:27:45:
82:8b:9a:06:84:da:0d:e7:a5:45:1f:fb:92:74:b9:
b2:da:b9:38:d4:c8:3e:e2:84:dd:fd:d3:3b:29:b6:
3b:c7:c9:ab:fa:f2:86:dd:b8:ed:59:51:80:8d:0f:
87:2c:ce:11:10:60:8e:9a:40:9a:0f:b3:da:98:77:
2d:a6:88:b6:d0:42:54:ec:59:6b:ea:d3:ff:a1:1c:
45:1d:f0:95:4b:23:19:22:6c:2e:fe:bb:66:0e:1d:
91:dd:03:e4:e9:59:69:bb:43:0a:7b:62:1a:b7:72:
e0:44:c0:74:1f:21:6e:1f:4a:07:fe:08:d5:bb:23:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:94:80:37:CD:99:91:FE:99:04:78:A2:53:C3:D5:06:D8:B9:FB:14
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:dc:12:09:e2:24:ed:11:ca:c0:38:76:66:10:8c:a6:78:9a:
33:48:9a:e1:4d:9b:05:5b:44:6b:4e:92:08:bf:c2:51:5d:ec:
f2:ab:bf:2b:57:ba:e0:da:ba:4d:1b:9e:8b:e7:2e:0c:9a:f5:
fa:2b:b7:29:8d:d5:cf:83:d5:57:a1:11:6a:c4:51:17:0d:f0:
3d:fb:35:e8:41:9e:2d:0f:be:1b:b5:6e:7a:56:3d:64:f3:93:
34:ac:13:43:2e:61:e8:d4:f3:26:a4:6b:28:ac:cc:10:64:ab:
45:49:49:d2:e7:92:7c:c7:e2:91:8f:65:34:a3:fe:ee:ed:7b:
40:1c:33:04:c9:54:5c:a5:73:23:5e:3b:29:b4:33:f5:5b:08:
6d:cb:3c:19:98:66:20:ee:3e:ea:a2:e3:8c:c9:4a:e9:cd:41:
7e:20:5f:12:b0:e8:c1:38:2a:d8:2b:cc:0a:da:80:e5:5d:33:
da:ea:ec:45:9a:8f:d8:eb:7f:85:4c:62:d2:63:00:79:2c:26:
a9:b2:a7:0b:d6:d2:4f:c8:f7:a5:1a:18:84:cc:d0:1a:0a:ed:
ae:b2:c0:56:f5:f7:4a:ac:2a:f2:0b:ff:8a:fa:61:5d:c2:8f:
44:c8:91:43:6c:03:fd:9f:4b:7e:ff:fd:68:d8:86:74:06:0a:
0e:64:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:02 2025 by rpki-client