Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: e+UwAWKZlZkGIPqZfRU4it/ArqznHluvbZj0MoaYTW4=
Subject key identifier: 09:E3:9B:1D:02:9D:04:7A:F7:B9:23:A4:6D:FB:92:F6:2B:57:3A:BE
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 0198D583AAB0CA73D0A4C16CF12C6929C635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 0EEE
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: sCmBYHRfaIjT1xwxCNMuupbNlE0vOP+/p2vJbB5nfao=)
2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:aa:b0:ca:73:d0:a4:c1:6c:f1:2c:69:29:c6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=09e39b1d029d047af7b923a46dfb92f62b573abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:17:2c:7a:b2:69:9a:49:1c:c9:20:ea:33:
45:cf:5e:81:00:23:99:b4:dc:3f:00:70:b6:d7:50:
13:06:88:2c:26:d0:1c:97:e1:68:b7:e3:d2:6f:92:
e6:59:2f:87:bf:b3:92:77:c4:1e:6d:82:b0:fc:08:
51:b8:03:9e:ce:b8:d0:ce:4f:67:e4:09:dc:53:65:
a3:c4:b1:79:50:c0:86:df:67:96:02:96:89:a8:61:
04:b7:88:77:fb:8e:43:32:9d:0d:18:75:d2:f5:99:
df:4a:4c:6f:a0:02:e0:c8:2f:ce:88:1c:69:0d:4e:
69:d4:9e:1f:e1:d6:0a:dd:a8:7e:d0:6d:80:62:48:
54:4d:68:67:ed:87:a8:bc:ad:21:d0:9a:b7:97:7c:
6b:46:9f:f5:a1:df:73:f4:40:1b:9d:2c:4f:dd:4d:
d2:32:12:c6:07:b0:80:51:0b:33:57:8b:0b:b7:2a:
17:60:8c:f3:a9:7d:f9:54:1f:5d:61:5c:bd:9c:74:
4b:cf:b0:72:c5:17:cf:07:80:96:2f:23:5c:2a:f8:
35:4c:c5:fb:d2:53:29:81:04:11:81:f3:02:6a:8f:
51:6f:cc:36:87:87:90:f3:68:86:92:df:fd:38:d7:
a8:f0:a9:c0:e7:ad:42:39:7e:21:7f:ad:d2:e7:05:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:9B:1D:02:9D:04:7A:F7:B9:23:A4:6D:FB:92:F6:2B:57:3A:BE
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:5b:70:42:94:58:13:df:cd:18:eb:cf:e8:a5:b5:58:bc:50:
6b:7b:03:63:01:64:c5:ef:e3:70:cd:52:59:69:d8:64:4f:e9:
c2:12:a6:fb:5b:3c:f6:78:3e:fd:e8:71:74:01:78:ed:90:e0:
a1:4c:79:57:a6:f7:45:06:f3:c9:4c:ec:7f:44:9a:f8:9b:a8:
8d:1f:5f:66:41:cf:60:70:ed:89:00:51:4b:79:9c:eb:47:83:
1c:34:45:a4:4d:44:49:11:a5:f5:ec:28:87:f9:84:d9:b5:a0:
4b:05:54:f3:88:f1:1e:f3:eb:ba:94:b8:24:f8:bd:c1:ae:07:
61:a3:3c:4e:d4:35:85:59:41:21:88:fd:1c:ed:73:0d:85:ab:
0b:53:0a:15:88:7d:ab:a5:7b:61:11:d4:6a:83:92:aa:5c:71:
71:52:72:cf:ad:c3:b4:36:67:34:eb:b0:aa:42:84:14:75:62:
f9:7f:54:54:c2:af:f1:37:0d:f6:6f:79:1d:e6:af:f1:86:9d:
be:6d:a1:ce:a2:61:c7:24:32:e0:1e:5a:62:d1:dd:0a:78:45:
e8:5e:48:cc:c9:a5:87:95:05:14:47:15:19:ae:0a:7b:a6:6f:
7f:70:9a:96:29:1a:e3:6d:77:5b:55:7b:e5:0b:de:22:36:1c:
66:b1:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:37 2025 by rpki-client