Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: uxaTxsPUKTEw/e2dP6G3uQG5C9Bbwh8addUHLEKMhzo=
Subject key identifier: A7:02:CE:A6:AC:2D:FB:0E:E6:36:BF:B0:F7:62:90:C1:39:44:09:16
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 0197B7B356333C049A6E944841537FB2B3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 0E5A
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: PGJHnE7v3nf5S7cBgcfb12JYi0vZSLxTwTCp3QiUsYM=)
2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:56:33:3c:04:9a:6e:94:48:41:53:7f:b2:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=a702cea6ac2dfb0ee636bfb0f76290c139440916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:44:42:13:65:1f:ef:ef:50:6f:9c:03:23:
a2:6c:58:5f:8e:ff:96:8e:33:01:4d:ba:af:7f:bf:
25:a1:ec:b8:5b:b9:df:30:de:cc:0c:93:1a:fb:33:
16:5b:ab:7b:e9:ae:76:a8:14:50:4c:76:b6:c9:61:
ff:15:f8:d6:9f:6b:07:61:a3:10:ff:61:72:f1:fe:
9c:12:44:10:2f:95:bd:eb:ea:67:de:f3:e3:36:f1:
e6:6d:2e:20:0b:2f:bf:f1:d4:56:f9:3a:91:ce:a4:
ad:cd:5a:bc:6f:e4:47:b2:fd:be:a8:df:17:cc:86:
86:e3:d5:e1:14:54:41:f8:22:18:48:e8:19:91:97:
b6:2d:fb:aa:77:20:a3:41:ac:a2:b1:65:7c:1e:98:
c1:36:bb:13:0c:ea:30:ff:0c:aa:66:59:50:f0:ff:
80:d3:fe:d9:02:40:a8:60:8e:03:89:75:ee:40:d8:
0f:2a:77:d6:fa:5c:10:4d:9a:1c:42:a2:b6:d4:aa:
cb:5a:de:30:80:93:a2:fb:de:b9:b0:30:4f:37:6d:
7d:5d:68:4a:53:12:ad:fe:2a:37:55:22:20:94:ca:
00:d7:03:ee:f5:e8:b6:23:54:65:e3:83:bc:07:4b:
71:2b:5c:73:8e:bf:39:7a:c5:ea:01:66:fd:57:d0:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:02:CE:A6:AC:2D:FB:0E:E6:36:BF:B0:F7:62:90:C1:39:44:09:16
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:32:08:2b:53:99:f9:1e:69:b0:ea:e4:4a:16:c6:eb:bc:03:
72:4a:9c:0e:7f:2c:07:6d:37:d2:1d:a1:50:fd:ef:0e:4e:01:
3c:d9:fb:33:ff:c1:6c:60:3e:6d:f6:a3:18:92:77:63:d0:72:
a5:3a:08:b4:86:92:2f:54:67:da:53:ea:c1:a5:d8:fc:da:4e:
96:fb:cc:85:f7:e6:5c:21:f9:39:6b:9b:54:e7:b5:dc:86:34:
92:21:1a:8b:cc:c7:8b:15:11:31:da:63:9a:c7:47:28:79:60:
fc:eb:b2:1e:2f:75:29:0e:94:de:68:16:39:0c:44:0c:e5:03:
96:a8:6c:13:e8:36:9e:fe:5e:3c:60:07:b2:e4:a6:60:8e:9e:
16:eb:23:4f:f2:9a:a3:6e:be:04:ea:ab:33:70:e4:95:9c:61:
1d:b2:ad:74:7d:64:46:90:8d:f8:7f:f1:69:10:f0:5d:9e:2d:
e9:eb:05:c7:da:20:12:0c:a9:98:df:47:61:d2:46:33:d6:02:
2b:4c:4b:0d:8f:9d:b1:4e:fe:6d:30:b3:14:b6:0a:d5:af:7d:
1c:c2:e4:96:87:c5:35:8d:28:41:44:0f:ac:6e:3a:88:5c:87:
8c:95:62:a0:f1:c1:78:f3:77:a8:56:c4:89:48:52:31:73:4a:
d1:0d:2b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:07 2025 by rpki-client