Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File: 1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier: uyvJqRjTlHXhG0FZpN744D0FHgPwIIwQMLlB0GpPzzc=
Subject key identifier: A3:FB:D3:AC:5B:A8:C7:B7:B6:9B:C3:57:B1:6C:8A:EF:27:D7:82:3A
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer: /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial: 0198D6985833D493175BC22002C022C92E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number: 0C49
Signing time: Sat 23 Aug 2025 11:02:44 +0000
Manifest this update: Sat 23 Aug 2025 11:02:44 +0000
Manifest next update: Sun 24 Aug 2025 11:02:44 +0000
Files and hashes: 1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: t7FY+ocyYe2FYrYWnB/Z0EIP9oFjBRGHQyId/BsXMuM=)
2: iN4kY7sCfzKOl-coUiFvOhD6wg4.roa (hash: ZI3B1VaDQ0JfOlPoqiW79rOHU3ymg8mbnEbUM636Uvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:58:33:d4:93:17:5b:c2:20:02:c0:22:c9:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Validity
Not Before: Aug 23 11:02:44 2025 GMT
Not After : Aug 24 11:02:44 2025 GMT
Subject: CN=a3fbd3ac5ba8c7b7b69bc357b16c8aef27d7823a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:f5:66:74:d6:41:00:01:9e:92:7c:d1:92:
34:bd:b1:4e:f7:46:3b:06:66:85:a6:d8:47:a4:68:
d9:8c:78:27:d4:cf:4e:06:1d:77:11:09:d4:3b:cb:
aa:ec:83:f6:9a:3a:12:e8:a0:ac:7b:2d:9d:32:04:
07:cb:33:3a:33:2b:55:45:c6:e7:a6:d2:1f:e0:d7:
4f:98:b8:cf:d6:0e:78:2a:97:bb:e7:0b:49:fd:0e:
ff:41:82:a2:5b:b3:c9:0a:cf:5b:12:af:33:42:08:
f4:e2:e3:f5:35:a0:81:4c:00:f7:74:2e:cf:3c:1e:
6c:ce:68:df:ee:17:b4:e2:29:42:82:31:36:06:78:
b4:3d:5d:8c:f9:38:d5:e2:98:84:6b:36:30:88:28:
c0:49:0c:7d:83:76:19:8a:4c:bb:d8:04:42:48:8d:
d4:43:ed:2f:2f:c5:49:6c:4e:35:62:ef:b4:8f:43:
b6:c5:3e:49:6e:50:0a:d5:48:c3:0e:6b:04:92:17:
37:cc:e5:e0:89:18:ce:77:44:65:b3:ca:a9:3b:17:
db:4b:45:5c:51:83:0a:4d:b0:68:36:24:a0:80:ad:
c3:ad:c8:e0:73:6d:db:77:6c:62:9c:85:bc:2b:16:
61:21:d9:bf:8b:2e:ab:d5:38:44:da:b3:ea:75:a3:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FB:D3:AC:5B:A8:C7:B7:B6:9B:C3:57:B1:6C:8A:EF:27:D7:82:3A
X509v3 Authority Key Identifier:
keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9a:c4:5b:d5:e4:b3:44:ce:3d:2b:d0:f0:cc:7e:8c:70:79:
b8:47:1f:f1:01:9e:48:d5:97:dd:7d:80:d9:46:6f:5c:6f:33:
5e:62:bd:20:8a:af:e6:a4:96:6f:ec:04:e1:27:02:00:f8:3e:
67:fc:92:1c:fa:56:fe:ac:aa:79:d5:c1:eb:d2:2f:39:1a:40:
a3:1b:ae:ee:20:ef:a0:a5:39:dd:8e:8c:e7:96:d8:18:a2:f8:
78:04:a0:c7:10:a2:a7:1f:40:c7:92:bb:f3:e3:e6:45:b9:d8:
12:12:28:5f:32:43:cc:8c:1d:aa:15:3f:6b:55:09:5f:71:44:
dd:31:09:1e:19:49:d7:92:d7:f0:0d:7d:3c:ad:23:49:89:a4:
b4:1b:2b:be:44:9a:6a:28:56:24:12:52:87:dc:36:92:fc:50:
49:41:a6:81:ec:06:1e:bb:2e:19:72:41:1d:8e:78:30:04:5c:
ff:47:11:83:cb:4a:d1:b7:55:74:5f:38:4a:26:fa:5e:43:43:
18:1a:64:43:0f:17:cd:08:1d:cc:a4:8b:1d:3f:58:97:16:b0:
e2:89:62:c6:79:dc:a5:c2:62:bb:e2:29:85:0a:42:81:34:0f:
14:0a:03:c8:8d:23:e8:0a:67:49:1c:09:1f:c4:c7:79:ff:da:
bb:bd:07:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:03 2025 by rpki-client