Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: a3SBZRJn8PwqRtpGxJVenC6maFgb2meYOAuuucO2Nb8=
Subject key identifier: DC:37:FC:56:39:F9:0B:5C:8E:62:AD:95:F6:A9:96:32:06:A9:8B:18
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 0197B77CCB50E7D1A31C63DB9DF58EE05202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=)
2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=)
3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: 8zSTqOb0GMjlzNNOWz7OiMQJl0+aKlInhtQI/dwTaHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:cb:50:e7:d1:a3:1c:63:db:9d:f5:8e:e0:52:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=dc37fc5639f90b5c8e62ad95f6a9963206a98b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:94:68:b6:44:1f:f5:fd:ad:a8:d4:d2:c9:
85:5b:b7:2d:4c:72:eb:cd:66:bc:08:eb:63:68:8a:
ce:0a:cc:5d:7d:86:4c:40:41:75:fc:91:e9:fc:4a:
48:ac:63:27:9e:4e:f3:0a:5f:27:3f:dd:ff:8f:2d:
f0:49:39:7c:a8:70:7b:32:08:24:ee:d1:ee:20:54:
5f:3c:2a:ef:2c:b1:30:3f:de:76:ba:34:3d:22:e6:
cd:70:dd:45:e6:cd:8d:43:b4:dc:ce:df:fb:b3:ae:
99:5f:b5:ed:88:e6:87:b3:33:ca:47:f3:0a:20:69:
7d:1b:1b:2f:c8:58:8d:74:7e:29:05:f1:49:5d:a2:
f6:27:cf:c0:45:5c:28:d7:2d:46:ba:de:b3:87:94:
54:97:14:6f:95:23:bc:a3:44:ec:84:94:51:40:aa:
a9:3f:fc:18:42:03:0e:e8:b0:aa:81:a8:67:ef:92:
81:7e:5d:a2:a3:eb:9d:46:9d:14:29:d2:8f:33:3f:
f4:82:7f:2b:fb:07:b7:38:eb:2c:a8:5e:f5:f8:76:
18:2a:f6:74:1f:28:f8:01:d4:a3:a2:2e:04:1c:7c:
5c:90:17:17:02:40:5e:5f:65:a9:2a:1d:64:e1:3e:
d2:e6:5e:c0:57:4e:c5:a6:88:0c:af:80:05:7e:73:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:37:FC:56:39:F9:0B:5C:8E:62:AD:95:F6:A9:96:32:06:A9:8B:18
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:43:73:58:2e:2c:96:72:28:00:d0:72:a5:bc:6e:24:9c:6f:
08:88:00:b1:a9:55:c9:b8:41:f5:0d:f6:b1:d9:16:24:07:b1:
1d:f8:ed:a2:48:75:08:a0:43:a5:ca:79:60:7c:23:78:00:f1:
15:53:ca:98:7e:14:ea:34:99:0e:fc:3b:69:34:1b:ed:87:69:
1e:65:eb:c5:0e:2c:b4:2c:78:36:3f:a0:db:e9:65:7e:b3:be:
05:7a:97:b0:da:88:19:5a:3a:c1:3a:26:2b:14:0b:ec:63:a0:
fb:27:14:ea:90:bf:6b:9e:3c:52:14:33:34:d5:7e:72:db:21:
5d:81:12:25:0b:ba:4f:9b:08:ba:f3:be:e7:9d:3d:d7:b4:98:
a9:4f:9b:93:a6:d9:57:2d:9d:65:d9:4e:8a:1f:1e:8e:ac:23:
c3:3c:de:00:bd:64:94:82:0d:7f:46:9d:3d:0e:af:c4:5b:65:
da:c9:88:63:a3:be:ac:94:b0:40:af:6b:56:80:04:c0:0d:e4:
4f:b9:26:19:f2:ae:1a:cb:30:70:ec:21:85:37:a1:20:4d:47:
92:c4:08:6f:47:2f:3f:94:8a:db:06:68:e8:8f:5b:75:eb:4d:
9c:07:e5:ea:b4:24:10:0c:32:b4:49:61:58:d1:3e:20:74:80:
40:15:68:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:44 2025 by rpki-client