Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: SLbZBLEH36vILlHYLR7crebUXDXkLTO0vX0CrGVOq84=
Subject key identifier: 46:9F:35:86:1A:1B:D3:B1:E7:DD:9C:B5:3D:95:8D:7A:6B:D1:F7:3C
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 0198D40487CE1109B1A238EDE72EC7887A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1646
Signing time: Fri 22 Aug 2025 23:02:03 +0000
Manifest this update: Fri 22 Aug 2025 23:02:03 +0000
Manifest next update: Sat 23 Aug 2025 23:02:03 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: OwbPKOE/hcQe7kPGjUunzIRI5Pl7i0OtAbMGVNL1cVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:87:ce:11:09:b1:a2:38:ed:e7:2e:c7:88:7a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Aug 22 23:02:03 2025 GMT
Not After : Aug 23 23:02:03 2025 GMT
Subject: CN=469f35861a1bd3b1e7dd9cb53d958d7a6bd1f73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:44:ac:3e:55:29:51:bc:8f:5d:1d:33:f5:
58:92:65:b1:ec:cd:a7:c7:06:67:14:db:a6:5f:74:
29:d0:46:e1:00:61:6c:30:23:35:2a:9a:7f:65:7e:
40:a5:b6:a4:3b:4e:49:7b:55:97:55:ee:d8:bb:7b:
1b:11:4e:3d:4f:78:ab:13:3a:6d:e3:99:e3:28:a9:
45:ef:c1:23:8a:2e:99:64:39:65:11:f1:20:1a:57:
3d:72:ad:2f:71:e8:73:e2:98:4d:4e:10:61:e1:33:
18:2b:c1:71:ec:b0:5c:7d:bf:84:ce:f0:29:0a:e6:
b8:d9:a0:b9:0c:02:ff:57:ca:02:68:be:9b:87:5a:
c2:6c:62:d2:0c:10:44:9c:5e:89:a9:51:41:99:f7:
54:20:55:f7:5b:45:14:0d:36:24:da:41:9c:7a:6d:
ae:83:47:ac:d6:85:cc:ad:53:aa:2c:d6:cf:e0:61:
a2:ab:b4:b6:20:94:f2:ff:47:f5:ba:b0:57:2f:32:
d1:9c:ab:7b:9e:67:f7:81:c1:bb:65:95:f7:70:7d:
10:7e:39:44:4f:ea:9b:b6:54:01:70:c7:6b:49:0a:
ac:52:b0:b4:d3:67:b6:95:b6:a1:52:6d:92:ac:1a:
07:de:b9:b5:d9:2b:49:c6:2d:bc:52:95:2a:9b:33:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9F:35:86:1A:1B:D3:B1:E7:DD:9C:B5:3D:95:8D:7A:6B:D1:F7:3C
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b9:be:bc:1a:a1:da:cf:d4:cd:c5:22:b4:ef:b7:ef:d2:0b:
dc:5c:b8:92:39:53:13:3e:78:5e:d3:e3:38:dd:b4:a7:d4:de:
0b:e5:f8:06:94:b7:1e:f0:8c:2c:d7:20:7d:ff:38:07:fe:22:
40:bc:52:31:a3:6e:8b:86:69:88:fc:60:42:3a:18:5c:19:8c:
25:13:9e:fb:13:7d:48:bb:2c:66:d6:06:d2:c2:89:0a:1a:12:
ca:7f:e8:b0:f1:56:cd:e6:9d:fa:4f:d2:02:8e:f6:5a:c5:82:
a8:91:04:2f:6e:42:fb:74:77:a6:06:8f:59:8a:c0:2a:b7:1d:
2f:44:d9:09:c2:aa:ad:f9:ea:6c:7d:50:be:ec:1e:8a:dc:76:
8e:07:b1:66:c0:7f:4a:32:9b:89:cd:3d:96:e3:d4:80:21:ab:
ed:7f:22:32:39:6f:eb:51:88:32:c4:bd:0b:a6:f0:79:a1:01:
7f:56:e5:c3:2c:6c:29:1b:cd:a0:a3:a4:fa:3d:c1:46:88:a8:
cd:55:d6:2e:12:b2:04:4d:ee:ef:b7:f2:e3:b6:13:dd:02:c0:
8f:27:b0:73:88:a5:4e:ea:10:97:53:8f:16:8d:cc:17:58:f0:
ec:85:b2:c8:ef:1c:e6:48:fd:a3:a0:95:07:14:1d:58:f7:9e:
78:a0:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:41 2025 by rpki-client