Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: Scm12JVc6+qDH1gRjBka/vhGjW8DeIzakvh2Jtws8mU=
Subject key identifier: 31:D4:CE:C6:B6:D0:E8:1A:07:78:5A:DA:7E:4F:C8:20:30:87:FB:4B
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 0197B7457CD6F54512C4859CC5C50D58B014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 03F7
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (hash: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: Vuy9TX8IrN7ZdMacBlKaUSUAt9JZoUPL92tyaEw5qIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7c:d6:f5:45:12:c4:85:9c:c5:c5:0d:58:b0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=31d4cec6b6d0e81a07785ada7e4fc8203087fb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:18:4d:49:e1:aa:02:88:17:6a:22:83:5a:
cd:cb:46:1e:6b:f0:0e:3d:44:fb:46:a6:5f:a5:30:
0c:27:1c:07:43:62:9e:7e:2f:67:9f:04:3e:15:91:
4a:6c:c5:a4:4a:69:6a:00:36:cd:d1:47:40:a2:fc:
a7:8a:6c:8b:64:cf:8e:69:6c:2d:9f:b9:67:13:c7:
89:ce:46:01:f9:64:8a:cb:96:76:1e:03:da:eb:d6:
77:22:25:b5:2a:f4:b2:0e:71:87:e7:2d:b4:34:18:
1e:17:7c:0b:96:c6:81:0f:46:3b:67:8e:2f:01:3f:
47:13:58:fe:e0:d1:4a:8a:f1:9d:ec:a5:81:2b:46:
d5:33:84:56:4e:d4:5a:95:74:30:f7:ba:65:30:b9:
f4:3b:b4:e3:2c:86:bb:1b:50:16:f5:6e:d8:59:e6:
64:72:2b:f0:cb:83:d1:98:26:22:61:95:63:ec:73:
fc:71:3a:d9:1e:b9:e4:ac:5e:14:ce:2d:1e:48:a4:
f8:88:7e:52:f8:18:f8:ed:a8:47:04:fa:75:b3:b7:
96:ff:e2:f2:20:a2:a6:e6:d3:79:01:45:ad:a8:77:
12:f8:eb:4a:15:84:0d:91:12:8b:41:e9:c0:d5:cd:
f0:90:f9:93:9d:be:ac:b2:6a:ff:6f:c5:a8:b2:94:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:CE:C6:B6:D0:E8:1A:07:78:5A:DA:7E:4F:C8:20:30:87:FB:4B
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e8:56:3e:76:76:f4:65:7d:38:3f:42:ca:21:39:a3:ed:d7:
b5:70:04:14:6b:e4:c9:50:5e:76:ad:6b:3a:9d:9c:45:c6:d8:
2d:82:54:44:32:a2:e2:0d:24:5a:07:35:70:9e:ab:81:e9:21:
59:04:78:61:57:e9:a1:ef:42:74:8b:33:e2:62:d3:58:c9:cd:
29:fd:6c:b4:1e:a1:82:ad:df:f6:3d:c1:64:2e:ca:8c:4a:7a:
8d:ee:f3:93:48:9e:12:3d:a2:a7:f3:0f:78:b9:d8:b3:0a:d0:
92:25:0c:e4:41:b3:03:c2:96:e7:f8:74:d6:00:f9:c7:55:40:
1a:78:e3:a0:d0:2f:ff:50:89:66:64:07:60:c5:45:30:34:9f:
2f:0b:38:96:9f:ad:c1:cb:a7:fd:2a:ec:72:9f:85:3c:6d:ca:
27:6f:5b:bb:fd:f9:17:dd:7d:00:f8:e5:2c:73:8d:13:4f:4b:
15:81:7a:82:80:83:03:6a:f5:a3:d0:63:7d:fc:58:1e:f9:f1:
75:8f:3d:72:56:38:d4:4e:dc:2c:81:60:af:53:49:37:d0:04:
ba:70:b6:1c:e8:96:f5:3f:59:6b:36:83:ff:48:71:06:00:4b:
ad:b2:19:ca:03:07:19:7b:be:60:df:22:4e:36:5a:50:17:4f:
d2:9b:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:19 2025 by rpki-client