Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: A+iWiL0Lnpmb5wHzkJA+mWovyl0VH+B0JFaWv75Lei8=
Subject key identifier: AC:52:B5:97:98:BD:96:FF:E2:63:58:F4:85:60:C7:57:B3:1B:10:AF
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 0198D515A6E5A929E4C8879F8380AB97FBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 048B
Signing time: Sat 23 Aug 2025 04:00:22 +0000
Manifest this update: Sat 23 Aug 2025 04:00:22 +0000
Manifest next update: Sun 24 Aug 2025 04:00:22 +0000
Files and hashes: 1: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (hash: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: rsuEVsdJlTGJ3yWJ+KU2MB5pu3HFgD9zA3tNx2tVeuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a6:e5:a9:29:e4:c8:87:9f:83:80:ab:97:fb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Aug 23 04:00:22 2025 GMT
Not After : Aug 24 04:00:22 2025 GMT
Subject: CN=ac52b59798bd96ffe26358f48560c757b31b10af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:0d:fd:03:e1:4d:55:30:f9:3d:39:d8:e2:
21:a4:9d:c1:13:14:01:89:dd:3f:01:85:d0:aa:9e:
e2:a5:d7:6d:69:d6:43:d7:9f:b6:c1:bd:ec:58:e2:
f8:72:fb:da:23:2c:fc:c4:5f:4f:f6:cf:96:fa:4c:
64:d9:1d:38:ff:84:f6:03:50:64:4a:cf:83:63:63:
f0:4b:ab:99:e7:b0:4c:82:46:78:f2:ea:17:99:bb:
b9:df:58:64:74:d2:e2:76:c7:0e:c3:28:b3:7d:c1:
50:20:08:f7:2f:50:24:08:84:61:c7:53:05:10:9d:
7c:d7:31:a2:94:9d:e3:c7:bd:58:e8:3a:d9:2c:0a:
75:df:75:3c:ae:99:0b:5a:80:1b:e0:30:89:db:10:
bc:60:10:3d:08:e9:1f:7e:cc:bc:38:51:1a:69:c9:
ac:c1:7d:11:31:d1:ca:b3:03:25:85:40:12:54:08:
d8:fb:6b:26:37:58:ac:72:2d:4c:d7:65:11:99:26:
e4:8c:fc:1b:8f:0a:04:04:3c:90:09:2e:e2:a3:7a:
12:3d:33:43:00:a8:de:18:8f:33:fe:4f:08:31:b1:
ce:06:58:24:52:d7:75:5c:c7:c9:da:37:18:9c:f3:
73:7d:a3:77:5f:be:a2:c0:de:2b:e9:2b:6a:5b:45:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:52:B5:97:98:BD:96:FF:E2:63:58:F4:85:60:C7:57:B3:1B:10:AF
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d9:74:d7:1d:e8:27:7b:fc:93:81:cc:2d:19:a7:b8:57:9e:
fc:c0:d0:c1:ea:c5:67:db:c8:fe:24:78:68:39:ec:4b:a7:d9:
11:77:6c:ed:58:47:79:bf:19:e9:0f:03:63:97:ee:0f:d9:cb:
25:14:f1:11:22:76:c0:c3:35:cf:e1:18:8c:f7:d5:5d:2f:b1:
87:6b:66:aa:1f:8a:1f:0a:70:6f:a7:05:da:d0:b1:1e:d1:6d:
cf:ad:dd:c6:0a:51:76:32:e0:38:7c:54:01:93:6e:57:e1:1c:
ef:f0:d4:6c:2a:76:96:40:96:a1:bd:d7:f8:ea:e2:08:cc:36:
10:b6:d7:93:ab:14:3d:ab:b8:42:86:73:c1:d4:de:10:d9:fd:
b9:9b:5e:09:d6:fe:23:ba:e3:0f:0d:6f:f3:47:59:58:4f:87:
f0:4a:9d:f5:a8:34:73:c5:2a:07:af:cd:fd:2c:2d:09:a8:86:
fa:ab:00:ff:5c:1d:94:f1:c6:5c:be:56:63:e0:e4:61:99:83:
78:bd:45:5c:7f:ff:9a:83:15:a5:ac:18:1e:c8:aa:f7:47:c9:
97:de:ea:2f:0e:09:03:7c:a9:32:f5:e1:3f:13:a7:c2:40:69:
3a:fb:92:a3:82:c8:cb:d1:dc:18:61:1f:27:47:61:55:af:5c:
e0:f2:7a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:55 2025 by rpki-client