Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
File: _OTzlnKb9HjmNlSYIfb2lw2JP1I.mft (raw, json)
Hash identifier: X8pMidcx0Bwn9sSmKoHgm5pM9/Skp0kqEDTdtf93DRI=
Subject key identifier: DD:3B:36:CD:F9:29:D1:B7:78:AE:4B:57:99:20:9F:34:3A:2F:2D:08
Authority key identifier: FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
Certificate issuer: /CN=fce4f396729bf478e636549821f6f6970d893f52
Certificate serial: 0197B632A2CD8CDC9F206A61525EAED3F783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:01 +0000
Manifest this update: Sat 28 Jun 2025 11:01:01 +0000
Manifest next update: Sun 29 Jun 2025 11:01:01 +0000
Files and hashes: 1: _OTzlnKb9HjmNlSYIfb2lw2JP1I.crl (hash: LGqAAQNSGVfWeqYe4RaBiJvHsRmugdA1FsSPUhKdL4g=)
2: adNqeNQUFWI4IAHxy1r153UdECA.roa (hash: xLvUeb8ak+yii4A1TZl7dHrog2mgx9j4/AxydjM8K8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a2:cd:8c:dc:9f:20:6a:61:52:5e:ae:d3:f7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce4f396729bf478e636549821f6f6970d893f52
Validity
Not Before: Jun 28 11:01:01 2025 GMT
Not After : Jun 29 11:01:01 2025 GMT
Subject: CN=dd3b36cdf929d1b778ae4b5799209f343a2f2d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:ea:38:5a:6c:f1:2b:e4:ac:0d:1e:7b:9b:
13:26:2a:13:50:d1:8a:94:b2:32:c6:67:f8:b6:ad:
ad:31:2a:74:23:e7:4b:f1:f8:56:51:62:6f:95:58:
af:95:14:4c:17:68:4c:e4:bf:ab:b8:c8:c1:38:f6:
d0:73:d7:40:ef:45:27:2a:f2:b4:03:4c:f6:34:8c:
4e:c4:a5:80:fe:ea:0c:98:bd:94:2e:5e:d4:c9:dc:
71:40:a1:ca:82:68:b6:0e:63:f6:f5:ab:38:a6:40:
c7:79:02:6d:d2:c0:4b:36:78:09:e4:50:36:af:4c:
0d:35:23:f1:5a:6c:52:c8:76:fa:8a:7f:62:4e:ad:
bc:d6:d8:55:ed:81:8f:9e:f4:c4:b0:87:fc:a8:1d:
b4:26:f3:cb:ba:3b:0a:f1:39:ff:4b:07:9d:f0:47:
bd:c8:f9:d4:25:35:39:1c:c3:b8:f5:4e:83:f0:8c:
10:08:9d:d5:d2:2e:ca:de:97:3e:ba:e1:22:47:97:
39:4d:bd:e9:cc:18:78:6a:ad:cf:e8:cd:0c:71:f2:
21:1c:4d:c2:c6:f3:50:49:7a:a6:60:78:25:b2:3c:
0b:85:8f:5b:27:2c:64:5e:99:a7:09:3d:8c:11:7f:
8e:f9:66:c4:2a:a8:e6:6b:7a:a4:af:17:19:c1:ea:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:36:CD:F9:29:D1:B7:78:AE:4B:57:99:20:9F:34:3A:2F:2D:08
X509v3 Authority Key Identifier:
keyid:FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6b:12:dd:6b:f9:a1:9a:39:7f:98:5d:3f:cb:fd:91:c2:61:
0f:e8:b7:ab:d7:ef:b9:54:ee:21:ea:af:2a:66:25:67:95:f4:
5b:43:1d:e6:23:56:d8:bb:01:67:c9:b9:46:64:7b:6a:3e:4a:
c7:3b:ab:7f:0a:4f:13:5f:31:59:73:e8:b9:06:f1:de:dc:84:
c7:34:12:34:6f:ea:ba:09:9e:77:de:13:85:62:f3:52:0d:da:
ee:05:fa:81:4b:5a:58:8b:95:c3:82:4e:f1:42:81:ae:44:a0:
41:cf:40:5d:1e:86:dd:bd:9f:2f:95:61:7c:c4:69:7f:77:59:
b7:a2:29:2c:1e:87:9c:65:fc:b8:98:7d:5a:34:30:2d:bd:f9:
0e:06:1a:fb:2b:fe:4e:02:fb:00:ed:18:51:07:13:d6:3f:02:
09:35:86:03:fa:94:21:7a:30:ed:1a:9d:be:11:03:ff:00:b4:
c6:86:88:91:0d:65:0c:e2:84:58:7a:8a:43:a7:c4:71:0c:66:
da:33:7a:ef:19:3d:1a:36:49:78:d0:fd:30:b3:ad:67:6f:62:
05:2a:e7:ae:43:70:b9:8a:c2:fe:6e:7b:a2:6b:6c:77:8f:2b:
df:73:cd:78:58:ae:da:8b:41:5f:5f:be:df:51:0b:8c:62:72:
d9:39:31:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:26 2025 by rpki-client