Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
File: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft (raw, json)
Hash identifier: SPLFzAKHIcyctxcfzqPJRzgeS1ba8Ra3eGfduIG+pRQ=
Subject key identifier: B6:F4:FE:52:3A:7E:4B:FF:63:0A:47:0A:EA:1F:7F:E3:65:0A:5D:A9
Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Certificate serial: 0197B7B32273D75A6542C04B0F6809C761CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: MChEll1heVmbFidBBJvsHOrl4fE.roa (hash: ARoQGxRNkrRdwVI3hmAp61vYLz+zRk9Xivm5xOWKmgg=)
2: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl (hash: jBaJ1NBZWIxx541ppVebc6bYzmtyAHmUCkwfeLgpHdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:22:73:d7:5a:65:42:c0:4b:0f:68:09:c7:61:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=b6f4fe523a7e4bff630a470aea1f7fe3650a5da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:c8:d6:8e:9d:dd:2f:7b:29:0c:81:d5:0f:
f4:9e:09:9b:ad:7f:c6:f5:fe:3e:de:c9:0d:8e:2b:
b7:f6:d9:63:11:c2:70:7d:07:59:d2:7b:6e:18:8e:
4a:cf:05:cc:87:bf:c6:12:06:c8:7b:1c:8d:32:4a:
2c:43:17:b0:ab:ee:8d:96:c4:a4:b0:72:7c:32:ec:
ca:03:d6:f9:5c:0e:2f:36:d1:a9:43:b7:3c:a2:df:
a0:b6:d2:fd:6a:49:62:25:fb:ae:ba:bc:14:0c:ab:
1c:50:8d:44:fc:a1:53:7e:4a:78:87:3d:f7:66:9a:
d0:06:0b:36:51:13:e4:0c:f2:6d:31:a1:2e:ac:bc:
7e:9a:5b:f6:15:ff:e7:aa:b5:12:a5:f5:ad:d4:84:
9b:86:ab:58:5e:03:1d:f6:b3:f6:3a:33:cc:af:9e:
10:4e:b9:14:2f:0b:b3:f3:fc:1a:b8:92:6c:93:e1:
e9:08:be:4c:d4:4e:e3:5c:c8:5f:38:fe:81:24:30:
00:2f:e4:05:42:fc:af:8e:92:6f:fa:32:28:2d:30:
be:a9:17:98:f9:85:e1:83:17:fa:2d:69:0a:9b:bf:
21:f2:39:22:2a:6e:cd:01:ee:ee:f2:2d:6a:21:75:
b9:0d:d4:50:d7:14:e5:3b:bc:f4:cd:87:63:3b:c6:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F4:FE:52:3A:7E:4B:FF:63:0A:47:0A:EA:1F:7F:E3:65:0A:5D:A9
X509v3 Authority Key Identifier:
keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f9:96:60:8a:19:0d:44:fb:a5:5a:b3:20:20:e3:b2:c4:62:
f6:f7:2f:15:56:dd:8d:c7:42:2c:e7:e6:c9:f2:72:83:c2:21:
42:46:8c:0a:a5:5a:cf:14:ee:c3:d1:7c:9e:0a:26:4e:21:a4:
b8:85:53:ac:37:9a:4c:c2:b8:72:35:c9:9a:b8:0b:1f:4c:e8:
27:74:ff:9a:27:0f:b4:0b:a9:86:f3:78:08:08:53:8d:ca:17:
fb:1a:82:0b:d3:64:5d:08:18:85:01:a8:73:7e:88:ae:92:c3:
be:ca:f2:e4:73:d2:3a:53:82:71:8b:b0:2a:ef:96:26:fe:43:
f8:3f:38:e1:7b:7d:7e:fe:99:03:99:e8:7a:ba:cf:c7:4b:30:
17:0d:64:2e:b6:3b:ac:9c:36:cb:2e:e3:47:d8:35:23:cd:fa:
0f:db:11:57:90:d0:79:60:17:b7:c3:c3:e0:ac:86:51:9c:52:
69:2d:f6:15:44:47:5f:f9:3e:06:6e:74:e0:42:de:5c:07:4b:
46:3b:3b:35:6c:1c:64:e3:a4:70:38:09:09:d6:cf:5b:2a:28:
85:2d:14:b2:77:3a:7e:2c:45:ae:94:47:08:08:6a:0d:68:72:
c3:d0:82:7a:56:41:bc:c3:4a:b5:b2:5f:87:98:b9:fd:f5:fe:
fe:3d:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:55 2025 by rpki-client