Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
File: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft (raw, json)
Hash identifier: bXW674VxuTRNzjegsNZoZ++tlM/vlX4gHgbLDmSzHFc=
Subject key identifier: 43:F5:82:26:96:0B:2D:93:6A:65:E8:FF:BA:AE:63:63:09:F5:25:17
Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Certificate serial: 0198D58355DD8C9F960BF9BB3B75561E6E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: MChEll1heVmbFidBBJvsHOrl4fE.roa (hash: ARoQGxRNkrRdwVI3hmAp61vYLz+zRk9Xivm5xOWKmgg=)
2: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl (hash: QX+hNsBALuvCm+ie2jJsVmlZVofGLqQbP2N1NQeNOLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:55:dd:8c:9f:96:0b:f9:bb:3b:75:56:1e:6e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=43f58226960b2d936a65e8ffbaae636309f52517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:a5:f0:93:91:99:ab:d7:fa:8e:d4:82:76:
59:db:93:92:6e:32:3a:85:66:e4:cf:c2:71:7d:4d:
e4:e1:d5:40:cb:a4:44:c3:45:30:e9:e2:c1:5b:9d:
66:8b:6c:af:cd:74:21:62:50:5c:ad:ab:f1:2a:14:
5c:46:46:78:81:d7:b6:4a:a2:e7:f0:f2:6f:50:21:
b7:eb:b5:cb:be:ff:3e:57:d1:45:77:2f:fc:ca:55:
e0:19:5a:55:b7:5a:74:ed:98:3d:6c:13:14:b2:13:
77:c7:f5:71:59:27:97:b8:ad:84:26:b5:9b:64:12:
ca:8b:f1:16:5d:ba:28:7d:8c:30:17:44:33:b7:a4:
6b:a2:b7:0d:c0:01:ae:29:af:b5:3e:5f:6e:a5:73:
12:fa:0f:bf:2e:03:e4:52:8f:79:51:fd:fb:b8:fe:
ba:b5:b4:30:5d:5c:70:6e:b1:e0:fa:83:b2:d3:fc:
dc:9b:32:cb:46:22:e6:85:9e:d7:f5:ee:14:5e:9b:
fd:80:36:87:91:9d:cf:28:e9:f3:04:4e:b6:2b:a1:
25:34:82:d4:99:ef:46:0e:54:00:54:c6:49:ad:02:
ff:80:52:62:7f:51:98:6b:e7:89:37:d0:f2:37:6d:
90:40:ad:40:52:f0:bd:dd:20:8e:ac:9c:26:f2:c9:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F5:82:26:96:0B:2D:93:6A:65:E8:FF:BA:AE:63:63:09:F5:25:17
X509v3 Authority Key Identifier:
keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bb:38:72:cf:0a:47:ef:10:68:77:65:42:e6:25:3b:5a:1e:
ec:87:93:d8:2b:ad:28:ae:84:22:c7:73:bf:0c:fb:ba:a9:a2:
e8:4e:23:12:94:c8:41:53:c1:e2:ce:7a:6d:a1:f4:bb:14:33:
15:d3:b4:b5:50:8c:e0:bf:4f:ec:80:b2:3a:38:2d:08:86:49:
5c:92:2e:4e:4d:56:fd:28:01:6e:26:7e:e2:22:ff:6a:b2:36:
32:85:ab:c2:16:10:08:3e:4b:2f:40:6c:3e:f9:2c:0f:69:db:
04:ec:47:2c:7c:dd:30:99:ce:a6:7d:7d:31:6c:1c:f7:36:de:
10:b1:b7:0f:b4:97:39:3e:5c:7a:69:7d:7c:ad:d4:c8:00:21:
98:54:68:04:4d:63:50:99:19:b3:91:ab:86:01:b8:8a:14:74:
70:70:c7:c6:3b:a4:9a:a3:0a:48:ee:c3:30:3a:a5:13:49:bf:
e8:53:19:aa:23:ad:f1:90:52:af:c7:52:95:bd:47:fb:35:06:
71:49:65:f3:a6:72:a1:ae:b7:cc:00:1f:63:ed:ed:94:17:ae:
56:6c:92:5f:12:d4:5d:8f:6f:8c:75:e6:07:80:67:3a:b1:51:
55:04:d8:cc:5f:14:c5:2d:8b:1b:8b:ee:76:94:c6:87:8b:8a:
c7:fa:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:47 2025 by rpki-client