Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier: HUkW1mF9BD4cJVswmXtVMDgG5XfQaIE+nqmFovdbAhs=
Subject key identifier: CD:6E:67:3B:1A:19:92:D2:21:D9:24:A9:C9:2D:C5:16:A6:BF:57:A2
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial: 0197C6818E7A557FAD350E11796D63487207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 15:01:08 +0000
Manifest this update: Tue 01 Jul 2025 15:01:08 +0000
Manifest next update: Wed 02 Jul 2025 15:01:08 +0000
Files and hashes: 1: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: C35/vqHN7xz5Kb2/4KbGtHivmuUJWRfyS7GMsKuM3EI=)
2: rtw5EuFYH3ySq0jw3-ZmGwFMoqo.roa (hash: Ii5lxajvlSV2gkqSCAYWVLgdyHye7gIbfTFfAGtSUlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:8e:7a:55:7f:ad:35:0e:11:79:6d:63:48:72:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Validity
Not Before: Jul 1 15:01:08 2025 GMT
Not After : Jul 2 15:01:08 2025 GMT
Subject: CN=cd6e673b1a1992d221d924a9c92dc516a6bf57a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:df:98:e5:14:0f:bf:97:ec:76:6c:66:50:
9b:91:59:09:a9:f1:df:7f:f6:11:aa:ac:99:7d:b8:
76:90:c7:ba:90:bd:d7:65:07:b8:89:96:4a:3d:f0:
63:53:0d:79:1d:bf:7f:ee:32:1e:a8:41:41:bf:bb:
f5:2e:d4:01:87:70:59:7c:4c:78:40:cc:a9:09:e0:
23:a0:4c:60:9b:f2:af:57:e0:0d:54:fc:7b:e3:c8:
53:57:01:fd:9a:71:7c:60:24:90:b3:a1:86:8c:08:
15:53:aa:1c:ab:f1:86:d3:a2:6f:04:cc:8b:ab:e0:
37:fc:a7:09:d8:75:bc:d1:01:98:16:2d:ba:6e:04:
ed:77:4b:26:f6:6a:61:4d:89:9a:bb:6f:c1:ee:9f:
cb:4e:84:5f:71:90:0b:6e:84:71:b9:1e:0e:74:9e:
7f:d6:6f:6b:2f:f0:9a:f0:c2:44:3b:cb:87:93:5c:
42:61:d1:75:9c:33:c5:89:a7:be:83:6b:39:6e:be:
14:89:18:4d:5e:be:bb:f6:7a:18:2c:2c:96:43:71:
0b:12:73:1d:3d:3d:71:70:8b:ce:27:19:b2:5e:05:
6f:22:07:02:eb:1f:01:d2:5d:fe:7d:c5:7f:43:82:
b1:ab:74:0e:94:53:4d:6a:52:3d:ea:ad:6c:64:5f:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:67:3B:1A:19:92:D2:21:D9:24:A9:C9:2D:C5:16:A6:BF:57:A2
X509v3 Authority Key Identifier:
keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:58:28:06:b8:cb:47:c4:a2:35:ba:a1:7b:89:68:c1:5d:1d:
15:63:17:08:e0:1d:05:58:76:dc:27:2a:a6:8d:2d:92:8a:34:
fd:b9:e3:d6:f8:ee:8c:32:7b:64:e0:8d:8d:80:d0:c3:6c:55:
ad:bb:36:f8:1d:41:3d:70:37:41:30:af:4b:d7:5e:87:34:d3:
8d:8f:ae:69:e6:f5:05:c1:f6:f5:8a:8c:19:72:40:d6:f6:5c:
bd:3f:42:27:8d:79:3f:df:38:a7:d5:f2:82:6e:28:7d:f9:a3:
04:45:ef:e4:50:0b:7e:81:8c:c5:b9:ad:50:45:1a:c7:1c:c6:
09:ca:54:97:8c:d0:de:10:03:2b:b6:c1:c9:e6:93:bd:45:74:
59:8d:05:a4:1f:a5:61:f8:e7:cf:8c:52:d1:4c:b6:a8:1c:9f:
d8:06:e9:cd:3f:b1:c6:0a:14:f2:38:91:10:94:e8:a5:e1:34:
2a:15:26:a6:0d:ae:b0:0e:31:33:86:00:cc:37:6c:bd:f1:0c:
cf:16:1d:d9:36:53:9e:ef:f4:8a:5c:07:3d:f5:51:07:45:60:
85:6b:56:06:4c:6a:cb:b1:1f:75:a0:7d:3d:ea:15:eb:80:9d:
01:3b:29:7d:9b:d5:21:d6:06:ae:a4:7b:ca:cb:28:33:eb:3c:
ed:cf:f0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:44:27 2025 by rpki-client