Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json)
Hash identifier: l7TvY8bqWloA8odOwg78OU2f2Ar9eATCqk25Skn4trs=
Subject key identifier: DB:55:75:56:35:F4:A8:D5:8B:EF:EC:A2:E1:7A:7B:4B:1A:A7:CF:B1
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 0197B6A128DBB941F5A2169D37AABC1C4869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:44 +0000
Manifest this update: Sat 28 Jun 2025 13:01:44 +0000
Manifest next update: Sun 29 Jun 2025 13:01:44 +0000
Files and hashes: 1: M4l3Cf3_669djsGWrF7n0AJt83M.roa (hash: MY4UMlUb6Y1AsO5cCAn8IrigWcCAqjlArLI2bOv+PX8=)
2: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: YnVUXPk8ab4iTc7yen8FR7D6W60o2hq1+R9AG1jXZqw=)
3: TXoJbYdgwtSRoMICf6BpMrQmJMs.roa (hash: Ede1kltXJewHDWyl80pDm1qv2UWiny8U21Nq2Z6l0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:28:db:b9:41:f5:a2:16:9d:37:aa:bc:1c:48:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Jun 28 13:01:44 2025 GMT
Not After : Jun 29 13:01:44 2025 GMT
Subject: CN=db55755635f4a8d58befeca2e17a7b4b1aa7cfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:84:18:52:83:69:db:b0:b3:15:6a:d2:16:54:
37:5e:de:cb:77:19:47:23:1b:85:1c:65:b9:7b:d4:
1d:5a:73:ff:a7:8a:0d:10:23:05:09:ca:6e:d6:d0:
df:3b:86:e7:82:bc:d2:cd:1d:29:44:21:5e:51:47:
ce:bb:f9:c1:a4:e1:d0:73:1a:24:e9:17:30:68:0d:
60:0e:a4:a7:32:23:9d:ea:3a:33:46:c5:5e:d8:88:
16:19:f5:2b:9d:a1:60:b5:a5:89:c7:db:26:e1:87:
ea:e8:40:b2:4d:ee:0e:59:61:b0:5a:c9:84:dc:db:
b8:e6:d7:2f:4e:ac:74:62:68:69:bc:e7:59:77:3d:
42:41:1a:09:0c:a1:1d:5a:33:18:ad:13:74:48:2b:
e7:cb:8f:3c:8e:e3:92:f8:fc:98:17:99:2d:c9:2d:
0b:11:c8:57:5a:f2:dd:81:61:ac:3c:a5:f2:cb:31:
56:a9:e9:df:3e:44:dd:fc:05:fe:fb:10:d1:d6:89:
df:39:0f:80:26:23:3a:88:6d:a7:a1:b2:6c:9c:91:
f3:09:27:99:d1:cd:cd:f7:bc:d7:4a:df:99:19:aa:
21:43:94:58:7b:e1:77:ba:29:b9:db:4a:91:ce:03:
c5:97:3b:22:2e:cd:3e:1c:80:17:5d:7a:25:45:c4:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:55:75:56:35:F4:A8:D5:8B:EF:EC:A2:E1:7A:7B:4B:1A:A7:CF:B1
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fb:80:c2:fd:47:23:c7:91:b6:61:e1:4d:43:26:e0:84:36:
4e:9f:6c:07:e3:ce:47:f6:4b:f4:37:bb:55:29:a6:11:3a:99:
80:12:db:1d:49:aa:83:50:cc:f2:af:43:b1:e6:bd:02:3c:83:
2d:66:95:cc:0f:75:f3:f8:88:e2:c6:d2:a4:b6:ae:fe:1e:ec:
1e:1e:20:28:3f:89:19:71:37:88:75:94:21:9e:86:0c:53:30:
de:13:65:da:40:5a:34:46:a6:05:87:67:ab:6d:91:51:27:bc:
73:a4:98:08:9d:11:c8:22:e1:63:13:c6:0d:36:c5:a8:4f:86:
69:e6:9b:1c:67:87:83:23:2d:80:9d:89:4d:97:1f:31:60:d8:
63:71:cd:1e:04:d7:3a:23:b0:dc:17:7b:0c:40:d0:08:2c:67:
4c:b4:fd:2f:42:65:93:fb:09:f0:b3:6f:65:6a:38:9a:39:55:
b3:8e:87:30:03:c7:de:f9:06:13:89:4e:5b:48:9e:98:1a:5c:
33:68:74:0d:b1:50:a4:cd:a6:c7:9c:74:10:ea:d8:03:9b:2d:
73:66:6a:b2:33:a8:92:84:3b:63:e6:47:a5:71:05:1b:a9:5b:
1a:3d:76:a2:4e:a3:85:03:5e:9b:5f:cf:57:e4:14:2f:82:f3:
9e:d6:2d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:06 2025 by rpki-client