Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
File: OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json)
Hash identifier: 3hupOmJAClhYXxFpuh0ALh3f9mt27xR1kwizqH/bOko=
Subject key identifier: 57:3E:8A:C8:DD:17:76:BF:8F:F6:C3:EC:10:8B:26:E9:B5:09:43:BA
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial: 0198D54E5F7441A8D4197BF2054326EDAB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
Manifest number: 0131
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: 0pKhUeDAG_MOdW5Y02JeMiWhQ-c.roa (hash: vlnGP89vn7MHQd69bqsZgk5M40XUxWUgsHsylZhCKms=)
2: 3-fP9p4N-Js1uWY2EPsUDn2Ta0Y.roa (hash: 3KgZqAhwrFXDW/vYa1+gIOYPmnsUMBf4mPAqrTO23HI=)
3: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: +sjiDnjYkAwXlEjHW4hh/XpmcOZ9tdMDJ4UXKqqlA3Y=)
4: mrvN1q3z6mxLj5OwmYo4SI68-6w.roa (hash: FCwb+wuvGG1lKyfztmthIAYgGwpmTKUMJbN1dMopTWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5f:74:41:a8:d4:19:7b:f2:05:43:26:ed:ab:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=573e8ac8dd1776bf8ff6c3ec108b26e9b50943ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:db:c1:14:88:52:54:02:ee:8a:d8:2c:48:4c:
7b:a1:34:ce:08:c2:06:b8:7a:2f:d9:80:e8:fa:d3:
15:92:aa:58:3e:9d:fa:b6:52:e9:96:64:06:87:1e:
7f:75:48:8c:29:a1:8b:f4:19:60:5b:3b:e6:0e:c7:
cd:44:6d:6e:49:2b:87:30:7d:db:3c:2c:a2:4b:10:
13:a1:7d:01:ed:1e:48:f8:e7:97:22:8e:9d:56:c4:
e6:e6:15:e0:f9:e4:18:8f:35:f7:ac:45:f9:7a:6a:
76:57:24:7a:f5:db:29:b5:df:bb:2a:8c:2a:da:e2:
ac:3f:d4:5c:f5:64:98:5c:5e:b3:19:93:59:9f:9d:
fb:ce:21:9d:05:84:f0:64:0f:ab:9b:52:32:f2:9c:
2d:fa:49:2e:13:16:f2:89:1a:7c:97:3f:f7:ab:f5:
e0:04:fe:20:88:b2:d5:6a:65:d4:50:24:8f:8c:bc:
c1:91:72:d9:09:22:95:82:dd:be:20:41:89:b8:c8:
99:a0:84:b0:dc:5f:dd:04:c3:f8:89:9a:29:1c:df:
ef:22:6b:52:0c:38:56:94:c4:b5:f6:29:38:ce:29:
47:f9:4a:76:4c:d0:1c:08:bf:40:e8:47:68:6b:7d:
6c:e3:82:e0:40:af:7d:e3:2b:75:93:3c:54:7b:a0:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3E:8A:C8:DD:17:76:BF:8F:F6:C3:EC:10:8B:26:E9:B5:09:43:BA
X509v3 Authority Key Identifier:
keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c5:56:7b:31:ae:f9:b6:ee:43:7b:d5:ee:e9:ed:ca:28:8b:
a0:f9:16:f5:94:9b:7d:c1:d9:0f:99:ee:90:44:f1:5c:23:be:
c1:c8:f8:62:c9:e9:8e:3f:09:87:31:e9:27:07:ba:46:96:28:
e8:e6:2b:69:a5:11:01:0e:a0:a7:01:93:61:7f:fe:2b:55:4c:
e4:75:2b:b7:2c:2b:16:dc:06:81:a4:1d:6a:71:fa:9e:f8:bf:
a2:67:c9:98:68:40:b7:e6:87:c4:ac:0a:a3:87:ae:06:f2:6b:
de:a1:cf:4e:f4:6a:c7:da:72:b9:ce:61:61:91:2b:e6:77:55:
55:50:fc:20:2c:32:61:c8:b8:31:90:fe:0a:38:13:64:47:26:
d2:a0:02:5b:1f:70:cd:04:81:dd:5a:a3:2f:21:78:36:d6:d6:
e5:e1:09:54:7b:62:8b:27:5e:0d:c6:2c:52:61:e6:31:8c:98:
c4:36:45:81:83:a8:e6:89:a0:c4:68:fc:db:b5:9f:74:ac:51:
35:01:11:83:a0:bb:13:34:5e:f6:6f:13:88:cf:18:77:bf:8f:
da:96:04:91:f2:3c:38:17:0a:90:d5:87:53:2a:9f:0f:a9:60:
38:92:00:d3:fb:95:f3:02:28:58:02:b2:f0:ab:20:d9:c5:23:
89:e0:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:36 2025 by rpki-client