Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
File: OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json)
Hash identifier: n0aF2TDwtkemkkX11DQCvEMo3UgPY/J01twbZKwforE=
Subject key identifier: 8C:EE:F8:4E:93:EC:52:0F:1D:42:04:40:F6:13:7F:1B:D5:EB:F0:CF
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial: 0197D4749D2B43D591DFA6653B6021EEA1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
Manifest number: AC
Signing time: Fri 04 Jul 2025 08:01:41 +0000
Manifest this update: Fri 04 Jul 2025 08:01:41 +0000
Manifest next update: Sat 05 Jul 2025 08:01:41 +0000
Files and hashes: 1: 0pKhUeDAG_MOdW5Y02JeMiWhQ-c.roa (hash: vlnGP89vn7MHQd69bqsZgk5M40XUxWUgsHsylZhCKms=)
2: 3-fP9p4N-Js1uWY2EPsUDn2Ta0Y.roa (hash: 3KgZqAhwrFXDW/vYa1+gIOYPmnsUMBf4mPAqrTO23HI=)
3: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: 9QsOpsrYaQUjH08HjLeN6D/83ArNN+kObjtS/e3L0e0=)
4: mrvN1q3z6mxLj5OwmYo4SI68-6w.roa (hash: FCwb+wuvGG1lKyfztmthIAYgGwpmTKUMJbN1dMopTWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:74:9d:2b:43:d5:91:df:a6:65:3b:60:21:ee:a1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Validity
Not Before: Jul 4 08:01:41 2025 GMT
Not After : Jul 5 08:01:41 2025 GMT
Subject: CN=8ceef84e93ec520f1d420440f6137f1bd5ebf0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:ca:00:49:8d:2b:bb:95:e2:da:6f:55:2b:
09:03:40:32:65:fd:7c:bc:5e:d5:a6:78:54:55:d3:
25:57:db:18:c5:1a:f8:5b:ad:71:dc:71:72:1d:d1:
7a:57:4d:ea:10:ff:56:b2:28:92:25:90:4c:89:70:
04:70:66:4f:7c:22:41:e1:d1:5e:23:16:fc:44:de:
85:e1:03:d5:cd:e3:6c:90:38:f4:10:9c:26:b0:5e:
92:79:67:84:0d:57:3e:f4:06:77:09:6e:48:58:6c:
bf:f1:f6:45:bc:7f:72:8b:3c:98:1c:ae:a7:08:d6:
7f:9f:8c:db:94:cd:6a:85:18:9e:18:4f:de:88:80:
e0:39:42:a8:db:10:c5:1f:62:54:cf:c4:12:c3:9c:
0f:18:07:2b:7a:c1:0f:9e:9f:7e:9d:e3:7d:5d:73:
d8:4d:ba:fe:22:36:36:c7:6d:6e:8d:11:c7:db:05:
c0:2d:0e:98:d0:6d:c9:67:56:a7:09:f0:e7:b5:95:
40:7d:fe:d1:66:64:f2:bf:a0:3b:ed:f3:73:b7:e8:
43:6f:ad:66:dc:d5:21:ec:ca:a0:e4:ab:4f:e1:8a:
39:a1:76:98:8c:0f:cd:da:14:0d:99:1c:17:f9:71:
16:c4:98:57:98:3e:d0:0f:8f:a0:60:99:14:31:d9:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:F8:4E:93:EC:52:0F:1D:42:04:40:F6:13:7F:1B:D5:EB:F0:CF
X509v3 Authority Key Identifier:
keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:80:4c:29:b8:14:7d:80:c0:0f:f0:87:75:1c:d3:7d:61:cc:
05:71:ec:49:a0:b2:57:97:6e:b1:17:8e:46:56:d9:c1:26:58:
73:1c:71:4d:3e:ed:5e:95:d8:bb:44:92:21:5d:1e:b8:86:cc:
a4:58:a9:c1:6c:c9:7d:31:f8:5c:94:88:39:91:6e:75:3f:c6:
8a:eb:96:5b:db:c8:1b:f7:9e:9e:1f:14:ec:f8:3b:61:51:f0:
97:2c:16:06:15:36:dc:ff:05:a2:50:cb:f5:e2:f1:ad:0c:43:
ff:a9:87:c9:76:8b:d3:0e:d2:41:3e:24:c6:9a:5a:0f:9a:6f:
e0:cd:c3:95:f5:0f:ee:c2:f8:30:f7:cb:40:65:f3:2c:5a:ab:
6f:d4:d8:8d:1e:14:db:3b:49:0a:82:da:d8:28:d6:fe:32:1f:
54:ca:5d:05:39:7e:d6:3c:af:0c:42:77:30:16:1e:aa:7b:a3:
c8:2a:9a:ff:73:53:4c:bc:ed:21:55:87:22:80:0f:47:87:8e:
e4:b3:34:c9:f1:d1:72:6d:8e:ee:84:18:36:dd:6c:a7:16:89:
7c:c5:e8:e8:23:6e:da:4a:6d:e4:82:32:ef:2a:5a:05:99:1b:
04:b0:55:cd:8b:68:29:5c:24:fd:bd:1a:64:17:34:d6:23:42:
8e:38:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:40:15 2025 by rpki-client