Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: ECZ0w0SLSjOipyoOsE/YInE84ZH+I90m7A3wtGj/ybc=
Subject key identifier: 13:54:E3:92:17:4D:21:EC:CE:97:A1:8D:90:C3:5E:34:44:73:C0:3A
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 0196C6F17DF904416EFA087B33E4D1314C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 00:00:37 +0000
Manifest this update: Tue 13 May 2025 00:00:37 +0000
Manifest next update: Wed 14 May 2025 00:00:37 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: 16o3REulfaR/Gfcro9q2iuudnZE5gvhORmYPOD9561s=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:7d:f9:04:41:6e:fa:08:7b:33:e4:d1:31:4c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: May 13 00:00:37 2025 GMT
Not After : May 14 00:00:37 2025 GMT
Subject: CN=1354e392174d21ecce97a18d90c35e344473c03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:6d:d3:fa:79:ca:ab:bd:d5:1b:5f:60:4b:
43:8a:7f:1d:b4:e2:c4:26:69:76:0c:e8:65:89:80:
ce:1a:a9:4a:81:db:fc:be:80:51:a0:3e:80:18:6d:
e1:3f:d8:1c:50:5d:22:90:93:5c:c2:4d:eb:bc:e0:
e2:50:8e:e4:32:89:0e:a6:04:c1:7a:0e:70:7f:ca:
9f:52:42:a7:d2:e6:57:b3:6d:40:63:7a:f1:59:bc:
48:a0:2d:3e:49:51:cd:2c:c7:13:91:2f:48:92:48:
fd:45:11:a6:3a:a9:78:18:d3:8a:44:1f:30:51:1f:
15:df:37:be:7f:ef:7e:06:b5:d0:7d:ab:e5:e6:fc:
46:11:ca:c8:1c:2f:26:b8:32:f5:d3:13:be:b1:8d:
3a:c3:a8:0f:73:8e:0f:5c:1c:b5:f7:02:57:61:c3:
3c:d4:6d:e9:0c:0f:26:86:7c:3f:6a:99:57:c6:1c:
25:c1:c6:81:82:f8:7a:b3:5d:8a:79:f2:b8:dd:b5:
09:47:70:fc:24:59:75:78:2a:ea:67:c6:a5:d7:b8:
0c:eb:8c:c7:7a:cc:a2:5d:fe:83:75:78:7b:a0:c0:
32:21:88:dc:46:ad:c6:4c:1c:2a:39:f0:7e:4c:53:
83:44:77:29:27:80:c0:1c:0b:b2:e0:66:01:7e:fa:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:54:E3:92:17:4D:21:EC:CE:97:A1:8D:90:C3:5E:34:44:73:C0:3A
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f5:e5:3b:9a:b2:af:0b:34:47:39:f0:60:b3:46:12:06:80:
3d:c1:d3:99:a8:3f:1a:f4:54:6e:fc:5e:a5:d3:a4:6f:31:04:
2d:5b:bd:4b:f8:d5:b6:03:dc:5e:54:35:58:b9:d7:cf:54:66:
3b:42:18:f7:2d:58:42:bb:f1:4b:bf:c1:58:14:52:12:34:f9:
9e:25:7e:56:ad:8b:c9:8e:24:fd:39:57:4d:8a:2d:81:33:52:
a6:48:07:a5:ca:25:19:c5:9d:76:b7:47:da:63:04:cc:9c:2c:
76:a4:1c:c0:60:0b:75:ab:b5:ec:f2:ac:bc:f7:4a:d9:f2:83:
17:ad:47:55:77:5b:d2:fc:c6:9a:77:fa:4b:96:52:55:9a:da:
90:bf:38:22:07:7a:0f:6d:90:40:7b:d4:0e:c8:23:e6:0b:03:
3e:2f:d5:f6:38:37:48:c3:3d:99:a2:53:05:29:c5:ed:f4:95:
ba:5f:92:56:5a:e9:5d:a8:7f:f0:5d:d2:0a:87:b4:c9:18:30:
d6:17:2e:b0:31:09:7e:b3:90:3a:c4:59:7f:72:f2:0e:c2:e4:
0c:b6:79:e4:59:5d:d0:fe:e2:bb:dd:47:dd:70:42:b7:8a:51:
4c:53:5a:ae:f5:e0:81:f9:a5:1e:63:64:e6:48:4d:d4:7a:f7:
63:dd:9f:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbG8X35BEFu+gh7M+TRMUx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDExZjZjMTc5ZWIzMTQyYTQ4ZWU2NGIyZTk0Y2RlOWRk
MzYxNzMwHhcNMjUwNTEzMDAwMDM3WhcNMjUwNTE0MDAwMDM3WjAzMTEwLwYDVQQD
EygxMzU0ZTM5MjE3NGQyMWVjY2U5N2ExOGQ5MGMzNWUzNDQ0NzNjMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G9t0/p5yqu91RtfYEtDin8dtOLE
Jml2DOhliYDOGqlKgdv8voBRoD6AGG3hP9gcUF0ikJNcwk3rvODiUI7kMokOpgTB
eg5wf8qfUkKn0uZXs21AY3rxWbxIoC0+SVHNLMcTkS9Ikkj9RRGmOql4GNOKRB8w
UR8V3ze+f+9+BrXQfavl5vxGEcrIHC8muDL10xO+sY06w6gPc44PXBy19wJXYcM8
1G3pDA8mhnw/aplXxhwlwcaBgvh6s12KefK43bUJR3D8JFl1eCrqZ8al17gM64zH
esyiXf6DdXh7oMAyIYjcRq3GTBwqOfB+TFODRHcpJ4DAHAuy4GYBfvrQ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNU45IXTSHszpehjZDDXjREc8A6MB8GA1UdIwQY
MBaAFDrRH2wXnrMUKkjuZLLpTN6d02FzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzct
ZWY5MWQ4YjViMDgxLzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzctZWY5MWQ4YjViMDgx
LzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPXlO5qy
rws0RznwYLNGEgaAPcHTmag/GvRUbvxepdOkbzEELVu9S/jVtgPcXlQ1WLnXz1Rm
O0IY9y1YQrvxS7/BWBRSEjT5niV+Vq2LyY4k/TlXTYotgTNSpkgHpcolGcWddrdH
2mMEzJwsdqQcwGALdau17PKsvPdK2fKDF61HVXdb0vzGmnf6S5ZSVZrakL84Igd6
D22QQHvUDsgj5gsDPi/V9jg3SMM9maJTBSnF7fSVul+SVlrpXah/8F3SCoe0yRgw
1hcusDEJfrOQOsRZf3LyDsLkDLZ55Fld0P7iu91H3XBCt4pRTFNarvXggfmlHmNk
5khN1Hr3Y92fQQ==
-----END CERTIFICATE-----
Generated at Tue May 13 06:37:32 2025 by rpki-client