Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: hpt4TVb18I+98IrAWue2TsyCb9jboL81Uz4KLTFYPTk=
Subject key identifier: 1A:44:83:F5:B0:FA:9A:11:65:F6:96:65:77:23:7C:FA:9E:C5:82:4E
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 0198D6601BC4F9904A75B6D76BAAB8480711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:19 +0000
Manifest this update: Sat 23 Aug 2025 10:01:19 +0000
Manifest next update: Sun 24 Aug 2025 10:01:19 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: om2jCIA0sVZkrliBvND2xjGjyNs9or+K4mMsrylWyA0=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1b:c4:f9:90:4a:75:b6:d7:6b:aa:b8:48:07:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Aug 23 10:01:19 2025 GMT
Not After : Aug 24 10:01:19 2025 GMT
Subject: CN=1a4483f5b0fa9a1165f6966577237cfa9ec5824e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:16:19:85:5a:ae:49:c9:17:74:f4:42:c2:
56:ac:c0:94:db:39:f9:bf:c7:02:5e:ed:a1:d9:dd:
a9:be:47:cf:49:27:45:bd:0e:f5:ed:71:a4:c3:56:
f1:cc:4d:01:de:75:85:cb:db:85:23:38:5c:41:43:
64:aa:d1:9f:41:64:f6:40:55:a3:0a:36:b0:f3:92:
db:bd:25:2d:d2:01:6b:dd:b1:68:af:37:4e:fb:7d:
4d:08:e4:ab:15:b4:67:a1:62:be:8c:cf:47:97:53:
fa:c5:52:f4:e9:4c:a0:10:24:58:58:a9:05:6c:40:
e8:ec:49:54:6c:eb:52:61:56:f0:ca:6b:bd:ef:ce:
7e:48:b9:89:21:22:98:6d:fc:3d:90:f0:28:91:f1:
fd:45:0e:6c:19:41:7e:7b:c1:af:e7:65:03:ef:be:
a6:59:9e:07:1d:92:5b:e5:e0:fb:3f:04:5b:83:79:
54:b9:90:21:a8:e3:6b:3b:1d:74:43:50:51:88:ef:
6c:52:49:d9:1c:b6:45:0d:99:0c:2b:76:1a:5e:62:
b8:18:34:74:5c:57:86:d9:9b:2c:70:12:49:6c:1d:
f5:5b:53:af:e8:a5:50:ee:01:3e:05:29:4e:61:33:
b5:bc:66:93:5a:4e:38:ec:3e:45:cf:26:84:17:31:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:44:83:F5:B0:FA:9A:11:65:F6:96:65:77:23:7C:FA:9E:C5:82:4E
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e9:e7:f9:11:8d:f3:5c:2d:1d:f2:21:2f:c2:33:95:a0:b9:
2d:73:10:6b:dc:63:3f:1c:68:a5:c9:2a:f1:7f:18:89:97:86:
de:04:0a:23:ae:bf:65:19:b9:72:12:27:0b:d6:1f:09:5c:e2:
31:04:9a:88:1b:1f:a0:2a:d0:d0:de:58:a1:b4:4f:ad:4c:4b:
de:e5:7d:1d:b2:6e:31:39:08:bd:43:d1:e1:b6:72:34:a2:ab:
85:15:90:ab:ef:7e:59:c1:ec:89:22:c9:98:ce:8b:9b:76:82:
df:e2:ba:ac:14:f8:87:79:f5:78:6e:14:a1:9b:88:a7:cb:db:
67:be:7a:2d:e7:f7:40:04:09:12:82:61:d3:a7:ec:f4:d9:57:
d1:0d:d4:48:e0:01:11:13:06:61:0e:ad:91:25:bb:49:9a:40:
c1:c5:c3:71:5c:d0:3b:b0:da:25:85:10:b3:34:13:e5:10:73:
a6:a6:03:03:49:f8:e7:10:e7:d7:d1:85:84:26:10:32:f3:18:
ef:6b:15:26:13:8d:ff:0e:22:ae:60:42:9f:ba:35:6d:25:27:
e8:da:cf:65:a6:b7:f3:7e:a6:23:d5:ab:dc:34:d6:2e:78:1f:
0e:7b:78:5e:57:2e:f2:c3:ce:1f:3f:1b:0f:64:19:08:55:c7:
56:4a:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:55:20 2025 by rpki-client