Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: fdzUTWa/tQgpI/g4do9VKRDPVPOITkZD2urWkRebXFM=
Subject key identifier: AB:86:5B:AC:84:4A:FA:41:77:10:A3:7E:8D:68:3C:56:8F:B6:01:92
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 0197BA7E85750B72A0DB6812D63BC66A5EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 07:02:23 +0000
Manifest this update: Sun 29 Jun 2025 07:02:23 +0000
Manifest next update: Mon 30 Jun 2025 07:02:23 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: 9COmp1AMbSCY9jUKKtuo3ObbF67p9Uwq8SJeZwqzu9s=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:85:75:0b:72:a0:db:68:12:d6:3b:c6:6a:5e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Jun 29 07:02:23 2025 GMT
Not After : Jun 30 07:02:23 2025 GMT
Subject: CN=ab865bac844afa417710a37e8d683c568fb60192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:00:94:a9:53:c8:62:6d:89:4c:db:00:49:ef:
bf:4b:be:fd:8c:fc:ab:93:47:c7:0a:86:73:87:e0:
3c:ad:d0:ae:2a:a5:c8:de:16:d5:35:74:48:2b:12:
a8:83:7e:ff:eb:60:ff:d2:e4:52:6e:77:aa:4f:83:
30:2f:1e:67:d9:33:aa:57:a9:49:b2:8d:e0:ad:37:
bd:85:4b:2d:88:f6:e1:e0:cb:f4:45:d0:a6:84:42:
65:e2:6a:42:a6:b6:f9:d8:16:e9:93:0f:f8:98:c5:
63:89:15:30:92:9b:cc:6c:10:72:22:bc:24:13:e5:
d5:81:26:78:21:c3:1d:0b:04:f6:69:88:d0:27:4d:
1e:08:a6:b7:43:5f:83:59:e0:d6:42:c9:33:38:0c:
d3:63:0d:20:43:87:60:bb:27:48:d9:a9:e9:93:da:
42:93:7c:f4:e7:f1:0a:5e:87:3f:1f:7a:2a:1b:d1:
49:3a:44:30:f8:94:09:b8:7f:70:94:3d:ea:2c:04:
5e:ff:8e:70:8d:2b:60:c2:b9:2e:ee:ab:1b:ef:94:
e7:7d:1d:96:57:37:5a:62:f2:d1:d6:08:d0:c1:99:
8c:5c:39:52:d4:b2:a8:8b:bc:0b:65:ce:a9:26:a8:
4d:b6:6e:5f:0e:ee:cb:87:2b:a7:b7:22:40:1a:36:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:5B:AC:84:4A:FA:41:77:10:A3:7E:8D:68:3C:56:8F:B6:01:92
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4e:49:00:b2:19:f2:09:08:67:6d:0b:44:59:ef:42:fc:03:
52:fc:3b:fa:4b:7f:65:31:cf:c3:10:02:90:e2:6c:2c:75:11:
e8:7d:db:8a:7f:e7:cb:39:fd:0b:c2:89:5e:39:ca:a1:1f:7a:
b5:c4:dc:b7:73:b5:0f:53:f1:d7:61:b5:6d:c7:1c:4c:c9:34:
22:8d:01:d2:a5:a2:ec:8d:e0:04:f1:99:df:79:a0:e0:26:99:
07:50:fd:27:d9:eb:11:17:3c:99:f2:1d:25:aa:2a:38:8d:3b:
ef:0f:9e:ec:af:fa:6a:5a:01:02:72:59:9d:f6:b4:93:8f:ad:
fa:3e:f9:67:1c:f1:32:74:fe:bd:f1:73:d2:6c:65:cc:5f:91:
17:a8:88:45:36:5d:01:df:19:6b:56:bc:fc:c7:7b:d1:fa:80:
c0:6a:8c:82:31:e4:a6:63:8a:07:4f:cd:85:4e:ae:c3:c4:07:
df:d0:3f:b6:a4:e6:51:d1:f7:23:f4:61:b5:ca:9e:02:cc:18:
2d:a5:14:c5:7c:95:8a:7b:ba:db:92:12:c6:de:fe:ee:f8:6c:
70:c2:86:5e:bf:fc:1f:28:cb:d4:70:e0:0a:49:9d:79:11:67:
20:a9:2d:87:8c:3a:2e:dc:15:24:39:90:71:0f:1d:e9:18:90:
61:d6:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:03:19 2025 by rpki-client