Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: ZozJvmlt/9F0Y90l11QhExsZxNU05B33PAw61guGFrI=
Subject key identifier: 2F:B3:99:1E:8B:59:E2:BD:4E:5C:A1:96:EB:AE:12:CD:9D:75:F0:28
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 0197B8FCFAC6AAB512567E46739DBFCDE7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 00:01:16 +0000
Manifest this update: Sun 29 Jun 2025 00:01:16 +0000
Manifest next update: Mon 30 Jun 2025 00:01:16 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: pUkVDHKQ2vxrTsr7tX+P4QVGr6WsnuYPBLiuzcjqQE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:fa:c6:aa:b5:12:56:7e:46:73:9d:bf:cd:e7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Jun 29 00:01:16 2025 GMT
Not After : Jun 30 00:01:16 2025 GMT
Subject: CN=2fb3991e8b59e2bd4e5ca196ebae12cd9d75f028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:9e:1a:18:9d:be:b2:0b:de:c3:c7:69:fc:
7e:33:0b:4f:c5:b1:22:ae:6b:c3:17:eb:32:45:95:
44:be:59:c5:84:11:04:86:b8:4e:ee:88:ec:d0:0d:
ce:ad:7c:e3:c6:48:f7:f9:74:f1:d6:10:5c:7a:b9:
59:f4:23:a6:df:5f:68:1a:7d:53:ef:f4:25:7f:07:
29:04:e0:9a:f8:57:87:95:fc:ce:5a:ee:af:ed:43:
d2:67:91:62:b7:88:96:02:07:c7:c0:cb:8b:4b:32:
4f:16:69:96:5a:65:c1:9a:9d:73:52:39:24:c9:65:
1b:4a:40:3b:b0:61:34:a3:02:58:a1:ba:21:cc:6f:
dd:73:9a:b6:55:09:47:b0:bc:2b:68:8d:ce:75:40:
eb:e6:08:e8:65:09:63:22:7f:9b:0b:0e:fc:09:40:
6e:fe:0f:9d:8f:6b:23:01:6b:94:5d:35:ca:45:18:
94:c2:ab:1d:f6:e7:2f:0f:58:93:37:54:ce:c8:3b:
86:84:19:78:82:02:a6:5b:30:74:bd:8b:78:3c:cc:
93:fb:35:d6:02:42:3d:7e:66:fb:ab:e0:53:d5:83:
37:9d:0e:a9:f4:d3:41:37:2f:da:bd:d5:7a:08:1d:
43:6b:84:8f:2a:f6:30:c6:9f:aa:07:70:d8:4c:52:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:99:1E:8B:59:E2:BD:4E:5C:A1:96:EB:AE:12:CD:9D:75:F0:28
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3c:2a:57:0e:c9:9c:08:9e:00:2c:ea:8b:e5:71:50:a9:cd:
4b:75:b0:f5:c7:54:8b:66:db:b1:d2:1f:82:a4:d3:41:9e:8d:
39:9b:29:a3:23:ea:a1:f0:01:d2:ab:42:fe:b7:8a:0d:99:d3:
64:3b:cd:dd:c8:6f:79:f1:54:2f:58:e1:00:8d:2e:ea:40:7f:
ad:f0:c5:46:94:64:0d:69:7c:f0:0a:c9:44:a3:31:47:a6:90:
09:59:e3:63:d2:10:db:b3:d3:db:a3:86:c1:df:7b:f9:4d:06:
cc:11:6b:77:1e:c5:74:ce:82:cc:a4:c7:58:fc:64:9b:fc:b5:
e5:a1:62:54:16:f4:60:c6:de:0b:ec:d9:87:8e:c8:28:34:9a:
ed:9e:e8:70:00:35:84:60:7d:60:f2:1c:0f:91:5d:45:ae:f7:
95:af:a4:cb:db:67:68:84:7f:18:12:9e:39:d1:10:df:11:0f:
d4:5f:de:5a:a2:bf:bc:d3:a2:da:77:d3:d0:10:79:23:4d:49:
35:f8:78:fc:aa:50:38:7c:00:d4:6c:4f:76:1e:b7:da:2c:61:
51:b3:29:77:ac:79:3c:65:9e:f0:a3:f5:9d:10:ff:48:13:2c:
43:9f:dc:0b:03:37:6d:19:89:d3:06:de:f5:95:50:cd:e0:e7:
6f:e2:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:32 2025 by rpki-client