Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: YsUFJ7ppsOBiYcpEsfg424ZEgjOguuP+DMan69LMdVc=
Subject key identifier: C4:75:06:80:A4:7C:4C:06:08:7C:82:AE:68:3B:BF:B7:29:13:F6:D0
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 0198D6CDC8B0BCB2B5CDB5135FA6C45A5332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 12:01:07 +0000
Manifest this update: Sat 23 Aug 2025 12:01:07 +0000
Manifest next update: Sun 24 Aug 2025 12:01:07 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: EuqAjNQg5ApBNna8hD4GRGNf/knDt55ukZyCssNo9Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:c8:b0:bc:b2:b5:cd:b5:13:5f:a6:c4:5a:53:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Aug 23 12:01:07 2025 GMT
Not After : Aug 24 12:01:07 2025 GMT
Subject: CN=c4750680a47c4c06087c82ae683bbfb72913f6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:67:94:cd:0f:e8:50:08:cb:20:dd:77:45:
c1:e9:28:b5:ab:e0:ae:d2:8a:18:40:ec:1d:aa:f9:
1e:8e:a7:c9:b1:2b:67:70:70:cc:af:04:f2:22:e6:
1d:4a:57:e3:62:9c:ab:2d:3c:e2:6a:c7:d4:e6:98:
c7:f9:a7:b0:d0:57:1a:6b:74:a3:80:58:37:0c:3e:
7e:4b:0c:fb:47:5d:6c:ca:8a:69:93:45:f7:58:5d:
e6:0a:20:b7:19:df:d6:f5:8f:f6:af:95:40:64:9d:
45:43:ff:74:d3:8f:3d:07:2f:89:bf:92:cf:fb:71:
55:6c:26:20:57:80:24:93:1f:cf:40:21:dc:72:2e:
56:04:9b:22:7b:99:4c:02:7f:6a:55:bc:dc:ff:64:
78:51:7b:91:64:70:a9:9c:46:5f:7f:11:b5:9b:8d:
00:f7:e8:ef:d7:5e:72:9f:1e:7f:3f:7f:09:e8:9c:
a6:8b:90:3e:9d:b0:29:de:e0:58:d9:32:88:c1:6c:
50:02:b9:4b:b8:aa:4c:19:87:9c:9e:04:94:f9:51:
0f:b3:b9:4f:ad:c6:a5:8f:78:b0:db:5a:c2:98:95:
0e:cf:e7:67:e8:20:d3:1e:52:46:fc:ab:ca:09:48:
d1:36:33:04:e6:8e:41:ad:db:40:f6:38:ff:c6:3c:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:75:06:80:A4:7C:4C:06:08:7C:82:AE:68:3B:BF:B7:29:13:F6:D0
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:18:f7:ca:07:da:ed:d8:d7:d4:d8:9d:06:e0:90:88:f6:85:
24:bf:14:77:1d:8a:2a:0b:a7:f0:fd:94:2a:14:6d:30:d2:33:
f8:d3:a6:82:0d:71:1a:d1:26:fc:69:ba:20:37:5e:7d:e1:23:
28:02:fa:39:7f:1b:71:35:68:8d:16:ef:75:c6:f9:d0:4b:0b:
e7:2f:ba:30:98:6a:4a:f2:fd:7b:36:52:7a:6e:2f:e5:f7:3c:
67:e1:f7:b0:b0:a8:ed:24:63:ae:da:05:68:04:45:bc:fd:ab:
af:24:13:70:98:70:d4:9c:90:35:a4:7e:4c:15:a2:27:a6:1c:
47:51:52:4e:dd:a7:4b:79:47:32:3f:65:5f:90:29:5c:8a:2b:
93:a9:2a:4d:1a:8b:d7:ca:b2:4e:7a:8e:e6:bb:33:c9:40:6e:
1c:46:b6:ab:01:4f:41:12:a3:77:18:27:4b:f0:07:ab:f3:92:
50:ec:36:37:64:a1:f9:ed:60:1c:c0:7d:12:83:a3:2e:9c:cb:
59:88:fb:62:d6:53:00:40:fa:4a:04:0b:7b:2b:c9:99:6b:f5:
56:1b:3f:ed:24:36:db:09:14:67:22:0a:74:3f:6d:5c:da:0e:
83:7f:92:fa:10:a8:50:76:42:87:96:5c:d3:f1:c7:9d:a6:e8:
4e:ed:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:44 2025 by rpki-client