Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: /p8EMjqs1W/iwk+7ONGVCxoeN6yb7m21rnubTLXG2zI=
Subject key identifier: 3B:15:13:CA:04:F9:96:6E:E4:A0:61:56:F3:F2:20:C1:68:C5:82:F3
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 0197BFA3A781E795F25D4F1C8055B07ADC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 0417
Signing time: Mon 30 Jun 2025 07:01:02 +0000
Manifest this update: Mon 30 Jun 2025 07:01:02 +0000
Manifest next update: Tue 01 Jul 2025 07:01:02 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: S2BowVkrfG7FJdd/hP1DzF8drWERIcabzlJtOFwGcAM=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:a3:a7:81:e7:95:f2:5d:4f:1c:80:55:b0:7a:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Jun 30 07:01:02 2025 GMT
Not After : Jul 1 07:01:02 2025 GMT
Subject: CN=3b1513ca04f9966ee4a06156f3f220c168c582f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:19:02:90:85:09:10:66:d1:e1:74:08:75:5f:
9d:83:27:0a:58:d2:65:a6:d7:ce:6e:c4:e1:71:85:
fc:c5:f8:18:6f:59:db:bb:ac:87:59:88:5d:20:22:
8a:0f:84:bc:4e:45:6c:6b:fd:c0:42:3c:13:e4:82:
cb:12:e4:24:f4:0d:00:1c:1f:d5:60:41:74:9f:ca:
ac:f6:aa:6a:a8:71:f6:8f:b0:8e:6f:e7:b2:52:40:
12:a2:10:28:01:d7:ba:47:c9:09:af:f0:39:c2:6e:
2c:70:a4:79:55:de:8b:c3:4d:85:e3:d1:32:c5:d1:
0d:13:c8:b2:f5:f6:6a:09:e6:10:51:30:63:c0:c5:
41:71:3a:84:b2:34:36:bf:fe:97:52:1d:b5:cc:44:
4c:fd:8c:f3:3c:c1:fe:23:5f:c0:77:93:09:06:63:
64:82:5a:b4:7e:e9:f1:d4:65:ca:4a:f0:03:a5:8a:
41:55:9a:4f:33:be:2e:a3:62:d0:8e:60:8d:c8:e6:
de:52:bb:78:ad:31:df:46:9c:e5:0a:bd:e9:d5:8f:
c1:e0:f6:a6:cd:95:68:dd:8a:8d:7c:0e:6e:ee:aa:
11:be:2d:2e:b6:2d:51:97:f0:d7:44:e3:68:c1:1e:
5d:b1:cb:39:2e:a2:e4:05:3d:e9:83:15:fb:3e:38:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:13:CA:04:F9:96:6E:E4:A0:61:56:F3:F2:20:C1:68:C5:82:F3
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:12:76:2b:57:dc:b6:3f:72:c5:a8:90:52:29:f0:df:4c:00:
99:1d:a4:1b:86:d7:55:a9:b4:22:0f:9e:d6:8e:a3:08:73:ee:
a6:62:06:8d:7e:4c:ee:74:4a:6c:f1:d1:7f:19:11:0e:39:27:
cf:f5:61:63:36:e5:ef:db:d2:d2:b3:c4:cc:3f:dd:a4:7b:73:
b2:a1:e3:be:01:5a:b4:ad:b0:65:c4:42:e1:a3:b2:5b:77:97:
54:46:b4:dc:bf:2d:3e:ff:29:8f:0b:29:bc:29:30:72:8d:64:
e1:6f:28:72:77:a3:27:c5:d7:fb:07:8b:38:3b:d9:ac:c4:8b:
18:a3:51:9b:a1:95:57:02:b2:1d:88:8b:79:42:5b:77:dd:ed:
21:d7:c5:c2:d9:9d:c4:df:0f:00:81:2e:94:85:7f:7f:3b:d0:
28:3f:41:d1:f0:06:c7:d4:9c:21:b2:5b:84:14:1b:78:66:53:
ec:bc:17:f2:74:44:d8:f8:b0:bf:b7:98:1f:02:1f:24:03:c1:
cc:b7:3c:c0:20:66:82:87:0f:13:05:14:93:7e:b9:0e:31:29:
5d:50:84:7d:47:2b:94:73:37:2a:41:b6:ac:27:a5:45:24:d8:
b0:4d:92:d8:ff:7d:a5:6f:3c:9d:55:17:49:8f:0f:3b:9d:b7:
16:82:b8:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe/o6eB55XyXU8cgFWwetwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5
NjRiNDAwHhcNMjUwNjMwMDcwMTAyWhcNMjUwNzAxMDcwMTAyWjAzMTEwLwYDVQQD
EygzYjE1MTNjYTA0Zjk5NjZlZTRhMDYxNTZmM2YyMjBjMTY4YzU4MmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/BkCkIUJEGbR4XQIdV+dgycKWNJl
ptfObsThcYX8xfgYb1nbu6yHWYhdICKKD4S8TkVsa/3AQjwT5ILLEuQk9A0AHB/V
YEF0n8qs9qpqqHH2j7COb+eyUkASohAoAde6R8kJr/A5wm4scKR5Vd6Lw02F49Ey
xdENE8iy9fZqCeYQUTBjwMVBcTqEsjQ2v/6XUh21zERM/YzzPMH+I1/Ad5MJBmNk
glq0funx1GXKSvADpYpBVZpPM74uo2LQjmCNyObeUrt4rTHfRpzlCr3p1Y/B4Pam
zZVo3YqNfA5u7qoRvi0uti1Rl/DXRONowR5dscs5LqLkBT3pgxX7PjgE/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsVE8oE+ZZu5KBhVvPyIMFoxYLzMB8GA1UdIwQY
MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt
ZWMxNjczNWEzMzgyLzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy
LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRJ2K1fc
tj9yxaiQUinw30wAmR2kG4bXVam0Ig+e1o6jCHPupmIGjX5M7nRKbPHRfxkRDjkn
z/VhYzbl79vS0rPEzD/dpHtzsqHjvgFatK2wZcRC4aOyW3eXVEa03L8tPv8pjwsp
vCkwco1k4W8ocnejJ8XX+weLODvZrMSLGKNRm6GVVwKyHYiLeUJbd93tIdfFwtmd
xN8PAIEulIV/fzvQKD9B0fAGx9ScIbJbhBQbeGZT7LwX8nRE2Piwv7eYHwIfJAPB
zLc8wCBmgocPEwUUk365DjEpXVCEfUcrlHM3KkG2rCelRSTYsE2S2P99pW88nVUX
SY8PO523FoK4Ug==
-----END CERTIFICATE-----
Generated at Mon Jun 30 14:57:23 2025 by rpki-client