
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
File: OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft (raw, json)
Hash identifier: 74wbYaVton7zlOePha6qeAjFA/YmrvIYociZ6G6VH2Y=
Subject key identifier: 21:0B:3C:5A:FB:81:32:24:4A:7D:57:DA:A5:C7:84:C0:5F:56:9D:1F
Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
Certificate issuer: /CN=39348867dcb2956aca65d08348e440d4727a3743
Certificate serial: 0198D7735BE7E32C9C25AD9A6FFD6D444334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
Manifest number: 03EE
Signing time: Sat 23 Aug 2025 15:01:58 +0000
Manifest this update: Sat 23 Aug 2025 15:01:58 +0000
Manifest next update: Sun 24 Aug 2025 15:01:58 +0000
Files and hashes: 1: OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl (hash: YEmTjZcAgJdmVjTQOsLBT1eqMF6mZbT+xzRzEjD7F90=)
2: c6YXeFcziXYV8oA7IxxFWWIl7jo.roa (hash: 772kO8FIL8B9L379YEWTLwC21iJYKEhsMHuMIDdHwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:5b:e7:e3:2c:9c:25:ad:9a:6f:fd:6d:44:43:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743
Validity
Not Before: Aug 23 15:01:58 2025 GMT
Not After : Aug 24 15:01:58 2025 GMT
Subject: CN=210b3c5afb8132244a7d57daa5c784c05f569d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:da:8c:99:3d:7f:8d:0a:3c:05:7f:f3:af:
b8:b9:46:30:20:6e:18:93:bc:a0:82:90:5f:13:04:
14:0d:bd:78:05:fc:ed:15:60:8f:08:fe:53:1a:39:
2f:f7:92:77:80:68:f9:e4:59:d9:cc:8c:9f:b1:52:
98:70:82:97:82:dd:d1:97:7a:63:83:58:00:8f:02:
75:b4:65:68:6c:26:53:3d:1f:36:ef:ea:48:45:33:
0d:9a:a1:02:0a:2c:3b:d5:28:14:39:90:2b:25:79:
15:6f:ec:b7:1e:c9:99:6f:0f:5a:48:86:19:cc:fc:
f1:2a:2c:d3:93:2d:55:c2:4c:ec:44:fd:59:a6:41:
07:d1:58:46:ba:9a:2a:5b:fc:37:dd:2b:44:83:5c:
a7:cb:64:bb:99:58:5d:68:bc:e4:6c:7b:af:9a:cb:
a4:6d:77:6c:56:67:34:04:e5:39:e7:d3:96:8b:cf:
29:8a:b2:ac:5e:46:5a:4c:23:32:58:f6:d5:2e:f0:
95:52:30:e7:14:92:98:d8:c9:44:06:b7:28:98:35:
83:ac:b8:11:9b:25:fc:73:08:de:13:bc:2c:1e:8a:
cf:44:30:8e:85:36:b6:69:cf:0e:33:7d:87:71:80:
cd:0b:40:7f:6e:7e:c8:f9:23:b2:03:8d:77:c3:a1:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0B:3C:5A:FB:81:32:24:4A:7D:57:DA:A5:C7:84:C0:5F:56:9D:1F
X509v3 Authority Key Identifier:
keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:98:6a:0a:ba:6b:18:a6:15:b7:a2:a9:b9:2f:41:d2:e1:55:
a5:76:b1:09:a1:50:06:32:a5:e4:a9:1b:f3:12:1a:ac:6e:b0:
1e:c1:ca:2c:ae:f2:8b:da:ac:4a:de:02:fe:bc:f6:ad:73:41:
31:c5:c1:a1:4e:ed:4d:6a:be:23:b2:89:f2:64:fd:a0:2b:61:
ba:b2:1c:59:46:dd:63:6c:53:cc:00:e3:33:c6:48:9c:ec:a0:
d3:dc:68:32:4d:b6:d1:e2:5f:ac:02:17:b1:ab:20:66:1b:56:
14:18:0b:ee:2a:af:f9:fb:e2:5d:fb:cf:e3:6b:ec:63:83:e5:
97:1b:72:c2:41:1f:40:61:7a:6c:37:09:98:ed:cb:c7:84:8b:
99:66:3e:5f:c3:86:19:12:1e:52:a5:8e:e7:19:9f:c8:e5:3e:
9b:a3:f4:c8:f1:d3:6a:f7:fc:a2:2c:c8:36:2b:19:95:7f:4b:
4c:ad:e0:13:b7:74:bf:6a:29:30:48:1d:be:a9:66:9c:38:9b:
35:86:cd:e8:14:d8:7e:de:77:3f:0d:bf:6c:b1:1b:b7:3d:94:
91:3a:a6:48:c4:29:59:af:74:97:32:e2:47:dd:b7:bc:d8:1e:
4a:4f:18:e2:c0:d8:c3:48:2b:69:6c:98:7f:6e:95:0e:97:e5:
16:bd:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:03 2025 by rpki-client