Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: oY44jXj6X1zDR9wkZBy24g+CWGhsOHibgtoHnKwFRtY=
Subject key identifier: 4D:FB:1D:07:2D:6E:03:D3:E4:53:0F:5F:50:A7:3E:BB:D3:19:C2:84
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 0197B6D77383DC8564465A51C4FF9DF18957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 0379
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: iCsTUSuHH4H4sTFAVBJfONAWBfZQpkDLDy7vgKvGsFE=)
2: XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa (hash: MHnaHZdpDHAywK5Gif3w+d5y+x0GzsWCN2jIZcL+Afc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:73:83:dc:85:64:46:5a:51:c4:ff:9d:f1:89:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=4dfb1d072d6e03d3e4530f5f50a73ebbd319c284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:a2:93:11:cd:eb:c1:fb:9e:3b:da:2b:66:
94:dc:52:ca:b8:e1:ba:b5:b4:7f:3d:fd:5e:c5:39:
c6:dc:eb:7c:fc:39:1d:9c:94:16:37:51:01:29:11:
d5:2a:de:b0:0a:58:86:5f:35:41:08:8e:df:8a:d1:
20:08:00:9a:e7:d0:63:3b:d8:b3:52:70:e7:7c:a6:
ef:3e:0d:ad:7e:17:6f:18:7a:f6:17:ca:14:d1:af:
73:61:44:b1:53:a6:6d:96:80:be:d9:10:16:de:74:
0b:f6:6c:77:3b:e8:cd:10:eb:22:32:b5:b7:55:73:
f4:9b:5a:96:4d:12:43:9d:58:65:a5:a3:b3:fb:3a:
d5:3c:a4:ee:b4:ff:10:c4:b4:11:99:3e:8e:93:9c:
c6:ea:dd:8f:de:44:01:ad:e3:3b:70:5f:29:2c:2a:
54:05:c2:00:e2:97:6d:29:e8:61:d2:98:f4:44:54:
87:8f:3e:3e:33:38:c6:77:3d:c0:b3:a1:c9:16:01:
8e:34:98:03:84:21:69:10:31:e5:80:d1:75:64:ea:
03:8f:12:fa:68:21:b0:68:c5:30:7a:af:2b:a0:5c:
1e:9d:12:a1:7e:13:74:f1:53:f6:de:de:3f:c3:b0:
2f:fe:e4:80:79:0f:6e:cc:74:d9:6e:f6:16:74:2a:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:1D:07:2D:6E:03:D3:E4:53:0F:5F:50:A7:3E:BB:D3:19:C2:84
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:94:ed:94:06:1c:bb:92:a6:f1:89:d3:ed:15:24:fd:d5:7b:
57:1e:9a:72:da:44:1f:49:60:f4:a7:1f:0f:6c:66:b4:e8:da:
1a:33:72:1d:35:b2:53:3d:74:6a:53:ad:34:95:5f:f4:52:8f:
0e:b6:ae:78:db:f3:d2:68:4c:80:25:36:e3:48:c0:7e:27:ff:
a7:5e:ff:4c:e3:de:69:1e:91:5f:f7:ca:98:23:67:fb:56:52:
cf:07:0c:b3:67:c4:80:9a:4d:5c:11:36:4e:55:8f:08:ab:d7:
40:be:7f:66:7a:d3:ca:23:44:b3:f1:53:67:4d:da:8a:70:40:
4a:0c:28:d5:ce:4e:c5:4e:10:9a:c2:bf:df:3c:e0:a4:fe:d8:
81:bf:b9:12:ae:d6:47:aa:a7:08:d2:28:5e:52:f0:f4:fe:7f:
4c:d2:77:eb:68:cf:f7:e5:81:27:e3:c7:b3:cd:75:59:f8:ad:
f7:dd:f4:3c:7c:2b:4f:79:53:4e:38:7a:17:7d:f0:46:de:53:
da:2f:13:80:89:46:e6:4d:0f:ea:7f:04:56:eb:e6:9c:da:1b:
2f:56:96:1d:7d:2f:0c:66:a8:52:40:a3:ee:93:f9:63:7a:17:
41:62:af:ac:4b:4e:19:46:d7:e9:b9:ea:62:a9:6a:40:f6:aa:
9f:11:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:56:00 2025 by rpki-client