Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: eQ81Oo4cKm/qbqCkZMmNRHntr+NzEVSXjpJLX607Dvg=
Subject key identifier: 3F:90:E6:2A:9C:68:1B:2A:5E:F8:10:7D:5A:6E:2F:29:D3:D1:35:49
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 01983FBDFF733C30DF1908C633EF63AAC409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 109E
Signing time: Fri 25 Jul 2025 04:01:12 +0000
Manifest this update: Fri 25 Jul 2025 04:01:12 +0000
Manifest next update: Sat 26 Jul 2025 04:01:12 +0000
Files and hashes: 1: c7xqGqZ0KnoVgSHP1uxqIn-gcow.roa (hash: fgA4jW+G01sd+KIFTnm2o/eJLY8zge2zWEftjWqJRcE=)
2: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: ++QJT0k8dIzC9FjNJ0MD7KBqReCOCshG/ARiwWK+OUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:ff:73:3c:30:df:19:08:c6:33:ef:63:aa:c4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Jul 25 04:01:12 2025 GMT
Not After : Jul 26 04:01:12 2025 GMT
Subject: CN=3f90e62a9c681b2a5ef8107d5a6e2f29d3d13549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:b3:9c:28:f8:14:5b:18:41:da:12:b0:1d:
0d:0c:2f:da:75:4f:a9:d7:42:9f:bb:29:c9:bd:a6:
1a:75:44:e0:9d:b6:aa:6a:24:07:4f:71:e0:22:41:
8e:14:07:fb:75:65:bf:76:6f:a5:86:45:b0:49:a9:
df:43:97:73:41:63:e1:1b:3f:6c:fa:d4:9d:d7:c3:
eb:77:76:5d:82:3f:fd:3e:b6:3a:f8:3c:d2:7d:63:
3e:aa:42:97:76:9f:9b:3a:33:63:4c:f4:aa:f5:dc:
af:40:f2:c1:c3:7a:ea:26:fb:52:f2:04:c8:29:86:
92:b3:c6:42:b8:c4:6c:c0:81:76:14:a2:64:3c:8d:
54:3a:e2:b9:c0:a0:38:0d:ac:b1:ea:f7:29:a3:b4:
a8:32:eb:28:b5:03:68:7c:b9:7d:61:6d:a7:98:73:
2a:e6:84:ed:6d:01:db:cd:13:5d:4a:a8:57:56:2c:
ef:55:4b:48:a6:ae:c2:ee:be:45:48:ff:ac:f9:55:
16:ae:32:7c:72:89:ac:6f:b7:50:f8:64:b5:ea:33:
51:ff:36:6b:2c:d5:06:b8:77:d0:02:91:78:bd:da:
6d:4f:53:32:ea:d7:b6:61:5b:dd:96:7f:36:8b:b2:
43:ea:e2:02:6d:57:83:3a:b9:3d:18:bd:73:f1:77:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:90:E6:2A:9C:68:1B:2A:5E:F8:10:7D:5A:6E:2F:29:D3:D1:35:49
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:64:32:d4:ab:1b:e7:81:46:95:a1:c6:f9:f1:0a:8a:e1:1a:
ac:a0:e6:e9:10:36:c3:88:62:7b:4c:80:14:2d:66:be:fd:c0:
a6:98:12:65:94:2d:76:b7:ec:bf:9b:50:0a:4f:39:92:38:06:
4b:36:9e:f3:f7:d2:aa:83:5d:aa:6c:e0:fc:ff:ae:75:fc:8f:
7e:60:cd:94:d1:4d:09:bc:4a:4a:ee:64:9c:da:aa:a1:c1:72:
ab:3d:37:85:3f:1a:c4:4e:b0:2d:0f:e7:46:6d:20:ed:66:72:
bb:59:77:6a:53:db:7c:4c:a7:7f:37:e7:90:e7:b2:6b:53:16:
71:f3:45:f5:bd:b6:d3:0c:70:ac:03:d9:70:68:a3:0c:30:65:
51:16:30:d6:d2:a2:63:50:e8:22:42:e1:d4:ba:d9:33:1f:b3:
05:6b:a1:a1:32:15:e6:41:ca:74:14:66:14:b3:4b:e4:05:83:
49:1c:f6:ce:67:e0:e8:ec:1c:8f:a6:27:c8:df:9e:74:bc:53:
ad:5e:08:0d:af:2f:9d:fc:ac:78:21:cf:bd:be:c6:17:4c:9a:
c3:b7:3d:82:4e:8d:e8:dd:59:14:70:3b:84:2a:09:b2:f1:57:
2b:00:06:27:1b:5b:9f:07:ae:57:cc:e1:a0:e7:8d:63:55:2b:
e4:c7:d3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:52:35 2025 by rpki-client