Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: mieUY6z4lX/ZwMk+VkQ8LY2yk4rhJGOx9gnA9Vbl74k=
Subject key identifier: 8D:4B:E7:F3:1F:0B:95:CA:78:6D:74:B3:33:94:DF:EC:F6:AE:60:D2
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 01984B1C7F0342836B06D078B64D1C7F86A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 05BF
Signing time: Sun 27 Jul 2025 09:00:15 +0000
Manifest this update: Sun 27 Jul 2025 09:00:15 +0000
Manifest next update: Mon 28 Jul 2025 09:00:15 +0000
Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: vXgNdOlityRXUv2tSj9Lu7+DXTjrPwyDH5zRuajsmjs=)
2: kqIK4ViX12p6eIuBG0T4dHMIIHI.roa (hash: PaO/dVKACGH2GQrFFW5fxxz+R4Obi2vhR9vhB2cSwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:1c:7f:03:42:83:6b:06:d0:78:b6:4d:1c:7f:86:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Jul 27 09:00:15 2025 GMT
Not After : Jul 28 09:00:15 2025 GMT
Subject: CN=8d4be7f31f0b95ca786d74b33394dfecf6ae60d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:f6:90:eb:15:72:90:d0:e7:04:02:21:22:
d2:a5:83:f2:5d:b0:ca:b3:9b:69:c4:c1:07:83:0e:
fc:ae:ae:6f:4d:8b:8c:a0:be:5c:54:32:6c:52:5b:
86:dc:c9:72:f7:46:4e:6e:12:e1:df:0a:47:6b:b2:
96:bc:d2:10:5a:9f:9d:67:3b:96:67:3b:f2:d4:0e:
5a:a6:3f:09:e3:35:d2:9f:8d:5f:5b:e5:c4:02:b8:
dc:aa:58:16:06:34:ca:78:2a:66:a5:15:fb:bb:ed:
ea:df:16:37:e1:77:de:21:30:b8:11:a4:97:c4:64:
39:dd:9e:eb:b2:34:39:33:e7:c5:7d:3a:b3:08:fa:
a8:81:08:53:6f:85:7d:30:be:43:3d:76:6d:81:31:
56:04:b1:57:73:78:aa:e6:67:41:36:fc:35:8e:32:
91:62:bf:d2:65:29:a3:64:37:36:32:ab:96:fa:e6:
47:79:00:54:8a:3d:d5:61:50:aa:ab:2f:e1:b2:a4:
ca:a9:a9:76:5d:45:73:73:78:7d:90:c8:c2:e8:fc:
5a:2a:13:8d:ca:f4:22:1d:d1:2a:5f:b6:ce:0f:84:
cd:68:34:49:a5:f6:28:69:6f:0b:e5:69:29:f6:2d:
ab:a1:03:76:48:c9:44:d7:45:89:10:a3:ee:b0:db:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:E7:F3:1F:0B:95:CA:78:6D:74:B3:33:94:DF:EC:F6:AE:60:D2
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bc:9c:11:17:4e:a9:6e:39:42:44:f7:60:b4:78:83:08:e5:
dd:09:ea:a0:86:e0:43:f0:48:1d:c7:d8:b6:46:bb:ef:9a:27:
ab:7b:34:ca:cd:30:d0:08:c0:57:65:04:f2:f9:df:f9:d5:ed:
cf:81:74:95:5e:6a:e4:44:81:92:80:77:d4:a7:48:24:dc:96:
98:26:c7:84:1c:15:9b:19:4c:2c:19:00:1a:0b:c7:86:75:fc:
37:94:61:ed:ba:91:52:e9:e0:b2:52:a7:e8:f9:d5:31:f2:c2:
43:a6:90:28:40:84:a7:0a:f8:6a:b9:22:23:64:dc:53:18:e8:
fc:58:28:50:34:d0:c4:25:59:b8:96:ed:00:09:cc:d9:aa:17:
78:b9:ef:5a:75:42:cd:19:cb:26:4c:b7:e3:f8:aa:28:9f:51:
51:f3:3c:26:b0:21:56:76:ea:88:9c:a7:cb:b1:8d:cb:6f:1e:
0d:3f:d5:ce:25:0f:d5:c4:f2:33:c6:f6:a1:44:f5:52:b5:5f:
57:b1:1b:4f:7c:54:ca:8e:2c:18:11:c7:b9:ba:c1:a5:be:9e:
64:8e:03:d0:be:1b:5a:f9:fd:70:ad:8c:8d:5f:bb:12:d7:be:
1e:6e:74:4e:95:26:3d:c5:ee:47:a3:31:79:41:23:ef:27:f2:
a1:0d:da:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:41:14 2025 by rpki-client