Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
File: otGlH74MLlJmesWiVSySo3nOre4.mft (raw, json)
Hash identifier: YVf30pUCI8HicilSfbmO2nEfrJJEJr+lBHi3BOWtBYg=
Subject key identifier: 28:ED:50:99:81:7A:04:B8:5B:16:F5:21:5E:5D:A5:FD:4F:3F:C0:C3
Authority key identifier: A2:D1:A5:1F:BE:0C:2E:52:66:7A:C5:A2:55:2C:92:A3:79:CE:AD:EE
Certificate issuer: /CN=a2d1a51fbe0c2e52667ac5a2552c92a379ceadee
Certificate serial: 01984AE5F23A8375C974984527E56919CEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
Manifest number: 01DB
Signing time: Sun 27 Jul 2025 08:00:40 +0000
Manifest this update: Sun 27 Jul 2025 08:00:40 +0000
Manifest next update: Mon 28 Jul 2025 08:00:40 +0000
Files and hashes: 1: otGlH74MLlJmesWiVSySo3nOre4.crl (hash: kQSGB6g1AsCJ1GAuuAWXgZWBKEyOeKfaoaOqygvJ/do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:f2:3a:83:75:c9:74:98:45:27:e5:69:19:ce:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d1a51fbe0c2e52667ac5a2552c92a379ceadee
Validity
Not Before: Jul 27 08:00:40 2025 GMT
Not After : Jul 28 08:00:40 2025 GMT
Subject: CN=28ed5099817a04b85b16f5215e5da5fd4f3fc0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:57:98:87:c8:32:7d:b9:b4:5e:06:98:29:
f4:53:14:11:0a:88:23:89:aa:e5:95:c1:98:7b:a8:
7e:b4:da:95:62:36:d0:34:c6:85:a4:e9:c1:b3:8c:
d9:0b:11:05:00:fa:85:a6:65:51:36:5b:bc:75:25:
51:45:b2:22:fe:69:f0:bd:12:f5:4e:be:d0:75:42:
ea:3f:f4:ee:dc:ef:b3:28:6c:66:9e:f0:41:6e:8c:
25:5b:a5:d0:dd:62:d2:4c:18:dd:1c:70:83:6a:cd:
18:c2:1e:02:4f:6b:c7:69:1f:89:64:66:18:f9:5f:
18:90:0c:45:00:05:42:20:27:98:82:62:66:4e:5b:
89:a1:db:71:ef:5d:4d:77:e2:f1:90:a6:8a:77:7e:
40:95:0e:4f:7d:a8:37:7f:82:c5:c3:1d:e6:9c:c4:
af:c2:31:5e:43:88:66:c0:15:72:9c:b5:d1:01:d4:
04:1d:d6:c9:b4:61:e3:06:e8:89:b9:b3:dc:fe:da:
c6:bf:84:b1:05:ab:7c:0c:5c:83:b5:81:45:bd:7a:
30:f8:f9:39:fb:24:cf:40:63:52:14:62:94:4b:6d:
0a:00:23:fd:65:67:0a:f7:8a:f3:ee:d2:40:1e:df:
f7:fb:b5:e7:0b:a4:2d:3a:4d:bf:cd:d4:c4:f8:66:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:50:99:81:7A:04:B8:5B:16:F5:21:5E:5D:A5:FD:4F:3F:C0:C3
X509v3 Authority Key Identifier:
keyid:A2:D1:A5:1F:BE:0C:2E:52:66:7A:C5:A2:55:2C:92:A3:79:CE:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:1c:f0:f7:1d:4c:ee:26:41:73:75:1e:dc:d7:78:dd:6e:30:
6d:51:9a:d2:60:23:b7:a3:ce:76:5a:63:87:46:c4:e8:76:a7:
86:c0:59:8f:d1:62:0d:c0:e2:e6:86:36:80:bd:c0:b5:96:42:
99:99:a9:69:ba:2c:d3:c7:d0:6d:39:5d:d4:7d:72:fd:4e:2b:
b3:3c:cb:a6:10:0f:e8:00:bc:73:ff:4a:e3:76:be:5e:f5:31:
1c:bc:a1:6d:14:40:cb:c0:1a:66:df:60:76:9f:f0:75:2b:71:
56:26:f4:fc:1e:35:2c:0c:8f:01:e2:9a:c4:0d:e2:30:66:9a:
c0:f4:14:5e:7e:cb:62:af:a3:52:d4:11:2d:06:cc:3f:0f:c4:
a8:b8:7b:a1:68:7d:e9:57:ad:43:54:51:93:13:4a:c3:31:59:
2e:68:b5:af:9b:5b:33:5c:e4:df:02:78:41:36:e4:68:31:f6:
8d:7d:8c:a2:a1:b1:c1:1e:4c:ae:bb:e8:77:1d:a4:89:7b:43:
6d:01:41:42:47:2e:05:22:96:0a:b8:bf:c3:bf:52:d1:5a:6e:
e2:3f:e3:26:dc:50:d6:f8:b0:29:9a:be:8f:e1:1a:a8:6b:b9:
f0:39:35:d5:4c:a0:5c:70:88:9b:2a:57:15:02:6a:25:05:be:
17:dc:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:52 2025 by rpki-client