Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: hlqiFUQr73tWPnslofHGD6BiftIpKOEbe9d/UPzXk4o=
Subject key identifier: 2E:77:D0:E2:24:00:10:E1:2C:7E:71:A4:FC:97:1E:23:35:9A:F0:0B
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 01985268CDE124D4E1D9E4C149AD706B94F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 19:00:56 +0000
Manifest this update: Mon 28 Jul 2025 19:00:56 +0000
Manifest next update: Tue 29 Jul 2025 19:00:56 +0000
Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: yVBVZRUanMUVbfPnYfiR5OwWIxw17O1hzit75FHevWY=)
2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:cd:e1:24:d4:e1:d9:e4:c1:49:ad:70:6b:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Jul 28 19:00:56 2025 GMT
Not After : Jul 29 19:00:56 2025 GMT
Subject: CN=2e77d0e2240010e12c7e71a4fc971e23359af00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:21:32:aa:40:7b:ec:4d:c2:11:65:55:62:
8f:7e:39:bc:2a:e9:94:09:cf:db:ca:59:9f:86:1e:
13:47:3f:86:d8:09:cd:71:d2:5d:b7:3d:19:da:a4:
9b:e3:ce:84:22:06:d0:4b:bd:c9:74:b1:bd:fe:63:
6c:24:56:d8:15:d6:5d:9a:f9:5a:71:cd:1a:2b:a3:
9b:0b:f8:31:f3:82:aa:53:98:a0:ef:b8:bc:6c:bd:
fd:c3:21:40:fc:69:a3:f9:e4:d8:35:fb:5c:2a:17:
81:43:9e:e9:07:f6:e2:b6:df:e2:25:58:9a:7e:17:
d0:2d:a9:54:41:93:96:b6:b5:78:7e:2a:65:a3:d4:
40:ce:b0:96:dc:a8:62:10:1c:96:39:6b:86:17:88:
88:ed:dc:3c:87:1a:9c:9e:07:40:22:58:6a:21:4a:
b2:c6:e8:66:be:c5:e2:f9:b8:58:b5:ac:44:79:a4:
c9:2c:12:c2:f8:e1:1d:00:4e:cb:c2:05:95:8c:29:
e0:07:62:9c:b9:3c:c8:dc:4b:1d:ff:f7:4a:70:a4:
90:4a:57:18:03:fa:fb:c8:16:8c:b7:88:a4:b4:ba:
3d:a0:92:0f:cd:17:31:bd:48:d7:35:44:64:84:02:
0b:3b:82:8d:1e:37:49:49:bd:78:74:02:74:05:d0:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:77:D0:E2:24:00:10:E1:2C:7E:71:A4:FC:97:1E:23:35:9A:F0:0B
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ea:58:ca:3e:fd:4e:9f:cc:c1:9f:54:fb:5b:6d:2b:98:9b:
d5:c9:97:24:c3:e9:90:c0:9d:23:39:73:2e:c5:79:90:84:f9:
1e:83:71:21:90:2e:d0:d4:e3:7f:72:12:9c:94:bc:ee:8a:0c:
e3:1b:87:2d:3e:5e:fb:82:d9:be:5a:a4:88:a9:ff:4f:0a:0a:
6d:0b:2b:e3:b0:09:9e:58:08:f8:34:7f:ef:e7:9a:47:7d:71:
70:2f:b1:3a:8e:34:1a:22:ac:17:cd:fc:e5:82:1f:5c:88:2b:
79:a9:68:ca:63:5c:00:29:c6:63:90:20:9d:b4:da:c0:96:91:
bd:5c:e7:00:26:5a:6e:3f:8a:9e:7d:a3:e4:5a:03:ac:af:c2:
34:3f:4d:f0:41:9f:bc:53:63:e4:fb:f3:87:0b:79:e3:75:42:
59:9c:24:6f:c3:8c:04:a0:da:73:3b:44:c0:0e:17:73:d7:15:
c4:23:c2:74:9e:f4:de:e6:9c:06:b7:11:4c:f0:31:07:54:df:
d2:5d:dd:70:ea:6a:9a:e7:29:d1:40:6b:81:0b:42:48:6b:70:
16:e9:17:5b:26:8c:2a:86:f5:9e:9f:ae:3a:a2:a9:94:10:eb:
db:63:df:a6:3b:ef:78:10:b9:15:96:61:5a:ba:31:02:07:45:
fb:dc:f4:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSaM3hJNTh2eTBSa1wa5T3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm
YjEzZTgwHhcNMjUwNzI4MTkwMDU2WhcNMjUwNzI5MTkwMDU2WjAzMTEwLwYDVQQD
EygyZTc3ZDBlMjI0MDAxMGUxMmM3ZTcxYTRmYzk3MWUyMzM1OWFmMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWQhMqpAe+xNwhFlVWKPfjm8KumU
Cc/bylmfhh4TRz+G2AnNcdJdtz0Z2qSb486EIgbQS73JdLG9/mNsJFbYFdZdmvla
cc0aK6ObC/gx84KqU5ig77i8bL39wyFA/Gmj+eTYNftcKheBQ57pB/bitt/iJVia
fhfQLalUQZOWtrV4fiplo9RAzrCW3KhiEByWOWuGF4iI7dw8hxqcngdAIlhqIUqy
xuhmvsXi+bhYtaxEeaTJLBLC+OEdAE7LwgWVjCngB2KcuTzI3Esd//dKcKSQSlcY
A/r7yBaMt4iktLo9oJIPzRcxvUjXNURkhAILO4KNHjdJSb14dAJ0BdAOdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC530OIkABDhLH5xpPyXHiM1mvALMB8GA1UdIwQY
MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt
ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw
LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+pYyj79
Tp/MwZ9U+1ttK5ib1cmXJMPpkMCdIzlzLsV5kIT5HoNxIZAu0NTjf3ISnJS87ooM
4xuHLT5e+4LZvlqkiKn/TwoKbQsr47AJnlgI+DR/7+eaR31xcC+xOo40GiKsF838
5YIfXIgrealoymNcACnGY5AgnbTawJaRvVznACZabj+Knn2j5FoDrK/CND9N8EGf
vFNj5Pvzhwt543VCWZwkb8OMBKDacztEwA4Xc9cVxCPCdJ703uacBrcRTPAxB1Tf
0l3dcOpqmucp0UBrgQtCSGtwFukXWyaMKob1np+uOqKplBDr22PfpjvveBC5FZZh
WroxAgdF+9z06g==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:05:41 2025 by rpki-client