Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: i27VG66XR61zCry3YP9DfvjLZuYTX9WUz+UFXKng86Q=
Subject key identifier: 40:8D:EE:31:7D:6A:59:1F:E6:8D:D3:37:A6:FE:96:4A:D8:DA:50:E0
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 01984A40F8CEC9C934C357AB4217BA407582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:00:28 +0000
Manifest this update: Sun 27 Jul 2025 05:00:28 +0000
Manifest next update: Mon 28 Jul 2025 05:00:28 +0000
Files and hashes: 1: cXzh2EByibI6pp16VOl9xphGioo.roa (hash: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: Z7VZPg0TE2wvjgy3C0bIu6GUaI57BhCOo2RhQPFRx70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f8:ce:c9:c9:34:c3:57:ab:42:17:ba:40:75:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Jul 27 05:00:28 2025 GMT
Not After : Jul 28 05:00:28 2025 GMT
Subject: CN=408dee317d6a591fe68dd337a6fe964ad8da50e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:03:1e:b6:1f:0f:26:fa:07:ae:8b:7c:5b:
c0:f2:bd:f3:ba:d2:09:8d:ed:0d:9b:8c:ed:f6:f5:
e9:a7:ed:c6:66:02:b0:99:1c:b1:64:65:d4:f8:65:
f6:63:96:2a:3a:3f:f1:0b:fa:f0:ff:b8:60:7c:71:
c6:a2:32:00:3f:56:5b:46:67:4c:04:3c:2f:4f:81:
ae:6f:49:ce:8e:33:18:ac:ec:61:87:b9:db:f0:10:
c9:a8:fe:95:20:2c:ce:b0:17:67:30:8e:f7:1e:eb:
c9:dc:e2:f0:9a:10:91:f6:60:2c:8a:56:08:bc:22:
f2:31:e1:0f:02:01:74:18:a2:0c:5b:9c:eb:a9:99:
52:c1:6c:99:53:81:84:e1:39:4c:62:c6:b2:eb:cd:
19:65:8b:1a:a7:ed:c6:a2:28:6e:a5:69:e8:47:69:
55:a5:1b:13:79:43:59:71:8f:3f:d4:a2:e4:eb:43:
c2:db:6a:4c:59:c0:26:fd:49:b1:18:f9:23:6f:ae:
76:f3:14:30:2e:5b:7d:7e:54:45:75:ad:f1:1a:1a:
ce:cd:eb:04:13:59:c9:90:1f:ce:b0:eb:f0:d8:2b:
5c:e7:9d:65:19:1a:f2:1d:67:8b:a3:42:cf:29:fd:
4b:c8:a1:95:4c:4d:45:c0:2d:72:03:4d:7e:d0:78:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:EE:31:7D:6A:59:1F:E6:8D:D3:37:A6:FE:96:4A:D8:DA:50:E0
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:de:57:8d:96:65:d6:a0:76:20:57:ab:b1:00:07:8a:4a:cd:
24:b1:d6:55:9f:8b:af:fd:49:31:92:0f:1f:47:a4:84:05:70:
e5:43:17:d0:fd:38:0e:f1:12:81:f8:14:2b:69:75:19:cb:03:
56:d0:ff:75:37:a3:c6:dd:83:d2:60:99:ea:6d:71:06:49:2c:
eb:d3:2d:de:6d:fc:e0:be:d3:3b:26:35:f5:df:38:43:06:0a:
43:b1:20:52:bf:22:fa:57:64:12:a1:10:a8:90:21:d1:b7:2b:
9d:d7:72:88:8f:cb:d5:8b:2b:c7:f6:a1:9c:88:f7:92:18:8b:
cd:ac:cb:0d:3a:6e:22:b2:5d:6d:27:e6:c5:a1:d5:ba:84:9b:
c6:19:b8:c1:42:54:8e:fe:e1:1f:82:18:29:70:22:17:89:75:
94:fd:28:bc:27:78:e8:74:90:e3:21:24:cb:82:84:75:ee:7c:
91:a7:87:88:84:c3:b3:31:ab:21:60:08:2e:cd:ea:60:72:fe:
20:4b:c8:09:67:c8:10:9e:ea:97:b8:c8:b1:89:00:97:ce:39:
c7:8b:73:d3:aa:cc:4d:dc:28:d8:cb:d6:90:99:54:4f:6c:05:
aa:a5:27:8a:a2:71:bc:24:7c:64:82:f8:24:b0:b7:63:16:a0:
5c:e9:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:27 2025 by rpki-client