Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft
File: OTioGkQSd0HZSaNVpH88tZk4mng.mft (raw, json)
Hash identifier: K2WGClvMHDwaKO93pgKoC4oO8pISG7zI9HLW5UUJN8Y=
Subject key identifier: A5:25:F6:DC:67:A1:A1:64:24:B2:1F:44:E4:4B:EC:A9:80:85:4D:A4
Authority key identifier: 39:38:A8:1A:44:12:77:41:D9:49:A3:55:A4:7F:3C:B5:99:38:9A:78
Certificate issuer: /CN=3938a81a44127741d949a355a47f3cb599389a78
Certificate serial: 019849D2D4EAA7C0DFA20D939A4B33073FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft
Manifest number: 1054
Signing time: Sun 27 Jul 2025 03:00:10 +0000
Manifest this update: Sun 27 Jul 2025 03:00:10 +0000
Manifest next update: Mon 28 Jul 2025 03:00:10 +0000
Files and hashes: 1: OTioGkQSd0HZSaNVpH88tZk4mng.crl (hash: nfx1u7Ubvyi4agWMFI0G/O35h4UH9lpx4kwS1o7Bb5M=)
2: SyALsZDSYtge1NmYRoKzwbP5Vv8.roa (hash: rjh76rxbo7HoAknp3g/P2hhQiBIAvMqHmifN8tVtg/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d4:ea:a7:c0:df:a2:0d:93:9a:4b:33:07:3f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a81a44127741d949a355a47f3cb599389a78
Validity
Not Before: Jul 27 03:00:10 2025 GMT
Not After : Jul 28 03:00:10 2025 GMT
Subject: CN=a525f6dc67a1a16424b21f44e44beca980854da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:d3:d5:4e:cf:13:ad:45:59:df:29:f0:14:
ed:6b:1a:f3:6c:b2:65:6b:e5:13:b9:a3:27:34:30:
db:0d:ea:de:8f:d0:0f:64:9a:3b:97:ab:a6:b3:37:
ea:fa:0d:56:00:69:e9:a3:c5:9a:16:54:64:67:32:
13:a1:b4:59:54:b8:fc:a4:99:0d:a1:91:10:d1:b6:
46:5f:ef:6b:cb:af:33:a0:be:5e:66:ad:db:3b:0b:
50:81:b2:dd:56:17:b2:2d:80:e4:b8:69:ca:47:04:
01:ce:5a:2c:28:2f:98:4a:88:bd:78:bb:e0:5e:ab:
0f:34:64:4a:d5:8b:af:27:67:f9:13:11:5a:64:b2:
48:0f:88:8b:bb:68:d5:f4:10:97:94:55:c9:6e:b9:
db:0f:e2:e9:49:98:f7:ba:6d:bc:74:e6:fb:f3:93:
b4:58:57:5e:aa:65:23:68:f5:c0:0d:31:50:75:ed:
f5:90:4e:1d:a4:b0:ae:cf:cd:27:19:bd:82:21:ae:
c1:43:93:cd:bd:d2:cf:7c:fc:6b:ba:43:1f:5a:25:
63:c2:31:8d:3f:29:5f:88:51:77:67:9e:e3:53:13:
a5:c0:a8:ab:60:dc:42:bd:31:a1:0c:e4:98:4e:f3:
4a:bd:43:c5:87:e3:20:9e:ab:22:5f:67:69:3c:8b:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:F6:DC:67:A1:A1:64:24:B2:1F:44:E4:4B:EC:A9:80:85:4D:A4
X509v3 Authority Key Identifier:
keyid:39:38:A8:1A:44:12:77:41:D9:49:A3:55:A4:7F:3C:B5:99:38:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cf:39:d1:7a:e6:bf:ed:42:40:50:dd:69:af:0d:5a:30:fb:
73:b3:8c:83:f4:9d:70:ed:30:36:fe:41:b3:d9:a0:a7:19:e6:
b1:08:9c:fb:58:79:42:fb:87:f5:3f:4d:30:08:5e:6a:70:22:
e0:fe:2a:6f:ff:5b:c7:e1:d7:1b:c4:a4:e1:54:4b:ad:32:28:
84:e4:f1:ad:20:dc:b8:bc:c8:85:fd:1e:d0:fc:73:db:a1:47:
4d:39:da:47:d3:71:e1:31:61:74:11:3d:f8:b1:d7:a8:d1:94:
0c:05:b4:11:02:90:d1:5e:49:4d:ed:25:6d:a0:09:2a:a8:05:
32:d1:9a:ff:35:77:e7:d5:b0:04:ef:59:c2:13:a3:8a:0c:f8:
12:fd:82:f9:7e:ed:6f:d6:47:ca:26:28:a6:12:09:99:6c:e6:
1a:cb:ab:ae:ba:f3:76:dd:5d:21:8a:65:68:ed:51:f4:1f:a9:
2d:63:18:76:8e:34:c3:bc:9b:28:6c:95:e8:91:a8:7d:84:48:
aa:6c:96:7a:1c:93:61:c9:10:cb:2b:c5:21:dd:9a:98:6f:ae:
d6:f3:18:4d:e5:a1:22:77:44:c6:47:7b:da:29:17:df:a7:f8:
25:8a:52:77:0e:e2:ed:31:d7:af:61:83:c5:57:91:c2:e2:5e:
2b:10:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:45 2025 by rpki-client