Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
File: _OTzlnKb9HjmNlSYIfb2lw2JP1I.mft (raw, json)
Hash identifier: POmYPiYBjcu4uK4EK/IjprVVSnRHb5NxtOHzdruOZe8=
Subject key identifier: 9D:A4:6B:57:E6:3C:E7:74:49:67:F9:B5:38:2E:C8:48:9F:B7:34:EC
Authority key identifier: FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
Certificate issuer: /CN=fce4f396729bf478e636549821f6f6970d893f52
Certificate serial: 01984AE5D391F99B5F06822B2B12D37F8E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:32 +0000
Manifest this update: Sun 27 Jul 2025 08:00:32 +0000
Manifest next update: Mon 28 Jul 2025 08:00:32 +0000
Files and hashes: 1: _OTzlnKb9HjmNlSYIfb2lw2JP1I.crl (hash: 6y4mzZagz6hsmAbm8ZVHWnYegp7vw1e2GteWobT03sI=)
2: adNqeNQUFWI4IAHxy1r153UdECA.roa (hash: xLvUeb8ak+yii4A1TZl7dHrog2mgx9j4/AxydjM8K8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:d3:91:f9:9b:5f:06:82:2b:2b:12:d3:7f:8e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce4f396729bf478e636549821f6f6970d893f52
Validity
Not Before: Jul 27 08:00:32 2025 GMT
Not After : Jul 28 08:00:32 2025 GMT
Subject: CN=9da46b57e63ce7744967f9b5382ec8489fb734ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:81:a8:a5:a4:df:20:e0:42:f1:45:94:81:4e:
7e:86:d7:16:0c:36:08:f2:7a:67:e4:23:e2:2c:3d:
c1:73:b5:5c:d2:37:66:3c:b5:64:2c:09:8b:6c:7e:
90:58:a1:cb:b9:99:48:29:d8:be:f5:19:9f:27:f8:
d5:c3:1d:6d:e6:29:80:83:ed:ee:f6:b4:b4:f0:95:
84:40:c8:8d:25:18:b8:02:a1:45:87:85:6f:fe:71:
34:83:82:bc:35:78:c7:a1:dd:3b:2c:c0:a7:d8:53:
23:64:60:2f:f4:12:53:33:58:56:58:e7:19:9c:b2:
59:0c:b0:b7:d0:89:18:3e:f5:41:5e:7b:70:94:fb:
f2:c7:d3:e2:73:dd:0d:95:af:4e:b2:f5:1e:fb:5e:
bc:67:52:96:23:1b:f9:e2:03:42:bb:f1:20:3b:b5:
30:0f:6e:d5:b9:e9:cd:b3:96:95:4f:32:d4:45:b2:
b5:3d:e1:72:41:4b:ce:26:04:eb:d7:4b:53:f0:f4:
2b:af:87:00:0f:07:18:86:ad:c3:81:ac:c8:b8:cd:
3a:ca:66:39:f5:5c:65:8c:c8:89:21:8d:e5:e7:f0:
05:10:66:cd:54:1c:75:ab:c3:1c:5a:35:b2:58:9a:
0c:92:de:44:90:e1:fc:70:0b:c7:d3:58:e6:9e:ec:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:6B:57:E6:3C:E7:74:49:67:F9:B5:38:2E:C8:48:9F:B7:34:EC
X509v3 Authority Key Identifier:
keyid:FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a4:32:84:a5:b0:68:ec:da:c2:4b:81:5b:10:1e:84:a9:7b:
39:c7:d8:27:63:8b:05:c2:36:66:93:d7:2d:73:3e:70:ae:2b:
66:2a:5d:28:81:d2:22:65:72:18:5d:9e:19:8d:c7:7c:98:c3:
cd:a2:24:1c:a6:3b:d0:d2:6f:8a:1b:4f:bd:62:7d:0d:19:f0:
30:b1:89:4d:8c:b2:b0:76:ca:3a:ea:60:dd:82:85:b9:b0:8f:
e7:b9:13:7a:7c:2f:c7:ae:b6:89:85:31:94:64:b5:20:6c:1e:
0f:f5:49:e2:4d:a5:ce:59:d0:20:94:33:7b:31:e5:7a:e3:15:
21:bc:f3:4f:70:31:6a:c6:3d:3d:df:58:58:43:dd:9f:95:cc:
99:f9:46:0f:75:71:c1:b0:a7:9b:55:78:fb:30:69:1c:a7:df:
62:d4:a1:32:7a:cd:88:15:32:38:bc:83:03:2e:5a:98:16:12:
28:d2:11:52:38:38:4c:e2:2a:3f:e2:be:f6:18:0c:cd:cb:de:
20:0e:ab:10:a5:9d:34:a3:61:90:29:55:26:b7:17:ee:38:80:
a6:0f:fd:db:61:c8:e4:b7:d3:af:54:0c:8b:b5:be:2a:95:61:
aa:b4:a9:df:7e:2d:54:c2:04:a5:f5:8e:3e:b4:78:b2:d4:70:
14:f2:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:21:27 2025 by rpki-client