Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
File: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft (raw, json)
Hash identifier: AuqFB5XnlBRflXHXTEgvveW0PvqypLMiSGZ1PC1S+tU=
Subject key identifier: 46:A4:0D:04:02:64:C5:7E:68:0C:B3:B5:35:6A:56:17:42:36:D1:55
Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Certificate serial: 01984A77CD218F70409A3F58DB6189918B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 06:00:21 +0000
Manifest this update: Sun 27 Jul 2025 06:00:21 +0000
Manifest next update: Mon 28 Jul 2025 06:00:21 +0000
Files and hashes: 1: MChEll1heVmbFidBBJvsHOrl4fE.roa (hash: ARoQGxRNkrRdwVI3hmAp61vYLz+zRk9Xivm5xOWKmgg=)
2: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl (hash: WgnaJFQ6iclkDFMQHhr2tiANVZpVbQleCQpS4jTZm/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:cd:21:8f:70:40:9a:3f:58:db:61:89:91:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Validity
Not Before: Jul 27 06:00:21 2025 GMT
Not After : Jul 28 06:00:21 2025 GMT
Subject: CN=46a40d040264c57e680cb3b5356a56174236d155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:86:95:43:e3:f0:ec:5e:33:65:40:b7:f8:
9d:e7:73:15:c9:92:86:01:6e:a8:95:ce:31:36:f8:
9f:e2:af:1e:e6:78:85:ee:d8:f6:8a:ae:31:68:41:
6b:c1:bd:cc:e4:07:a2:f7:e1:75:f7:60:f3:68:29:
02:ac:54:33:24:ce:5c:8f:71:1c:7a:f5:3c:c6:7b:
ba:06:d8:b5:ce:c6:8e:fb:82:7d:a8:0e:ad:36:b9:
ce:ae:eb:21:19:cc:7e:8f:5c:fa:4d:12:c4:85:ca:
cf:8d:c8:48:98:90:99:5e:72:ab:a3:71:da:02:80:
7c:fa:8b:3d:aa:2b:f3:df:34:9b:a2:a4:5d:4e:ec:
40:4f:23:bb:14:7f:9f:65:fd:5b:2c:ae:6a:09:42:
da:52:8c:5c:3b:c7:b1:24:d8:fa:85:df:0d:4d:9f:
bb:d1:80:22:0a:74:60:7b:7b:33:ec:33:5a:e8:59:
c4:bc:8c:64:65:80:2f:2e:95:17:de:63:57:aa:53:
4e:52:cf:99:ff:dd:69:77:ec:49:ae:9d:d3:5b:b2:
32:49:e7:4e:5e:6c:66:4d:df:67:db:d4:42:55:22:
3a:14:4b:a1:0f:fd:1b:2c:cd:ba:16:29:ac:d5:bb:
f6:8e:7b:3d:3e:ad:71:e2:b9:52:c3:df:2f:6d:e5:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A4:0D:04:02:64:C5:7E:68:0C:B3:B5:35:6A:56:17:42:36:D1:55
X509v3 Authority Key Identifier:
keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bc:2d:ed:51:b8:87:43:fd:17:04:74:a8:a3:a1:1d:2b:ac:
83:83:a7:d5:3e:6f:41:d1:2c:da:81:10:9b:53:bf:00:de:93:
47:d6:25:e4:21:2f:23:be:58:df:7d:4c:88:b8:ae:25:e1:2e:
90:ed:ad:4b:3e:92:b9:10:c7:0c:29:47:06:70:82:d8:86:62:
99:5a:cc:ef:12:24:60:75:27:82:c6:5e:5d:c1:e9:28:8d:9d:
78:cb:4c:d0:04:9a:c9:f7:42:7f:73:ef:21:08:01:26:0c:ca:
c6:60:e6:d2:d6:1a:ec:4d:fa:b5:b9:b8:40:6b:95:61:d2:1e:
93:d3:01:c4:df:e7:39:96:1c:cc:e2:f8:7d:f8:db:50:3e:13:
8f:5c:3c:99:f8:30:44:21:89:7b:7f:40:84:45:3f:3e:0d:72:
e8:88:92:4c:0e:c8:16:aa:5c:5e:51:d7:b5:60:f5:f2:e2:bd:
82:d8:f1:15:40:d0:f8:72:a8:78:ac:4a:b5:9e:d2:06:cc:07:
09:1b:77:92:ca:13:35:96:87:1f:e6:fa:a1:0c:48:22:ac:d9:
f9:f5:64:e6:36:05:4d:23:a0:90:41:c3:e3:9c:33:ea:94:62:
59:db:69:09:5b:4b:1c:24:93:85:2b:87:1e:34:b9:e3:3b:67:
bb:e7:cd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:18:18 2025 by rpki-client