Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier: +vs4fc/mZl9lcI2JO8RmJBtG5ogCOiRp8FNlj/bMbhk=
Subject key identifier: F7:0C:D1:08:CC:EB:95:AD:4D:88:07:E5:B8:13:96:25:D5:CD:2C:40
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial: 019855695068F83D76DB1C29F3FF2AD4C85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 09:00:21 +0000
Manifest this update: Tue 29 Jul 2025 09:00:21 +0000
Manifest next update: Wed 30 Jul 2025 09:00:21 +0000
Files and hashes: 1: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: lyG1UqDxHAFdvz210ZVtSABMR/wQmWn+iD4c4jeRTmo=)
2: rtw5EuFYH3ySq0jw3-ZmGwFMoqo.roa (hash: Ii5lxajvlSV2gkqSCAYWVLgdyHye7gIbfTFfAGtSUlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:50:68:f8:3d:76:db:1c:29:f3:ff:2a:d4:c8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Validity
Not Before: Jul 29 09:00:21 2025 GMT
Not After : Jul 30 09:00:21 2025 GMT
Subject: CN=f70cd108cceb95ad4d8807e5b8139625d5cd2c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:6c:e5:5a:b4:c1:e6:7c:fd:5a:d1:f5:68:
ee:70:8d:1c:a1:d0:79:b1:fc:43:38:10:28:63:06:
f0:51:b2:6d:12:10:07:85:ba:1d:8e:34:95:1c:91:
43:ee:3b:05:c3:b8:00:64:52:f5:4c:7d:27:40:69:
9f:32:08:6d:4b:f3:42:37:24:e0:8f:e8:18:53:2a:
35:50:8b:17:5c:f3:7d:af:4e:db:18:7f:b4:54:97:
b0:41:b8:71:eb:d8:fc:c5:3d:23:75:05:31:f8:8d:
ea:bb:c5:a8:4a:1e:04:c6:cf:0c:fe:2a:25:76:59:
f3:47:0a:42:f5:62:0c:4e:ef:a4:d0:23:07:f7:a6:
54:7e:f1:43:c1:c3:8c:d6:e3:79:7a:02:57:a7:1d:
e6:cc:ef:af:b2:87:97:cf:af:4e:03:1a:3c:ca:d3:
35:b8:88:c7:9b:77:40:b6:8b:13:39:01:39:08:53:
be:35:c9:fa:62:e8:d9:49:70:b0:83:36:8f:a0:e1:
92:30:71:5b:f6:cc:5b:3a:3c:0e:10:f3:63:e5:44:
e0:e3:62:71:13:c5:e1:19:35:8d:0a:4b:be:08:2b:
cd:89:9a:e5:37:e8:21:90:2d:d7:6a:fa:0d:e4:54:
08:d4:ee:7d:5d:1d:5b:fb:4f:17:d2:67:10:52:15:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0C:D1:08:CC:EB:95:AD:4D:88:07:E5:B8:13:96:25:D5:CD:2C:40
X509v3 Authority Key Identifier:
keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ae:eb:a1:c0:ad:08:a3:58:68:eb:ab:cc:cb:4c:16:18:97:
c0:ec:cd:3f:b9:fc:37:45:b6:c2:9f:45:18:3c:71:e0:9b:22:
d9:3f:58:43:47:fe:d7:24:3e:6c:12:31:e8:93:68:9d:2d:44:
d7:27:69:e2:1c:dd:f0:cc:b3:5e:5e:c9:89:df:43:3b:a7:50:
b5:68:05:4b:75:6c:73:4f:50:16:67:92:dd:a6:73:9e:37:82:
f2:9c:5e:9e:f4:27:05:48:35:e1:b1:c3:3e:79:95:80:7f:45:
f2:55:b9:c8:c2:52:d9:5b:6e:72:48:af:e2:29:47:9b:66:da:
cc:81:d2:c1:21:b0:d4:dd:d1:0a:eb:2b:3f:23:d7:5d:21:f0:
e3:3c:8a:89:26:18:51:de:39:15:33:20:03:80:36:c8:a8:dc:
83:8b:80:63:10:36:c9:7f:e1:a4:32:29:4c:6f:47:00:cb:58:
af:f6:10:98:6d:9e:7c:38:36:5d:20:6f:4a:33:62:86:23:9f:
78:6a:08:54:25:eb:2b:23:aa:3e:a8:53:07:06:44:a6:34:5c:
d3:1f:6a:7b:20:1e:06:c4:78:35:0b:23:65:bf:b7:db:1d:5b:
ab:c6:ab:af:b1:5e:11:58:40:7c:ce:5a:52:a4:b2:16:92:9e:
8f:a7:e4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:45:33 2025 by rpki-client