
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: LG1K0HpPXPz9D85G689LF8+c+kYsiIi7LnVpqV27D7k=
Subject key identifier: C0:E8:E7:59:E5:BD:D6:A9:78:1C:CA:D9:AC:D3:3E:ED:10:6A:47:F2
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 0198665E3531E421B8613F5BB66C01FC42D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 1610
Signing time: Fri 01 Aug 2025 16:01:46 +0000
Manifest this update: Fri 01 Aug 2025 16:01:46 +0000
Manifest next update: Sat 02 Aug 2025 16:01:46 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: uc80Gp7JcIh9/2v+CgFqvqKK63G3c1Forzjq6BDlP8w=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:5e:35:31:e4:21:b8:61:3f:5b:b6:6c:01:fc:42:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Aug 1 16:01:46 2025 GMT
Not After : Aug 2 16:01:46 2025 GMT
Subject: CN=c0e8e759e5bdd6a9781ccad9acd33eed106a47f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:a5:a1:17:a1:3d:af:28:99:f9:bf:d0:b3:
5d:0a:fa:86:7d:88:29:9e:e4:37:6a:91:51:df:ec:
d4:0d:52:b5:f3:30:bd:b9:68:42:ac:39:11:1c:6a:
00:57:5e:20:1b:de:ec:59:9b:36:e7:19:39:41:4b:
d6:01:27:0c:5c:e0:27:da:41:88:e4:14:36:71:84:
ab:a2:b0:06:67:4a:7f:08:d5:ce:36:f5:6e:a0:c8:
d5:01:4e:77:55:d4:7c:61:b2:24:55:e3:7a:79:05:
0b:f0:e0:8d:03:60:1e:e0:cd:21:62:40:50:24:b4:
24:23:10:4c:54:d2:1e:22:33:7a:4d:1c:76:19:f9:
9e:83:dc:27:38:a1:61:78:79:59:65:5f:f5:39:51:
28:ed:68:df:8f:bf:dc:52:80:e0:d7:cf:97:d6:2b:
74:ab:48:ed:9d:08:18:d0:0c:5b:02:57:0f:7f:ed:
f8:a4:f7:9a:f9:f1:da:ca:3f:35:26:c8:a3:78:a3:
fe:90:e7:13:9f:c1:d7:70:63:80:3b:61:83:49:7d:
1a:41:03:3c:31:b5:73:66:dd:6d:d6:53:80:1d:90:
71:e8:46:6e:15:5f:9b:38:5f:75:cd:b2:3e:d1:fc:
be:90:8d:9c:a0:f3:34:cc:59:77:30:cc:ca:72:5c:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E8:E7:59:E5:BD:D6:A9:78:1C:CA:D9:AC:D3:3E:ED:10:6A:47:F2
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4f:41:4f:7a:82:7f:b7:db:c0:3d:26:f0:af:8a:91:51:37:
d4:97:aa:ed:5b:76:5b:db:88:91:bd:29:f3:82:1f:e8:d2:bc:
37:dc:25:48:9c:59:57:78:44:29:f1:84:68:8b:19:a9:5b:53:
e5:d1:c7:62:b7:80:65:5d:09:87:7c:4b:8e:c3:7d:19:fe:4a:
89:4f:3e:16:ec:b8:3e:6b:4c:26:cd:88:85:dc:62:64:b7:78:
e6:6d:fc:e4:38:91:ad:d9:1c:1a:a5:1a:e4:a4:0f:68:d5:7d:
59:12:41:da:4a:fc:43:11:a6:27:60:94:2e:ac:04:06:7a:de:
ac:73:de:00:bc:5a:b7:ea:d4:36:5b:1d:48:9c:b3:1d:e2:8a:
2d:3e:33:81:b6:1f:9c:aa:85:4f:48:3e:23:09:e1:d9:e7:7c:
e9:82:68:65:c7:3b:1b:fc:5f:a8:ec:37:e5:c4:37:50:0c:ac:
ed:6b:bb:f9:28:eb:05:84:46:42:23:da:e3:37:c1:8c:3d:db:
97:f8:cb:b1:94:aa:d6:81:fc:82:02:6d:94:c7:04:9e:23:88:
b9:cd:cf:77:d3:30:c6:df:0f:80:02:c7:df:cc:35:c5:3a:10:
e0:de:51:e9:6e:e0:f2:06:ba:91:2f:e8:0c:4c:b8:71:20:80:
12:f6:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:19 2025 by rpki-client