Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: kownauo30p8Bksq6EYRIjpgf0uzN6xM0eUqMe0yftPo=
Subject key identifier: 59:1A:9B:76:42:FC:A7:3B:FF:68:FA:23:D4:FC:FB:ED:6F:B2:DF:23
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 01984BF88544A1B9A093DEC48E628EF289F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1596
Signing time: Sun 27 Jul 2025 13:00:34 +0000
Manifest this update: Sun 27 Jul 2025 13:00:34 +0000
Manifest next update: Mon 28 Jul 2025 13:00:34 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: DRdEgA5C8swYv5cj00NTcG+24yuHaQ086wyLyGquvT8=)
2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:85:44:a1:b9:a0:93:de:c4:8e:62:8e:f2:89:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Jul 27 13:00:34 2025 GMT
Not After : Jul 28 13:00:34 2025 GMT
Subject: CN=591a9b7642fca73bff68fa23d4fcfbed6fb2df23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:d8:7c:fc:02:06:c5:9b:7f:91:9f:f2:7a:
4c:29:be:92:be:2b:17:5a:9a:ce:51:28:3e:c5:09:
e3:ef:6c:5f:22:39:f1:39:c8:d2:40:7c:ce:69:5f:
61:66:9a:dd:da:81:5e:b7:05:f6:3a:5a:13:e1:05:
39:af:10:39:cd:20:f9:8a:74:c0:f4:28:7f:f3:18:
bf:f4:02:d9:1f:2c:70:bc:a7:08:eb:69:f0:33:5e:
6e:8d:fa:81:7a:f4:a8:c4:3b:d7:b5:4d:a9:8f:db:
ce:25:98:de:a4:f6:7c:66:d2:f5:19:ee:d3:87:60:
a0:a1:89:26:a3:87:86:16:d1:01:fa:da:28:95:d3:
d3:fa:ad:56:63:d9:b6:33:57:8b:29:b5:35:30:89:
7f:79:86:84:68:43:d4:86:0f:e1:90:47:93:cc:ea:
52:76:d8:4c:23:7c:9b:32:92:78:1e:3a:79:90:22:
97:92:11:62:ff:4e:92:1e:13:1a:ce:a8:70:76:be:
d2:70:af:a6:c9:0d:9d:36:4e:5f:29:02:59:8a:32:
43:f8:ff:79:1b:ad:e2:b5:ee:87:86:bc:a0:39:1e:
bd:47:4a:4a:5f:4a:59:32:22:7b:98:7a:06:de:62:
56:25:b8:ec:9b:82:7c:43:09:0c:61:94:89:ac:cd:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:9B:76:42:FC:A7:3B:FF:68:FA:23:D4:FC:FB:ED:6F:B2:DF:23
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:49:95:94:3b:c8:79:1e:e7:53:74:c2:74:f9:29:a3:92:7e:
c1:5b:f8:62:71:e5:48:00:7a:3e:e7:73:60:d7:90:88:a8:51:
8a:33:be:90:b8:86:9c:a8:fb:a4:d2:25:94:db:6e:18:34:e7:
1f:3a:b0:35:19:07:52:33:5d:a6:3c:f8:9e:35:ac:a5:8e:40:
1a:ba:a2:19:8c:8a:50:78:b2:ca:1d:fe:72:2e:aa:3b:e2:40:
2c:aa:70:af:b3:15:7f:41:1c:eb:a4:ed:a6:52:2b:7b:e5:c0:
c3:e0:01:3b:24:75:7b:be:5e:76:ad:d3:8c:6b:0a:58:e6:f3:
b5:40:e1:58:5d:b5:26:4f:de:b0:ef:03:d9:c9:fd:81:4d:fd:
eb:ce:0d:d3:64:6e:4e:b5:11:b6:6f:e0:ff:19:e4:eb:b5:1d:
26:70:19:90:27:73:e0:96:17:ba:31:28:f7:6d:2a:48:1f:6e:
9e:cc:b2:d3:a5:2d:f0:54:89:bb:3d:05:f9:61:94:a6:1b:7e:
c6:7c:90:80:2f:1c:9d:73:4a:54:6e:fc:26:d1:77:e1:b4:11:
1a:e4:44:cb:89:e4:f9:da:72:6e:a4:a6:4f:a7:0a:ef:6a:56:
d4:fb:3e:e2:16:0b:c4:da:f6:32:8c:66:4b:68:3e:a4:fa:86:
86:ae:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:08:30 2025 by rpki-client