Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File: OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier: nkm1uCzx5ChS60jZe7CkTK4uPB0SuBH6nfm0cxdtcfc=
Subject key identifier: 3C:78:4C:43:62:D2:DF:9E:F8:BA:22:7E:A8:71:D4:85:9D:FF:A4:26
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 0198315D173F52640E7AA748531389A4FAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number: 07AD
Signing time: Tue 22 Jul 2025 09:00:40 +0000
Manifest this update: Tue 22 Jul 2025 09:00:40 +0000
Manifest next update: Wed 23 Jul 2025 09:00:40 +0000
Files and hashes: 1: 1ZMKCjtoyUotW5zL6d-I3qOaSBE.roa (hash: 5gJp0s5iC22SH9q8M0EDrUjpQSDzsUFawVisJiKFG6A=)
2: 2DDfXUiH85YC1X3PgfdtyKVgjPw.roa (hash: IX38bNkkduAXN8SBzl133Uzin5uXQV9chMH9hhrcGco=)
3: 5O5OsM3NhBX9ufi05PLP13l29To.roa (hash: 3SSp0jqDRZlrWNGbYWPuIP2g5yvlTpjsrbIVea72fZ0=)
4: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: KTFtxCc8jwOtIgaSQS98xbFKUJCcmjwJ2X3VMUoYXo4=)
5: XAC3MTIDy2Wt50Hn1LPVCPZj6e0.roa (hash: Dwx9RqPqD8/O5XTxZSeNq9SNO+JNCNDt1UlVOS13grg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:5d:17:3f:52:64:0e:7a:a7:48:53:13:89:a4:fa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Jul 22 09:00:40 2025 GMT
Not After : Jul 23 09:00:40 2025 GMT
Subject: CN=3c784c4362d2df9ef8ba227ea871d4859dffa426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:8c:2a:62:16:20:30:b1:f9:6a:3e:1a:33:
68:1b:e9:01:b7:71:f9:57:a6:cf:30:a6:f1:ad:0f:
90:7d:8d:89:ca:6b:8d:05:c2:3b:b8:9c:d6:c9:6a:
03:9c:7a:98:59:fd:5b:2c:e2:6c:ed:11:93:ac:4c:
24:5b:24:5b:51:2a:54:6e:ed:71:0c:c5:8b:96:c4:
c6:1e:74:bf:59:3e:2c:d0:3a:59:9b:ae:d2:9b:dd:
e1:e6:9a:ef:4f:d9:08:0d:67:89:08:f4:03:b5:dc:
d0:fe:82:32:69:8e:85:f9:b2:36:62:60:21:c1:2b:
f5:45:d5:07:ee:c6:25:30:f1:ae:3e:55:9f:2f:fb:
46:fe:45:ca:b0:3b:55:9b:1b:a6:5e:a6:ec:05:d8:
d9:ca:d3:99:eb:c8:ce:a5:bc:39:ff:ce:ef:9f:bf:
b5:f4:4f:c0:27:8f:a7:78:dc:db:d6:91:c4:74:69:
45:cd:45:41:d0:1b:1c:c2:4a:cc:ac:e5:12:ed:6c:
64:8e:e6:d5:39:a7:6a:07:b4:33:ba:e8:a3:13:35:
0b:a3:cf:64:6e:a3:1f:1d:f7:14:55:04:9e:01:37:
93:32:a6:df:20:11:68:b6:7a:91:cf:a8:68:94:9d:
d4:93:ef:f0:11:c3:84:f5:be:8e:15:eb:c1:d2:bf:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:78:4C:43:62:D2:DF:9E:F8:BA:22:7E:A8:71:D4:85:9D:FF:A4:26
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ed:d8:0a:0e:cb:b3:13:7e:22:34:aa:38:97:4f:f2:a7:44:
3b:2a:31:28:2a:26:26:01:9d:b2:e4:24:6d:8f:20:57:45:2b:
71:06:8a:41:25:59:0c:8e:eb:a2:de:f1:49:66:7d:94:e2:1f:
bd:e4:d4:e7:6b:57:d3:b1:99:de:43:ae:7d:c8:15:7a:1d:dd:
fe:6b:5d:27:85:bf:18:94:c4:a2:16:de:a7:e4:57:72:c2:fd:
4c:b4:dd:7c:34:b6:92:5b:cf:44:8d:cc:c8:40:26:07:88:54:
c8:47:8c:94:f5:f0:39:ab:ed:c5:69:c8:f8:ed:5d:40:b0:78:
3a:b1:9c:17:ef:13:0a:84:03:c6:bd:f7:b5:f7:53:7b:69:ea:
83:d0:0a:5f:c4:49:b7:74:6b:bb:31:da:99:ed:cd:f0:ad:d7:
19:2f:ff:6f:09:50:8e:4a:63:dc:2a:3e:1f:8c:47:f8:32:7c:
90:47:e4:bd:0d:a0:ec:c5:3a:ac:45:7f:04:ae:d0:57:63:54:
0c:f5:9e:08:97:2c:2d:1f:a4:42:cc:4f:72:5b:ec:e3:a8:32:
37:fd:16:41:d6:9b:04:32:94:d0:5e:e1:ee:9d:63:29:ab:38:
b1:5e:86:a8:54:b0:d7:fd:f7:1d:d0:e1:aa:73:af:dd:76:67:
49:41:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:59 2025 by rpki-client