Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: qro9Lwd9wLOw5ljYbGiqmxQlkDITKHjqjW/dlAP0WIQ=
Subject key identifier: 45:37:7E:9C:A4:6D:38:82:EA:80:FE:A0:93:A6:A2:19:94:B7:0B:D6
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 0198499C3FC683D7F62192194C7A73CF11E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 03C5
Signing time: Sun 27 Jul 2025 02:00:33 +0000
Manifest this update: Sun 27 Jul 2025 02:00:33 +0000
Manifest next update: Mon 28 Jul 2025 02:00:33 +0000
Files and hashes: 1: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: pnZ+WZzypld+86Udtkyxe1z8xPZpZkvLMB4LVoPMi30=)
2: XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa (hash: MHnaHZdpDHAywK5Gif3w+d5y+x0GzsWCN2jIZcL+Afc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:3f:c6:83:d7:f6:21:92:19:4c:7a:73:cf:11:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Jul 27 02:00:33 2025 GMT
Not After : Jul 28 02:00:33 2025 GMT
Subject: CN=45377e9ca46d3882ea80fea093a6a21994b70bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:00:0f:4b:87:99:11:0f:bb:0b:b1:b7:51:
57:80:1f:e8:92:3d:31:5d:75:61:18:be:f4:ac:7a:
05:79:3a:f1:6a:15:59:60:d5:3b:03:35:15:c3:d3:
8e:b2:3b:f7:34:fd:5b:35:98:e3:5f:ca:b8:bb:30:
de:6b:8d:2b:34:3a:9a:a3:0a:e8:37:8e:00:20:b8:
c1:39:ee:4f:76:e3:20:ec:87:6b:26:18:10:d6:08:
3b:94:22:d2:86:ac:70:93:d4:06:2b:b5:f4:2c:5c:
ff:44:f6:8d:77:fb:15:5b:25:78:e5:8b:b6:b6:18:
ec:48:95:3b:5a:8b:70:81:7d:a4:1b:87:3a:6d:31:
80:ca:d2:4f:b1:3a:1c:47:28:d2:3b:27:f6:73:34:
5e:f0:7b:61:ab:f3:d3:0f:85:35:83:b2:77:fd:81:
46:86:03:d5:4a:a7:8e:dd:82:4b:ab:c4:81:85:cd:
dc:64:12:77:e6:51:31:ec:0b:e5:a4:c8:1f:ac:f0:
e9:a5:4d:43:d4:92:42:a8:0f:64:3f:d4:e7:7c:db:
b6:40:b3:f8:8a:6d:2b:57:2e:70:5e:60:98:03:df:
17:73:70:e9:1d:c1:86:82:ae:fa:77:b9:d5:c3:57:
3b:87:6d:74:36:07:c9:4f:e2:e0:d1:29:e9:6d:54:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:7E:9C:A4:6D:38:82:EA:80:FE:A0:93:A6:A2:19:94:B7:0B:D6
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8a:6d:a1:99:3f:59:c0:76:79:95:f4:d6:2d:d3:39:71:28:
e8:50:3c:0c:ef:c2:1a:2b:18:8a:b1:8d:81:07:60:5e:7a:1b:
1e:50:5a:d1:67:c3:09:0e:b5:38:cf:ac:50:c6:55:97:ce:69:
ba:07:19:ff:2e:95:16:7e:cc:a0:80:b0:12:d7:18:1d:96:b1:
a5:29:d2:02:38:36:c0:48:20:80:e0:88:60:4d:ed:fb:ed:96:
f5:59:2c:a4:e6:ab:29:a2:5c:7a:8d:51:29:e7:2b:e8:94:80:
06:46:2e:71:b0:bc:45:fb:a8:f9:36:7f:d1:84:b3:fd:5f:92:
fb:31:dd:ac:3a:e3:51:6a:ce:f5:66:00:f8:0d:1d:c9:83:5f:
52:c9:97:72:e2:48:71:4a:7d:88:3d:93:64:42:67:ac:60:42:
cf:6f:42:f8:a9:c5:2e:ce:f9:e1:19:95:73:34:d5:3a:01:38:
ae:67:ef:3d:53:5e:dd:a4:aa:b1:b1:f1:75:4a:40:f1:cf:64:
d5:3a:b3:fb:58:b3:19:3c:4d:94:14:f0:ee:8c:e4:14:a5:bb:
c2:77:3f:75:f6:ac:49:e9:a3:95:9d:69:c5:a6:9f:a6:91:a7:
45:69:59:e0:91:6c:0c:ef:75:23:5e:97:a0:d1:88:31:62:7e:
89:33:d0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:54:42 2025 by rpki-client