Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: cgQmrbt2Xre7qJcBvx2BZaGBaojVx5WMunolBEeppj0=
Subject key identifier: 7B:00:25:7C:DF:ED:54:D8:40:35:35:DA:8C:22:44:D7:78:DD:3E:F7
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 01976DAB60DCB168CE126847C25904636BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 012B
Signing time: Sat 14 Jun 2025 09:00:37 +0000
Manifest this update: Sat 14 Jun 2025 09:00:37 +0000
Manifest next update: Sun 15 Jun 2025 09:00:37 +0000
Files and hashes: 1: NR0WsT059Uu9ocKkEY9pXlrin1E.roa (hash: VV0hNdxr41R7/bkmPoA35nvmhlKGJglGwfeyHr+U+LY=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: Pc3LZxIN2JCn31sJZslkgkmqMCj+1FauqnZNOlx9x1s=)
3: SEh_0GqoSaiRBqWseUujp9ajyxU.roa (hash: 4qBD/oh8RDMtbEgS97ZhV1TCABNjw7BvgNSejlDS+ZM=)
4: g6a9uq2KRc9wYONVhtFPPZGaBr4.roa (hash: Jcii24w5hELShXLMXhNP2/DuSUjwnJEfN84e/8CYORI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:60:dc:b1:68:ce:12:68:47:c2:59:04:63:6b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Jun 14 09:00:37 2025 GMT
Not After : Jun 15 09:00:37 2025 GMT
Subject: CN=7b00257cdfed54d8403535da8c2244d778dd3ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:2c:37:48:61:92:be:e4:ec:51:5c:7e:9c:
90:16:4c:7c:2b:48:c2:59:36:aa:79:cb:c9:33:42:
6a:04:e6:a0:f4:b7:aa:78:9f:1d:31:46:68:f9:60:
5d:3c:75:aa:a2:e2:63:8a:34:93:78:15:29:75:0c:
9b:3e:ab:16:93:9f:e4:e9:a3:8b:f1:80:19:ad:51:
d6:dc:7c:ae:47:b8:7d:e2:0d:7d:e0:c7:bd:b6:6a:
c1:70:d3:b7:e3:43:d6:fc:0d:a1:27:5d:f3:7c:05:
28:a6:6f:c2:ac:3a:f8:d6:ff:16:f7:0f:de:4d:7f:
70:36:9e:c4:07:30:54:83:a9:ed:a9:00:e5:89:e8:
be:17:3f:19:53:4c:ed:0a:6e:59:bc:9e:be:2e:79:
68:25:2b:b4:6e:35:8d:39:67:69:c5:db:80:b9:37:
6b:59:12:ac:57:0a:c6:f5:78:be:8d:2a:98:a3:a2:
2d:62:79:d2:16:aa:1b:92:1e:39:17:0a:35:63:df:
dc:9a:02:3f:e5:46:50:cb:63:7e:65:6a:16:6c:48:
26:fa:5b:7e:68:c3:3b:60:c7:db:de:33:68:01:4e:
56:f1:d5:62:59:be:c7:2d:96:9b:05:ab:93:05:99:
b0:6e:61:45:65:e4:75:8b:b4:ca:19:18:fa:8a:7e:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:00:25:7C:DF:ED:54:D8:40:35:35:DA:8C:22:44:D7:78:DD:3E:F7
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:81:96:20:4c:19:00:aa:38:04:86:f1:64:39:3a:7e:b1:d9:
80:67:fc:4c:bb:c5:1c:87:67:54:c5:7e:61:7e:69:b1:17:36:
df:76:73:f4:e2:77:b8:62:7a:28:e2:ed:f6:f4:60:a2:d4:4d:
d5:80:82:fc:02:1d:6b:21:56:c7:13:46:09:c1:62:56:31:03:
00:53:5b:4e:62:7f:48:43:d6:5c:a2:cb:c0:f4:92:85:f2:94:
fc:a7:cc:a5:8b:0f:7c:82:e4:3e:19:12:6c:0e:ea:44:1d:cb:
ac:74:9c:09:46:ee:90:af:6c:4c:e2:d9:74:5e:99:ca:d3:63:
59:f7:c7:b8:6f:7b:6f:23:b3:58:b7:a2:4d:c8:62:47:ec:f2:
96:77:c5:7e:41:e5:e4:de:4f:b3:7e:d3:2d:78:f2:ee:71:4a:
e6:af:25:1d:c9:cc:6d:6c:47:26:0f:71:e8:d8:38:31:69:bf:
d1:47:09:a2:c6:33:7d:45:37:bc:31:87:41:3d:a2:94:45:b6:
e7:9f:61:a9:b7:9f:2c:2f:74:97:7c:24:fc:0b:01:05:bb:89:
16:a7:8a:12:84:5d:14:8e:81:5d:47:f7:1e:ad:c0:3d:6c:64:
0e:d0:c9:6e:f0:f5:6a:af:a6:01:e9:0e:ff:d0:eb:6f:f6:d2:
1c:5c:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:28:23 2025 by rpki-client