Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: DF/SsXL1cuh6WG3357tYytLq5khhxlLsKkdT8a1qkBY=
Subject key identifier: D4:26:51:C6:D6:54:A4:EB:EF:46:2D:D7:4A:FA:E3:DF:72:19:32:DF
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 019748C2E29FA29255D5608C8C6787FC0D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 0963
Signing time: Sat 07 Jun 2025 05:00:20 +0000
Manifest this update: Sat 07 Jun 2025 05:00:20 +0000
Manifest next update: Sun 08 Jun 2025 05:00:20 +0000
Files and hashes: 1: Oc5Exwy6ZGrRe3cJEpFcoAoZ8LY.roa (hash: GCIh2gF/E3yjQMebTbwaKQU3aGp4E0TQ+qUjMjQObt4=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: osMq+yf2N/jpjTPQQZCKXQqeozgVvS3PHiBm9Ckq6TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:e2:9f:a2:92:55:d5:60:8c:8c:67:87:fc:0d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Jun 7 05:00:20 2025 GMT
Not After : Jun 8 05:00:20 2025 GMT
Subject: CN=d42651c6d654a4ebef462dd74afae3df721932df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:f3:aa:91:b0:b8:53:6c:99:4f:c2:77:37:
6e:9f:9d:e6:75:71:bb:14:6f:04:d5:62:58:ef:8b:
f4:82:b5:ef:f6:6b:eb:df:06:df:5a:84:27:1f:72:
24:1f:2d:c9:40:60:34:99:35:c6:d1:32:28:fc:cf:
f0:ce:d9:d4:d5:6c:a5:42:ec:3b:a6:3a:d7:92:25:
e0:66:c3:a6:a9:a4:7c:3f:ed:64:85:4d:10:df:55:
10:86:fe:d5:0f:5a:3f:e1:54:57:19:63:1d:ba:96:
ce:bd:f0:ea:84:5b:39:8f:31:84:9f:1b:ae:87:53:
bc:c5:ea:d0:eb:11:bb:d3:6f:68:ed:29:da:62:7f:
e2:0a:b1:35:bb:7f:73:72:bc:6e:62:ee:44:ff:ad:
a0:a7:40:fe:ab:ab:b0:83:91:64:91:c6:3a:5c:d0:
f0:f2:82:0e:9c:3a:87:21:36:7c:b4:93:8e:9a:0d:
4b:94:31:e1:4d:46:c3:fe:94:64:14:dc:5b:87:7a:
23:7f:6e:7e:45:c4:c3:7a:b0:42:f3:32:5d:4d:0c:
09:8c:b9:45:48:fa:d9:74:1d:0a:99:d1:ce:c9:d8:
b5:90:5c:9a:35:71:0a:c2:cc:fb:9a:70:0d:2e:9d:
49:a8:86:c6:b1:8a:1c:1c:9d:ad:71:0d:a7:6c:1b:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:26:51:C6:D6:54:A4:EB:EF:46:2D:D7:4A:FA:E3:DF:72:19:32:DF
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2a:c9:3e:e4:96:ca:33:d1:ad:3a:46:e1:38:35:c9:df:c5:
8b:eb:b1:7a:cc:6c:78:9c:a6:ca:6e:a1:95:9c:c6:9e:e2:5b:
96:f6:a1:d3:59:dc:cb:12:f6:50:2e:40:e5:e3:0b:91:ad:e9:
57:98:c5:ff:4e:e3:e7:56:94:f0:a3:b0:25:cb:24:a8:9d:31:
fc:f9:3a:67:c6:6c:ab:12:9b:f6:8b:ee:8f:4b:21:b8:b8:aa:
f7:06:10:c2:b7:c4:c5:f1:ca:72:7c:21:b4:d4:77:1c:85:0e:
bb:89:3b:81:9a:b5:27:94:3b:cb:06:46:53:bb:c6:6a:42:4d:
c8:73:6f:2a:fb:5d:10:0b:0a:cc:7d:8f:62:55:f4:72:18:f3:
1e:eb:d3:68:61:a4:d0:81:ee:9b:5b:cb:02:42:6b:0a:01:83:
87:ba:56:3f:6f:76:1d:48:fe:e2:6a:b3:6a:3d:4f:3e:65:23:
fd:4d:33:5d:a0:a7:02:00:95:a1:31:5b:5e:95:b9:47:85:b9:
b8:ec:90:86:43:32:aa:83:94:cf:18:20:a3:17:fb:e6:c1:a7:
27:41:73:b5:9a:05:68:d8:1d:ea:e0:6c:a4:be:e2:aa:69:82:
94:06:d8:4d:6c:2b:17:15:91:fa:74:34:e1:46:f8:1b:cc:70:
21:ed:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:11 2025 by rpki-client