Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: b6jBCnvFHLhdiYa8QlB6wL+qHL/ArAye1v9zrj4kTYM=
Subject key identifier: 06:C4:74:12:36:E2:6C:90:64:5B:E8:50:DD:28:B9:22:42:88:68:3D
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 0197458BB680A82F6DC8CE275D908F27BDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 14:01:13 +0000
Manifest this update: Fri 06 Jun 2025 14:01:13 +0000
Manifest next update: Sat 07 Jun 2025 14:01:13 +0000
Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=)
2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=)
3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: 1F2QUH2aCHC124EBHj7KgUMfyP4MoaADCPbJVbSmakk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:b6:80:a8:2f:6d:c8:ce:27:5d:90:8f:27:bd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Jun 6 14:01:13 2025 GMT
Not After : Jun 7 14:01:13 2025 GMT
Subject: CN=06c4741236e26c90645be850dd28b9224288683d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:d0:45:a4:e7:d2:83:d6:1b:16:e5:39:8d:
bc:83:60:fd:01:0f:aa:38:93:bb:ca:84:46:e0:2d:
5a:5a:b7:ae:6e:ab:e5:a3:28:db:2c:09:58:83:45:
f3:21:23:f5:b2:c6:b6:31:ac:3a:94:c7:08:83:48:
59:37:b6:51:65:ec:b3:0f:09:62:5e:c4:fc:ec:3f:
a6:1d:e9:41:72:42:ce:c9:20:76:2c:d7:fa:85:84:
e2:f2:89:8a:c4:71:65:55:4b:12:a3:71:9e:5f:ee:
31:67:e5:a0:91:d3:bc:bf:f4:a5:96:0e:00:78:6d:
50:2d:8f:9c:73:81:04:6e:c6:0b:29:cf:56:19:a8:
de:02:e9:7c:2c:a4:af:9f:eb:d1:07:d7:c2:27:3f:
97:2b:9a:4c:52:7e:a7:f2:ae:a6:83:4e:ad:68:cf:
43:b4:62:68:e9:b3:0b:e5:d2:9e:4a:4e:c2:e3:81:
54:67:a4:08:c6:75:e2:24:45:06:0c:da:07:90:87:
73:d5:b4:97:6c:32:6c:b8:48:ec:92:89:8d:5c:e7:
a9:99:e6:99:c4:93:43:e9:a7:84:d2:84:41:44:bd:
d4:a2:73:3f:cc:19:3a:cd:7f:3d:9d:54:d6:4a:40:
c0:9e:27:55:96:67:53:1d:fc:e9:e0:2d:aa:75:3a:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C4:74:12:36:E2:6C:90:64:5B:E8:50:DD:28:B9:22:42:88:68:3D
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c1:08:57:5b:2b:91:47:11:74:92:76:62:17:82:f9:60:00:
3d:04:83:d2:5b:ff:86:08:0b:47:89:c3:b9:67:0e:37:22:88:
9a:dc:14:be:ca:ff:03:82:2c:c8:5a:77:f9:2f:5b:8e:a4:04:
d5:f6:cb:33:f4:87:c8:9e:7c:c7:74:44:8c:98:d7:de:46:fa:
dd:ee:4a:71:51:c1:9e:6e:a0:3c:52:31:9c:81:f6:bb:56:e0:
24:67:70:4c:c9:4f:7d:16:7f:31:0a:52:99:df:88:a6:b4:1e:
cc:1f:01:41:8c:e3:2c:52:b3:02:b1:3a:98:be:10:47:a4:74:
ab:eb:e4:99:d4:32:a1:21:64:2d:fa:2e:3e:af:ea:d4:e1:f4:
30:9b:a7:21:df:6d:8b:27:da:9c:3d:c8:74:8c:99:3f:a1:07:
30:a8:78:95:c0:46:08:7e:a2:fb:55:92:64:75:3e:e4:0e:6a:
ef:f8:32:10:a6:e3:68:3d:1f:29:79:b8:93:c8:93:3b:e4:ef:
d7:25:0f:9b:26:ac:86:d6:b3:8e:5c:35:56:6a:f3:72:3c:5d:
43:39:32:2e:05:da:12:33:38:c3:3c:fc:0e:01:67:9c:84:f3:
fc:b9:76:54:4e:68:83:26:13:ad:84:a0:22:40:6a:c6:21:47:
ba:b5:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:45:16 2025 by rpki-client