Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: W1K2g9OD68jt43phCksqgdSPoBPUTZeOBJj3thYtyTw=
Subject key identifier: 74:F8:C1:82:5B:E8:FE:4A:82:15:44:89:46:7B:80:4D:0D:78:8A:51
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 0197462FBC539B3A7DE755DF53086F0C5C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 17:00:22 +0000
Manifest this update: Fri 06 Jun 2025 17:00:22 +0000
Manifest next update: Sat 07 Jun 2025 17:00:22 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: QPLFKsNqgh4p/4x1yzu4A2YeI7Nlk3E/DZRckOlkl18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:bc:53:9b:3a:7d:e7:55:df:53:08:6f:0c:5c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jun 6 17:00:22 2025 GMT
Not After : Jun 7 17:00:22 2025 GMT
Subject: CN=74f8c1825be8fe4a82154489467b804d0d788a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:4d:5f:01:2e:f5:06:5d:30:9c:9c:00:57:
e3:77:f9:63:7f:8f:33:74:30:9a:6c:1f:67:4a:43:
d5:e4:c8:94:7e:7c:10:64:15:de:e1:f0:dc:32:11:
30:11:5f:5d:f4:47:d7:d7:96:0a:ad:9e:77:04:26:
bf:31:8d:ce:09:87:00:a4:05:0d:82:1c:ef:b1:de:
b4:d2:cc:fd:8c:5c:65:5d:6e:a8:7c:9f:ec:41:8c:
3f:a0:a1:1c:ea:68:16:78:0f:ff:1f:ee:af:2c:a7:
b8:f0:1b:ea:35:d8:42:c5:31:2d:d7:47:0f:0c:52:
3a:45:a8:1c:46:64:27:99:86:11:17:b2:ad:bd:3d:
6a:51:c0:cb:2b:6a:d8:83:ff:c9:27:1c:a9:bb:86:
02:b2:3e:94:7d:c8:e2:42:44:28:72:1d:4d:7c:20:
04:22:1b:e7:ac:b6:fc:6b:a6:8a:8a:ab:64:5e:b9:
be:0d:a5:46:23:2a:0e:71:7f:c9:ce:f9:10:41:4a:
e5:0f:79:ef:8b:1e:1f:e7:22:63:2d:63:2d:37:fb:
d7:cf:1e:84:46:6f:5c:f5:39:a1:55:c4:78:26:46:
b5:f2:a7:79:9e:c8:c0:85:8d:46:06:99:dc:07:0e:
5d:de:b4:0e:3e:ba:cc:1f:31:ce:0e:f3:cb:8a:49:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F8:C1:82:5B:E8:FE:4A:82:15:44:89:46:7B:80:4D:0D:78:8A:51
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:aa:ed:5e:fa:6d:41:8c:50:e1:44:be:a0:51:df:99:a7:16:
05:b1:b8:cf:8f:c1:d6:8e:5c:1f:00:4f:4f:0d:b3:b3:d2:cf:
73:1c:c8:07:6e:31:20:06:e8:83:61:63:32:3d:39:69:30:6c:
1d:a4:af:ae:a5:2d:1d:e7:8a:06:76:7e:b0:7b:13:b0:2b:1e:
dc:04:60:ac:73:45:b2:68:23:3e:90:fe:e8:17:23:fc:06:97:
c0:ff:94:00:bc:d8:bc:e9:35:20:80:e7:4c:53:77:19:89:14:
db:02:04:77:eb:bc:1c:82:6e:14:f6:8c:69:7a:d3:05:1a:65:
2b:da:66:fa:6a:e0:3f:dc:80:f7:18:b6:b9:31:dd:d3:c9:58:
48:38:77:f4:13:11:a3:84:f1:46:f5:a3:39:75:2c:30:61:65:
7e:af:3a:6a:12:6c:92:c7:bc:d9:47:26:08:67:fc:84:c0:8d:
99:99:c5:d8:6b:a9:dd:ff:0b:81:5a:4e:26:3e:a4:f0:84:98:
5b:5e:a7:31:7d:7e:90:4d:85:70:1b:1c:f4:ab:58:9a:91:e9:
0b:e5:e1:99:e7:73:07:72:44:d4:e7:b4:b9:99:40:24:08:bd:
e3:8c:53:13:8b:71:39:26:73:07:57:5d:82:46:71:02:9e:91:
00:19:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:34:51 2025 by rpki-client