Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier: hpxsnzF87kg9oCLEJrPH5wDSXKs9jvd3mRyIfOcQi0U=
Subject key identifier: 82:BC:DE:74:75:A8:AE:73:FF:40:70:26:50:AE:AA:26:CB:03:1E:01
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial: 01974EC5E8B4D0CFF53424A1BC97557D20A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 09:01:22 +0000
Manifest this update: Sun 08 Jun 2025 09:01:22 +0000
Manifest next update: Mon 09 Jun 2025 09:01:22 +0000
Files and hashes: 1: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: VMj9P+F5ol/29EnM7fm+Hc3hjJ49aeCsqFPuer3b2k0=)
2: rtw5EuFYH3ySq0jw3-ZmGwFMoqo.roa (hash: Ii5lxajvlSV2gkqSCAYWVLgdyHye7gIbfTFfAGtSUlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:e8:b4:d0:cf:f5:34:24:a1:bc:97:55:7d:20:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Validity
Not Before: Jun 8 09:01:22 2025 GMT
Not After : Jun 9 09:01:22 2025 GMT
Subject: CN=82bcde7475a8ae73ff40702650aeaa26cb031e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:f5:1a:72:6a:6d:c1:1b:c4:88:13:bb:19:
2d:9c:69:d9:53:c5:9e:41:db:1c:33:d8:65:c0:ff:
a4:e6:a3:f8:3d:31:e0:15:2e:81:c8:7c:10:bd:0a:
0c:24:39:91:fa:50:29:d7:19:64:4e:1e:ad:d7:8f:
03:91:8f:ac:36:32:04:fa:b0:4b:36:e6:87:06:a4:
46:e5:9d:60:3a:7e:6b:4d:82:5f:10:01:c2:d2:82:
d7:61:c5:ab:ad:f4:f8:3d:93:29:b7:30:ff:d1:a5:
47:0c:5e:4e:75:10:11:1e:52:1e:c6:4d:fd:36:78:
35:f0:ca:1a:67:f0:d4:9a:3c:d7:16:fb:67:73:ce:
69:f6:f4:c7:06:b5:13:fc:04:36:84:c5:d7:cb:c0:
7f:b8:2b:85:22:0e:bc:79:90:be:99:39:5e:0b:07:
f9:8c:f0:5f:5a:05:65:6b:01:70:74:48:36:e9:20:
2f:ae:14:d2:d4:45:15:88:f3:19:17:2d:74:4e:00:
bd:8a:64:08:d1:b3:09:30:23:11:40:05:5c:f0:2a:
be:d9:da:93:4c:71:e6:7b:0b:8e:d3:52:72:92:4b:
8c:5f:4e:2f:76:bb:45:3c:17:93:58:53:aa:8b:15:
fc:51:89:6f:f1:a6:06:4e:8f:d8:c3:c7:5c:cc:36:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BC:DE:74:75:A8:AE:73:FF:40:70:26:50:AE:AA:26:CB:03:1E:01
X509v3 Authority Key Identifier:
keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9f:5c:09:b2:d9:52:e7:f2:e4:9a:0d:a9:8d:c3:e4:54:05:
2b:51:15:cb:45:f4:5a:fd:72:45:f4:eb:b4:5f:3e:67:96:5e:
49:45:d7:d3:dd:9a:1c:e4:2b:fb:66:38:73:ad:6d:d2:e5:a3:
ba:96:d0:29:a9:d8:4c:55:a3:df:40:2e:89:9d:2a:54:9a:8b:
91:6c:60:33:d0:d2:19:67:c2:a8:47:51:9b:35:d2:a7:f0:08:
a1:95:0d:df:12:de:72:a2:4d:a5:9e:d9:21:86:ec:9b:87:4b:
b7:bf:af:42:c7:4d:db:c6:2b:7d:24:2c:5b:c1:a5:25:22:3b:
c5:ef:c1:ec:c4:fa:16:1c:ce:c3:f8:e3:de:78:67:75:b5:e0:
98:5d:ab:38:e2:92:6b:d0:21:d8:42:cf:4f:e8:62:f2:9b:b2:
90:ec:b1:ca:7a:32:b4:bf:82:5f:3b:aa:3d:de:39:59:9e:3c:
af:36:8f:08:85:d5:a0:cd:7e:ee:10:ad:9d:12:8b:dc:32:0d:
8e:3a:01:67:2d:60:ef:67:3b:aa:b7:a5:8e:17:70:85:22:79:
74:9e:98:88:a9:b4:2a:be:64:d2:3f:ce:bf:f5:34:d3:92:a5:
87:11:a7:8f:98:a3:47:e5:d5:73:af:6e:0b:81:b2:51:04:0e:
f5:b3:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:16 2025 by rpki-client