Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json)
Hash identifier: Z16w/rncImFpa4MJuBuHiM+QiYvVSvhR94c4VSJukc8=
Subject key identifier: D8:DD:42:1A:D3:05:B3:47:DC:AA:E2:28:BC:30:B7:43:19:C3:1B:2F
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 0197488C4E05896CA7568D978B16CD9AE0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 04:00:43 +0000
Manifest this update: Sat 07 Jun 2025 04:00:43 +0000
Manifest next update: Sun 08 Jun 2025 04:00:43 +0000
Files and hashes: 1: M4l3Cf3_669djsGWrF7n0AJt83M.roa (hash: MY4UMlUb6Y1AsO5cCAn8IrigWcCAqjlArLI2bOv+PX8=)
2: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: l8gCBJzw/xreIJRH2ueH1YiIe5/Hi0itmMLps/bb6uY=)
3: TXoJbYdgwtSRoMICf6BpMrQmJMs.roa (hash: Ede1kltXJewHDWyl80pDm1qv2UWiny8U21Nq2Z6l0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:4e:05:89:6c:a7:56:8d:97:8b:16:cd:9a:e0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Jun 7 04:00:43 2025 GMT
Not After : Jun 8 04:00:43 2025 GMT
Subject: CN=d8dd421ad305b347dcaae228bc30b74319c31b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:2a:13:20:fe:5a:ed:7f:00:0c:3d:e6:c7:
8f:7f:f1:6b:c2:75:7d:69:b6:45:dc:c5:98:22:f5:
41:5d:d6:ee:ca:ff:43:2a:d2:b1:ed:26:6e:3c:50:
cf:e6:a2:a7:0c:e5:07:a8:7a:4b:d7:14:e5:04:db:
b7:d1:ae:af:11:13:b0:e6:11:1b:03:2c:41:8c:22:
ec:a4:ed:94:0d:c5:0e:98:83:0d:42:7d:dd:8a:17:
7e:42:a5:8a:66:a5:10:5f:f6:b9:5b:8e:b2:05:07:
1c:7c:1d:ef:3b:47:b4:61:56:23:54:70:aa:1d:92:
cb:71:e7:ce:f7:8b:91:80:19:00:9c:64:e9:00:c1:
cb:4c:d4:91:fb:bc:73:04:99:42:61:24:b1:c6:de:
84:5b:33:5a:93:4e:b3:16:2a:b1:86:0a:23:d4:61:
a4:68:a9:fc:18:5c:99:da:58:80:66:0e:f5:19:54:
e6:6a:9a:67:6f:ab:af:fa:5b:71:45:52:6c:40:9d:
14:17:47:35:12:56:b9:63:84:20:12:37:e3:30:c5:
63:cb:e2:9d:94:86:2e:ce:81:8f:07:35:52:63:a0:
b1:21:80:77:78:ab:c3:99:b4:6b:05:7e:e9:8a:00:
59:7c:c7:b3:0b:28:be:d7:fe:98:5a:6a:94:cd:4c:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DD:42:1A:D3:05:B3:47:DC:AA:E2:28:BC:30:B7:43:19:C3:1B:2F
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c7:88:1a:f1:69:0a:c1:09:4c:a8:13:d8:53:14:ee:5a:db:
cb:e3:87:e3:dc:06:0a:af:d9:ad:eb:71:b9:1d:50:dd:51:17:
0e:7e:79:a7:3a:d9:1e:bb:c8:d9:99:71:7f:19:f3:17:61:d9:
30:5d:75:43:b6:81:a4:2f:15:c5:34:12:e8:80:53:01:60:e0:
83:95:d3:1a:f0:f5:a5:fd:da:1e:40:03:11:20:04:3c:c5:b8:
0d:f8:7b:27:dd:be:74:7a:5b:ab:4c:4d:93:63:e8:5e:a2:78:
07:bf:12:08:1a:c9:90:ed:d0:4a:54:12:d7:6b:a6:2b:42:4f:
94:42:e3:3f:4d:ec:3c:47:17:5b:12:40:97:c8:c9:cf:d9:9a:
8d:56:04:ef:31:a3:50:92:1d:01:a3:d6:d8:08:fb:3a:72:b1:
1f:5e:0e:51:bc:13:cd:84:f8:6d:8b:1f:ba:5d:89:7a:92:35:
79:fa:c0:e3:f7:e8:1f:08:35:3f:59:aa:b5:b8:b9:6d:d3:a3:
cd:d0:4f:92:b8:f7:3c:da:90:d1:bb:14:b3:0e:6f:ce:d4:fd:
8a:41:d0:6e:bf:df:87:c4:66:63:08:57:a0:90:0a:c7:1f:fc:
d7:fe:79:be:16:3b:30:8b:24:56:30:4c:29:a1:59:66:92:4e:
ca:80:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:52 2025 by rpki-client