Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json)
Hash identifier: n/XA1ZB9RPGfOSOVV7yg+rXjyIryjU7tt2WWQjtnFcQ=
Subject key identifier: 8D:6F:F6:D8:8C:03:CD:BE:E4:01:0C:29:DA:79:79:59:80:30:BC:0D
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 01993501C702108F97E4F6A7B5458016CA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 19:02:12 +0000
Manifest this update: Wed 10 Sep 2025 19:02:12 +0000
Manifest next update: Thu 11 Sep 2025 19:02:12 +0000
Files and hashes: 1: M4l3Cf3_669djsGWrF7n0AJt83M.roa (hash: MY4UMlUb6Y1AsO5cCAn8IrigWcCAqjlArLI2bOv+PX8=)
2: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: 6HY8mJ5ZMqBeZb5xxpB4yuyHR1QyDK1BVZ7bcSJXMqc=)
3: TXoJbYdgwtSRoMICf6BpMrQmJMs.roa (hash: Ede1kltXJewHDWyl80pDm1qv2UWiny8U21Nq2Z6l0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:c7:02:10:8f:97:e4:f6:a7:b5:45:80:16:ca:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Sep 10 19:02:12 2025 GMT
Not After : Sep 11 19:02:12 2025 GMT
Subject: CN=8d6ff6d88c03cdbee4010c29da7979598030bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bd:83:76:7a:c9:ae:91:75:c0:cd:7c:81:05:
6d:35:6f:d8:b7:be:9e:96:22:2b:b3:67:52:51:60:
ed:6c:20:53:ab:20:87:b9:6d:97:ce:12:a8:5e:4d:
85:3b:3a:c9:6c:8c:e5:68:77:fb:67:e8:96:4b:f7:
a8:63:76:1c:01:68:5e:f0:f4:e6:73:38:0c:a4:c2:
8e:45:99:b9:98:93:ae:33:29:23:cb:04:91:f0:6d:
1e:47:5e:2d:c9:7c:e8:d8:a3:7b:94:ab:e4:f8:41:
65:d9:7b:9c:fc:ec:fd:84:cf:f1:d6:56:20:41:5c:
42:ca:8a:bc:b9:6e:c8:ff:d5:50:70:be:25:f3:b2:
f5:26:42:bc:39:c7:01:62:8d:77:16:8b:fe:23:b0:
e3:13:11:6a:f2:59:0d:db:9b:9c:7b:7f:09:8e:90:
d0:90:9f:d6:bd:3a:2f:56:0e:43:dd:f1:ab:fc:0a:
7b:d9:0e:06:3c:8e:d9:e0:d9:07:1d:e4:55:44:81:
42:72:01:4f:94:f5:31:5e:16:06:7c:23:bc:3f:48:
f4:3e:c0:73:8a:32:0d:17:ae:8d:f6:84:de:d2:24:
81:3f:33:ba:f0:a0:0b:c6:c2:e5:b3:33:7f:c0:f2:
35:13:6d:22:ac:08:9b:c5:6f:13:0e:19:df:67:e6:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:F6:D8:8C:03:CD:BE:E4:01:0C:29:DA:79:79:59:80:30:BC:0D
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9a:9e:0c:a3:00:f1:36:ea:39:31:c6:b3:77:c7:f8:34:d8:
ef:f9:78:19:89:89:84:1f:b0:9a:1f:eb:fc:03:7d:8c:50:75:
74:38:7a:57:fc:57:77:ef:46:79:af:4f:f0:ec:d7:96:0c:93:
28:b3:7b:e0:ef:b1:fe:ea:2f:f8:27:2e:a6:fd:c9:c7:76:3e:
97:e1:34:7c:3f:37:0e:14:7f:a7:64:36:03:30:2d:b2:2a:84:
6f:43:d9:3d:ee:d2:c7:e6:b7:7e:c0:fc:2f:04:49:1e:a8:6b:
6a:90:eb:a3:d1:a4:44:81:23:e2:83:36:03:9c:00:f6:9b:e5:
48:ff:e9:0d:9e:a0:62:2f:d4:87:38:94:bb:cd:64:9d:c6:b8:
09:64:3b:0d:e2:c8:26:68:61:79:35:58:79:6a:08:e1:c1:18:
c2:76:d1:16:63:28:5d:e8:a2:7f:3a:43:c6:00:1d:c3:66:51:
9a:2a:95:c9:31:36:42:25:bb:68:12:4a:d5:99:70:78:bd:1a:
c6:22:a9:8f:14:00:71:74:2c:de:3e:79:7b:8b:f4:22:e5:51:
8b:98:e3:27:99:38:02:ca:92:1a:ab:e1:8b:4d:cf:a8:7d:93:
d5:d0:84:95:11:aa:f2:33:b6:e0:c9:a9:fd:17:be:98:95:dd:
12:a1:6c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:03:12 2025 by rpki-client