
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: v2zl0waLEUwIHjMyhLC9ZSaRED0khySggURNVR39h1k=
Subject key identifier: 08:D7:0D:56:29:99:61:0A:4F:3E:DA:64:83:CC:E6:04:A2:47:CD:9F
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 01974C3237308C1DAF9732D14C683B4C4634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 21:00:48 +0000
Manifest this update: Sat 07 Jun 2025 21:00:48 +0000
Manifest next update: Sun 08 Jun 2025 21:00:48 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: d/noLNn76Q2fg5F7ex/YTeTZ37JAJdUilVfGOl/dReA=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:37:30:8c:1d:af:97:32:d1:4c:68:3b:4c:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Jun 7 21:00:48 2025 GMT
Not After : Jun 8 21:00:48 2025 GMT
Subject: CN=08d70d562999610a4f3eda6483cce604a247cd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:77:d5:e1:6a:4a:1f:29:1c:e9:ee:fb:e5:
42:45:77:a6:e3:73:47:cd:ff:90:b0:44:96:08:cb:
f8:b2:83:97:17:e0:b4:0b:67:a0:3d:b8:52:11:db:
d5:9b:26:f0:4d:fc:8e:c1:68:84:b0:33:0d:32:fe:
ce:16:a5:c9:b2:a7:11:0a:6b:d2:74:8e:fb:73:b9:
25:ec:42:ad:3c:01:5c:10:8b:f5:20:11:67:0a:7e:
83:29:06:23:b9:3b:82:0a:3e:a0:19:64:1a:57:47:
f5:a4:5f:70:cc:07:be:e8:49:75:a9:53:3e:72:73:
18:16:0d:5c:31:d4:8f:44:d4:5e:e6:08:0e:0c:95:
75:c9:b5:7c:89:e5:9b:f0:6b:78:00:3d:84:26:a6:
f4:39:eb:a8:24:fe:b0:59:c5:ce:be:bd:75:72:63:
35:31:36:a0:5d:17:5e:f4:70:15:e6:76:b2:be:de:
d2:0f:25:99:47:f5:78:39:f3:e6:d7:35:c0:4a:07:
83:2a:13:55:bb:20:26:c0:22:6a:2e:46:c5:9a:2f:
00:ac:a5:0d:12:02:04:2a:66:c8:5f:d3:fa:66:06:
8d:b9:67:ea:66:c9:0c:49:5a:c9:7d:7d:df:6f:9b:
55:57:16:3e:d5:71:b0:69:df:c5:0a:50:90:91:4b:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D7:0D:56:29:99:61:0A:4F:3E:DA:64:83:CC:E6:04:A2:47:CD:9F
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:df:90:5f:b5:32:17:12:1b:97:47:89:cb:6d:ec:ca:81:2f:
6d:61:c4:14:74:e2:39:9e:94:61:e5:a3:d2:92:05:85:c1:a1:
f8:e7:0e:0c:95:05:19:e8:7f:01:af:b8:8f:7e:8a:35:71:0e:
1b:51:d2:5a:6f:aa:4c:9f:64:61:60:60:17:bc:f4:aa:98:8f:
a1:ed:a2:ec:6b:64:c3:4b:4e:b1:2f:27:65:b3:eb:ec:84:80:
20:07:fe:83:e4:f3:82:64:0b:9d:c9:1a:ae:49:7c:db:23:9d:
95:28:a4:da:d2:d6:64:b5:15:b3:f7:75:45:f0:9d:fc:1a:f4:
11:92:53:b3:de:85:68:91:0d:b1:24:1c:cf:30:c2:c9:2d:f8:
fb:e8:05:ba:dc:7e:3b:b9:6a:8f:1a:27:fe:15:2e:af:7b:ac:
71:db:fb:ac:1e:18:06:c1:d7:cc:6a:21:d7:36:1a:0b:20:25:
8f:1d:f7:ea:b4:e5:c9:50:35:66:16:f8:c4:86:58:1c:91:3f:
bb:d4:db:99:64:a9:d9:3c:0e:63:b4:78:ea:6b:1e:f0:20:16:
14:2b:8f:94:a7:44:fd:1d:a5:41:8f:e8:9e:69:66:48:66:ce:
c9:0d:e1:4d:98:2e:0e:b7:b7:51:e8:8d:62:91:1b:fb:24:1f:
be:52:09:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMjcwjB2vlzLRTGg7TEY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDExZjZjMTc5ZWIzMTQyYTQ4ZWU2NGIyZTk0Y2RlOWRk
MzYxNzMwHhcNMjUwNjA3MjEwMDQ4WhcNMjUwNjA4MjEwMDQ4WjAzMTEwLwYDVQQD
EygwOGQ3MGQ1NjI5OTk2MTBhNGYzZWRhNjQ4M2NjZTYwNGEyNDdjZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6x31eFqSh8pHOnu++VCRXem43NH
zf+QsESWCMv4soOXF+C0C2egPbhSEdvVmybwTfyOwWiEsDMNMv7OFqXJsqcRCmvS
dI77c7kl7EKtPAFcEIv1IBFnCn6DKQYjuTuCCj6gGWQaV0f1pF9wzAe+6El1qVM+
cnMYFg1cMdSPRNRe5ggODJV1ybV8ieWb8Gt4AD2EJqb0OeuoJP6wWcXOvr11cmM1
MTagXRde9HAV5nayvt7SDyWZR/V4OfPm1zXASgeDKhNVuyAmwCJqLkbFmi8ArKUN
EgIEKmbIX9P6ZgaNuWfqZskMSVrJfX3fb5tVVxY+1XGwad/FClCQkUtzxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjXDVYpmWEKTz7aZIPM5gSiR82fMB8GA1UdIwQY
MBaAFDrRH2wXnrMUKkjuZLLpTN6d02FzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzct
ZWY5MWQ4YjViMDgxLzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzctZWY5MWQ4YjViMDgx
LzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9+QX7Uy
FxIbl0eJy23syoEvbWHEFHTiOZ6UYeWj0pIFhcGh+OcODJUFGeh/Aa+4j36KNXEO
G1HSWm+qTJ9kYWBgF7z0qpiPoe2i7Gtkw0tOsS8nZbPr7ISAIAf+g+TzgmQLncka
rkl82yOdlSik2tLWZLUVs/d1RfCd/Br0EZJTs96FaJENsSQczzDCyS34++gFutx+
O7lqjxon/hUur3uscdv7rB4YBsHXzGoh1zYaCyAljx336rTlyVA1Zhb4xIZYHJE/
u9TbmWSp2TwOY7R46mse8CAWFCuPlKdE/R2lQY/onmlmSGbOyQ3hTZguDre3UeiN
YpEb+yQfvlIJZg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:31:36 2025 by rpki-client