
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: XJAS8s3Klxp8i5iB/TYVpS/chR43skziEWMsscjMtcM=
Subject key identifier: B0:43:0D:3E:E1:14:F4:1B:55:C0:C5:9A:43:06:82:F7:7E:E7:6D:DA
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 01974EC59769E6F9996302066A8BAF526A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 09:01:01 +0000
Manifest this update: Sun 08 Jun 2025 09:01:01 +0000
Manifest next update: Mon 09 Jun 2025 09:01:01 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: wTnUCj/UGHolTw/+Z8AYgNoV5u6vkq5BMx0HMeVzpSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:97:69:e6:f9:99:63:02:06:6a:8b:af:52:6a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Jun 8 09:01:01 2025 GMT
Not After : Jun 9 09:01:01 2025 GMT
Subject: CN=b0430d3ee114f41b55c0c59a430682f77ee76dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:e8:04:82:02:b3:50:6b:19:5a:81:8b:ac:
a0:45:63:fe:c2:92:1c:f6:4e:97:c7:5e:a2:29:90:
99:68:04:8a:aa:3a:56:94:21:5f:e4:0d:19:60:87:
8b:a6:0b:e0:d2:15:39:85:fd:d7:fb:61:26:1f:d2:
f6:8b:da:eb:51:b0:7c:c9:45:ca:d6:93:61:2d:ad:
d7:a5:2c:d2:b4:d6:3e:a8:a7:b2:43:68:11:2b:a9:
16:63:2e:1f:5e:d4:cd:9b:94:d1:78:0e:2e:90:26:
f6:e0:e7:9a:19:f9:69:92:e2:53:5e:12:6a:d3:61:
9f:fa:73:aa:2c:06:e7:9b:0f:da:cf:2d:c4:ee:e4:
79:38:41:83:7f:d9:4a:3c:cb:db:23:af:ec:32:0c:
9e:8d:a6:f9:dc:70:6a:98:b3:1f:a7:f5:0f:dd:b0:
d5:4f:06:c6:3e:a0:1c:2c:4e:93:ce:1c:6d:e2:40:
cc:01:91:c3:d6:f3:8d:8f:e1:47:3d:8e:36:5c:76:
0c:22:cc:45:e8:64:97:d6:12:1e:ef:2b:33:3f:96:
e2:be:c8:94:d4:4c:00:40:35:3f:41:31:96:54:9d:
ae:9f:fc:55:e5:e9:64:7d:43:fc:bf:6d:e0:ba:91:
91:ab:9a:c6:62:61:36:25:fb:73:cc:c0:8c:a7:22:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:43:0D:3E:E1:14:F4:1B:55:C0:C5:9A:43:06:82:F7:7E:E7:6D:DA
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a3:c0:4b:48:69:b3:f5:fe:1a:6b:32:97:a1:14:7a:e0:2f:
08:20:d3:73:3f:6f:a4:59:bb:cf:25:8e:80:ec:44:6f:bc:7e:
e5:72:31:21:71:a7:3f:c3:47:3a:12:5f:4f:58:b8:e8:14:f6:
28:92:57:a3:3a:c0:6e:f3:18:7e:72:f9:19:78:54:4a:34:1f:
1d:06:d7:29:30:74:42:d1:09:32:48:b4:48:f2:51:d6:5e:f2:
58:33:f7:03:aa:82:2e:37:46:d9:c7:49:49:25:09:2e:a4:51:
5a:a7:f5:84:31:b3:d7:b1:62:a3:f5:30:5a:74:86:f2:61:e0:
d9:15:f0:05:91:30:3f:28:5e:f5:a6:5d:95:af:9e:69:12:8e:
4c:95:e9:77:3d:31:12:3f:d0:41:5d:b0:69:bf:84:a5:47:0a:
51:b8:6a:f2:c2:ed:92:cf:a0:ad:c2:12:46:83:a4:41:34:32:
51:14:35:00:7a:55:77:c9:f7:17:91:e4:d4:95:e7:79:c2:33:
4b:2c:6a:69:a0:2e:05:97:e0:81:77:b5:55:46:cb:e8:33:04:
da:82:74:e0:39:58:1d:a6:b7:7a:55:51:87:bb:54:e7:ea:93:
9b:14:c7:8c:d7:c0:e4:84:28:1e:30:46:e8:97:7e:a4:52:df:
a6:99:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:38:24 2025 by rpki-client