Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: LwkxDZ0pJy81BCMiKunO1oJBmS9modq1RyIf0ZSi4NQ=
Subject key identifier: 09:56:87:47:B0:51:5E:2A:E4:3D:93:8F:69:E3:93:27:4E:B6:D0:D5
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 01974DB2AF19188EC11983C2E199AAABC616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 03DC
Signing time: Sun 08 Jun 2025 04:00:45 +0000
Manifest this update: Sun 08 Jun 2025 04:00:45 +0000
Manifest next update: Mon 09 Jun 2025 04:00:45 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: Wm7nHGLhylxcQgmO9pUOBaN8Y/PLJo9GNhHDoycRj2c=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:af:19:18:8e:c1:19:83:c2:e1:99:aa:ab:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Jun 8 04:00:45 2025 GMT
Not After : Jun 9 04:00:45 2025 GMT
Subject: CN=09568747b0515e2ae43d938f69e393274eb6d0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:82:8c:0a:17:b0:58:b3:88:b1:b2:4e:85:
22:d1:c9:42:cb:c6:eb:df:d5:75:13:9e:c7:9b:ba:
95:dc:f3:56:b2:ff:c9:79:58:75:c1:df:0b:eb:ad:
f9:95:92:bb:3d:aa:de:c8:73:e7:ec:2d:b6:94:34:
09:52:60:40:11:42:2a:09:aa:16:a1:5f:03:bc:9c:
eb:8f:68:f9:e5:50:fd:ec:3b:76:ce:2f:87:55:b5:
8f:97:f5:d0:e0:dd:19:ee:9c:82:bc:ca:31:ec:48:
76:5b:bc:56:38:dd:a6:7a:b4:fb:32:5e:69:70:b5:
b1:68:12:dd:13:50:7d:a8:a8:9a:f2:cd:0d:0c:fb:
a0:94:84:12:17:95:fe:c0:4f:4b:f4:c9:1d:3e:1f:
ee:d7:99:f7:f0:9f:46:01:16:6e:d3:3e:a7:0b:b8:
d9:2c:02:97:43:b9:bd:74:e0:98:6f:1d:33:d0:cf:
0c:cd:fb:99:5f:81:db:b6:9b:62:22:85:bd:2d:f7:
4a:5d:e1:08:bd:d5:e4:ed:e1:c0:58:fe:c6:39:ac:
92:bb:aa:54:b1:fa:7c:4a:80:8d:65:6d:ee:5d:4d:
df:22:58:d6:1b:3d:43:7c:47:18:3d:c2:95:60:6c:
1a:98:0d:ea:20:7f:71:f8:60:e7:36:df:9c:07:7c:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:87:47:B0:51:5E:2A:E4:3D:93:8F:69:E3:93:27:4E:B6:D0:D5
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:97:7d:01:f9:cd:37:83:ac:a7:80:57:a5:4c:89:93:e5:93:
16:b9:45:39:ca:77:fd:4c:9c:f8:8c:57:26:df:b9:db:c0:c1:
1d:e3:9f:08:4a:4b:09:c2:ae:d6:49:b5:a0:0b:d3:f5:e1:a1:
f9:ac:c3:f7:f6:f4:96:ed:29:13:12:a1:bc:fb:b0:40:aa:42:
05:60:0f:2f:4e:30:04:6f:77:a2:38:1d:25:bc:25:b7:fc:12:
87:76:8f:26:d8:d8:ca:d1:ec:96:09:c8:d6:9f:80:d3:2d:03:
f0:8f:dd:be:bb:1a:a8:7f:ed:db:ff:d9:75:7d:14:71:9c:1b:
e3:dd:c9:96:75:dc:22:ca:9d:d9:6c:4f:38:53:79:1f:c8:7c:
78:c5:a7:50:b4:1b:1d:f3:38:56:38:8e:60:88:93:39:ad:4d:
a6:d5:1d:aa:f3:70:e7:5c:30:2f:b7:bc:6b:77:54:7e:f9:97:
af:72:ca:ff:e8:4e:2a:ff:1c:b4:3e:f9:f6:6e:c2:61:75:bb:
c5:4b:e2:c3:7d:f8:0b:57:e7:c0:2d:86:4c:b0:63:85:bd:52:
7a:20:55:31:10:cd:b1:a7:a7:0b:18:a2:73:a3:6b:5e:70:ca:
d7:e0:6b:56:d2:e3:1a:95:13:1f:35:0f:aa:bb:04:16:93:d6:
bb:66:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:43 2025 by rpki-client