Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: P4DbB7a28K4C8liv/IgNKVFEZ6kX6JvFs6N+fC3GVFk=
Subject key identifier: 5C:71:2A:AF:6F:A9:CF:D0:5B:4B:02:BD:FE:96:AA:9B:53:0C:E5:28
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 01974D0DF9C9CDA526BBC4D4E81FDB3ED68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1512
Signing time: Sun 08 Jun 2025 01:00:50 +0000
Manifest this update: Sun 08 Jun 2025 01:00:50 +0000
Manifest next update: Mon 09 Jun 2025 01:00:50 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: DBsgeULls8svbi1s/8ohHNVu6WjhLSXzyxav/LWISAs=)
2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:f9:c9:cd:a5:26:bb:c4:d4:e8:1f:db:3e:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Jun 8 01:00:50 2025 GMT
Not After : Jun 9 01:00:50 2025 GMT
Subject: CN=5c712aaf6fa9cfd05b4b02bdfe96aa9b530ce528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a4:de:49:5b:85:80:fc:d8:03:57:98:4c:2a:
11:a2:6a:ef:6e:a0:e7:c0:10:95:60:8c:70:17:c8:
88:71:f0:de:ac:71:99:a7:9c:65:a9:ad:b7:bb:93:
01:7b:38:f0:73:3c:ab:b9:43:31:24:38:74:a2:13:
27:47:f8:02:e4:aa:b7:24:bd:ae:fa:b9:a3:59:84:
c0:48:64:98:bb:19:1f:63:e1:19:76:88:08:15:a3:
c0:51:d4:8b:a6:23:9e:26:95:32:84:c2:08:2e:0b:
76:e7:f0:96:75:5d:d5:a5:4f:3a:b4:89:d7:43:6b:
a1:89:08:3b:2d:b6:d6:2a:a9:f4:61:30:cf:ee:d8:
34:59:98:b9:5e:15:91:0a:42:63:f8:98:d1:36:ce:
f9:77:03:a9:15:01:0a:e4:f8:25:24:fa:7c:a0:b6:
33:5f:dc:0d:49:ce:64:f6:14:75:dc:c7:55:ab:c2:
92:5e:3f:35:cb:38:08:18:74:dd:d8:38:11:60:fd:
86:f0:04:3b:09:0b:49:df:f4:00:7c:44:ea:46:82:
8e:e4:29:89:65:be:c4:45:61:68:c0:6c:9f:01:db:
7d:57:64:26:73:f1:09:dc:27:ba:52:d7:5e:1e:47:
64:86:f6:6b:45:c9:90:bb:8a:01:ab:c7:4f:b0:14:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:71:2A:AF:6F:A9:CF:D0:5B:4B:02:BD:FE:96:AA:9B:53:0C:E5:28
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:af:0f:06:64:90:5f:06:36:44:59:79:fc:be:99:64:bc:2d:
36:31:c1:a7:2a:74:aa:d1:61:7f:d1:f9:68:71:a8:2e:03:d8:
6e:55:d2:16:5c:ad:81:12:fd:24:5b:bb:0b:bf:bc:ce:0a:8a:
94:60:8c:98:4c:70:da:d4:c0:57:c1:5b:fe:d0:40:a6:cb:13:
7d:1b:9e:08:5d:14:10:e7:ce:06:2c:ff:8f:43:4d:1e:19:1e:
95:84:a3:1f:ce:6b:8e:52:58:3f:64:98:ae:d0:a9:20:48:61:
89:c9:bb:e8:fa:f2:82:b0:3f:91:77:6d:c5:df:1e:1b:c6:54:
d9:3f:c0:1c:46:08:1d:47:69:02:8f:e5:91:1d:df:e1:7e:0c:
29:64:ed:15:09:f2:25:00:90:76:5f:b9:b8:89:7f:fc:60:bf:
be:82:81:84:ad:10:80:9f:f4:db:27:11:7e:cc:7b:fe:e0:8d:
7e:e7:fa:83:cf:98:92:40:72:42:81:d2:c8:41:a4:a3:21:4d:
57:98:6f:f9:1d:bc:b0:0c:4e:12:18:40:79:1a:30:f0:42:d3:
69:2f:9f:36:ab:8c:eb:a2:1d:38:e3:a1:24:c9:8b:67:9a:39:
46:2f:3b:25:c0:0c:aa:cc:a3:99:3f:14:2c:81:9f:ce:ba:5c:
97:c3:68:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDfnJzaUmu8TU6B/bPtaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk
YmNiYmMwHhcNMjUwNjA4MDEwMDUwWhcNMjUwNjA5MDEwMDUwWjAzMTEwLwYDVQQD
Eyg1YzcxMmFhZjZmYTljZmQwNWI0YjAyYmRmZTk2YWE5YjUzMGNlNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qTeSVuFgPzYA1eYTCoRomrvbqDn
wBCVYIxwF8iIcfDerHGZp5xlqa23u5MBezjwczyruUMxJDh0ohMnR/gC5Kq3JL2u
+rmjWYTASGSYuxkfY+EZdogIFaPAUdSLpiOeJpUyhMIILgt25/CWdV3VpU86tInX
Q2uhiQg7LbbWKqn0YTDP7tg0WZi5XhWRCkJj+JjRNs75dwOpFQEK5PglJPp8oLYz
X9wNSc5k9hR13MdVq8KSXj81yzgIGHTd2DgRYP2G8AQ7CQtJ3/QAfETqRoKO5CmJ
Zb7ERWFowGyfAdt9V2Qmc/EJ3Ce6UtdeHkdkhvZrRcmQu4oBq8dPsBQncwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxxKq9vqc/QW0sCvf6WqptTDOUoMB8GA1UdIwQY
MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt
ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw
LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwK8PBmSQ
XwY2RFl5/L6ZZLwtNjHBpyp0qtFhf9H5aHGoLgPYblXSFlytgRL9JFu7C7+8zgqK
lGCMmExw2tTAV8Fb/tBApssTfRueCF0UEOfOBiz/j0NNHhkelYSjH85rjlJYP2SY
rtCpIEhhicm76PrygrA/kXdtxd8eG8ZU2T/AHEYIHUdpAo/lkR3f4X4MKWTtFQny
JQCQdl+5uIl//GC/voKBhK0QgJ/02ycRfsx7/uCNfuf6g8+YkkByQoHSyEGkoyFN
V5hv+R28sAxOEhhAeRow8ELTaS+fNquM66IdOOOhJMmLZ5o5Ri87JcAMqsyjmT8U
LIGfzrpcl8Nofg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:22:59 2025 by rpki-client