Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: Yni0BoJjq+AsCAwwFJRbf/hKvVMleyEHM/RzE7TPlzs=
Subject key identifier: F0:90:CD:F0:87:B2:FA:2A:8F:C3:84:3D:5B:46:C7:7E:F3:28:A4:17
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 019890A287762EA34B851B1400A5CB317FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 05E3
Signing time: Sat 09 Aug 2025 21:00:27 +0000
Manifest this update: Sat 09 Aug 2025 21:00:27 +0000
Manifest next update: Sun 10 Aug 2025 21:00:27 +0000
Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: WTa41jQ5OWInyXlrjxVxwd64ztqy5eXwDC/uayHXp/s=)
2: kqIK4ViX12p6eIuBG0T4dHMIIHI.roa (hash: PaO/dVKACGH2GQrFFW5fxxz+R4Obi2vhR9vhB2cSwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:a2:87:76:2e:a3:4b:85:1b:14:00:a5:cb:31:7f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Aug 9 21:00:27 2025 GMT
Not After : Aug 10 21:00:27 2025 GMT
Subject: CN=f090cdf087b2fa2a8fc3843d5b46c77ef328a417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:0f:40:81:94:60:05:42:39:fc:59:ee:bf:
c9:9d:12:bc:9d:48:b3:ed:db:03:43:a6:24:12:40:
0e:ba:08:f6:6c:92:2d:39:d8:f2:0c:5b:98:06:d6:
69:58:20:5b:d0:ff:9a:ac:a7:a7:19:47:68:73:af:
70:26:82:66:a2:fe:d4:b5:db:c5:fe:8f:3b:97:35:
12:78:56:1a:e8:93:a9:c0:fb:f1:89:97:08:44:ea:
47:7e:d9:ae:b9:43:0c:4d:dd:28:a7:6c:e0:f2:61:
7e:ec:c4:1e:d9:ea:bd:f0:23:34:18:11:d9:84:2b:
39:f8:57:aa:ba:12:06:7c:22:98:0a:de:34:6c:d2:
ab:67:7c:91:45:08:c9:f1:55:ca:61:fb:19:cc:48:
ee:f2:ea:e0:c1:ea:ac:b7:3d:23:01:0a:17:6d:25:
c3:48:99:78:a8:f0:e9:cb:c1:1f:bb:c4:e7:3a:e2:
51:56:61:62:de:c7:2d:d7:66:12:24:bb:8a:cb:23:
0e:25:8d:b4:fc:6f:f9:4e:60:2a:44:a3:29:71:a5:
b0:01:18:50:54:db:e2:a2:68:a7:2a:b1:4e:18:89:
04:f6:58:74:f9:40:0a:d9:3f:ed:ba:2f:87:13:90:
9e:7d:44:aa:06:17:bf:6a:c4:09:11:ad:ce:e5:3c:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:90:CD:F0:87:B2:FA:2A:8F:C3:84:3D:5B:46:C7:7E:F3:28:A4:17
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f8:d9:ee:fb:f6:c9:74:86:b3:d8:11:61:37:c1:6e:7e:fb:
37:3f:fc:10:aa:76:27:78:02:f1:b2:f0:d8:33:a5:85:bd:53:
06:a6:d8:7c:c4:43:7b:df:30:f8:7b:4c:eb:26:44:3f:b9:99:
a4:9f:8c:99:d9:50:a0:55:07:62:ca:2d:c8:9e:9a:a4:d1:f8:
30:e1:b9:95:0c:94:52:fc:02:52:40:49:43:73:e0:af:7b:2c:
46:1d:14:aa:d3:4a:b2:81:6e:ef:81:dc:b0:fe:dc:74:4a:b7:
52:f5:dd:a1:83:64:1d:69:c9:07:58:3f:89:b8:60:e0:02:87:
f6:24:f5:22:48:94:f7:a1:cb:9f:f9:47:76:5d:57:0b:5e:0a:
51:ae:6e:ac:7f:3c:b8:f2:bf:f3:a6:68:17:6f:34:4e:65:e3:
b2:fa:ac:b3:75:d9:a3:91:76:83:e8:70:64:f6:db:9e:82:6c:
31:ae:dc:30:2e:63:05:64:b2:fa:28:8d:ce:bc:bb:7a:41:05:
64:8d:9e:59:0b:10:4d:17:1f:0f:ae:ec:1e:15:ef:c1:1b:13:
23:14:87:f1:66:35:e9:e0:fe:39:66:38:df:fb:00:3e:24:55:
a6:6b:6b:fe:82:09:ba:d3:03:0a:7c:32:cb:fc:1b:1d:c5:fe:
53:0a:64:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:34 2025 by rpki-client