Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: 0j2DtzTfL8A6eun+65nIqVjHaw5CIpsg+mZ+7NqYYyY=
Subject key identifier: 68:48:A3:6F:E0:20:65:C1:AF:1A:2F:C5:A3:B9:2D:30:4F:7E:5E:3A
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 01987418B90C45CF0AD6A70D875AB77C1AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 09FE
Signing time: Mon 04 Aug 2025 08:00:33 +0000
Manifest this update: Mon 04 Aug 2025 08:00:33 +0000
Manifest next update: Tue 05 Aug 2025 08:00:33 +0000
Files and hashes: 1: Oc5Exwy6ZGrRe3cJEpFcoAoZ8LY.roa (hash: GCIh2gF/E3yjQMebTbwaKQU3aGp4E0TQ+qUjMjQObt4=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: vZhyS9v9VbeyNfPJWuwtecvJElyvOiAfea91aTAfdMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b9:0c:45:cf:0a:d6:a7:0d:87:5a:b7:7c:1a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Aug 4 08:00:33 2025 GMT
Not After : Aug 5 08:00:33 2025 GMT
Subject: CN=6848a36fe02065c1af1a2fc5a3b92d304f7e5e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:b9:15:ca:f3:fc:08:3d:ca:81:70:89:b3:
b7:dd:13:3e:bc:fe:ea:53:a2:a2:af:77:c2:0a:5d:
f7:a7:b6:b8:cb:15:c1:80:f8:e8:e0:14:85:5d:06:
89:bd:83:85:d1:40:46:2e:a1:cc:e4:82:e7:db:3e:
8f:a2:78:1b:19:68:77:09:14:24:85:84:bc:43:72:
81:fe:d1:a4:87:4c:4a:d8:bc:0d:bf:ad:bc:14:90:
1a:e0:21:9b:ab:6a:db:5c:5e:42:cd:1d:fa:86:f5:
8b:9a:a6:4f:ac:41:0e:6c:90:05:f2:bb:7d:5f:ed:
24:ab:ba:77:9a:6d:93:30:30:ca:e7:2d:43:71:0a:
ae:48:c2:c3:f2:88:7e:43:82:72:81:12:76:77:97:
9a:e8:b5:d7:7d:31:ea:23:59:0e:8b:15:63:f0:3a:
e6:3c:d3:3c:c2:63:0b:ec:d8:03:2f:76:6d:03:79:
98:58:c2:69:49:46:c5:07:59:5c:8a:4d:64:24:63:
92:97:e6:6c:71:24:0f:ef:dc:14:ad:cd:a6:47:26:
b7:5f:bd:96:e2:34:b6:4f:bc:46:16:3d:55:d7:6a:
84:85:5a:e2:84:04:33:41:f4:0f:eb:3a:07:0c:66:
f0:98:03:db:dc:16:d3:0b:7a:31:92:cc:67:42:02:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:48:A3:6F:E0:20:65:C1:AF:1A:2F:C5:A3:B9:2D:30:4F:7E:5E:3A
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:04:5d:d9:91:ee:7b:b9:e0:1c:90:c1:9c:0c:bd:79:1f:f9:
d5:a5:e9:8e:bc:ad:fd:00:b8:89:17:5b:d5:a8:de:56:a2:48:
38:7e:fc:b1:33:6e:4d:ee:d0:e5:d1:52:8a:36:17:3c:f2:38:
df:e9:4d:45:99:df:1f:09:25:f4:bb:43:25:5f:ca:3c:7a:28:
fa:3e:de:b5:9e:7e:ae:80:94:b2:fb:cf:65:08:00:9e:e8:97:
4a:90:fb:92:c6:c0:6e:db:79:c8:8f:7f:45:85:44:ea:43:c2:
2d:13:f0:9d:45:99:a7:2d:a5:17:0b:43:f8:77:39:5f:5c:1d:
54:a1:47:3e:10:93:ca:90:19:cd:a0:4a:73:be:2d:49:17:4f:
0c:66:26:69:c1:b8:5b:b7:20:58:91:fd:ce:e8:ec:1d:fc:b5:
fd:e2:82:26:8b:47:1b:a3:20:ef:c4:52:96:9b:f6:90:5f:d7:
65:a7:51:2c:df:d5:e5:cd:94:da:7a:d5:0c:7d:df:82:a6:a8:
ae:64:6f:f6:85:35:da:85:f1:ff:65:e5:c3:cc:6c:68:92:eb:
62:2a:41:68:b9:7d:db:08:31:e1:f8:3d:14:9e:32:ba:71:2f:
8c:f9:9c:6e:26:e3:87:be:80:13:16:b2:e8:2a:f5:81:76:34:
a8:94:3e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:53 2025 by rpki-client