Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: XUx1IZkeQMit8kQQTb/8dTYD7B28SUL+kZkJxs/yuN0=
Subject key identifier: 4D:81:0E:11:04:4D:88:19:A1:FF:1D:7D:BB:4C:D0:A5:17:2F:C9:85
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 01988A3316305DE0D298369C3EA4A4A8E5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 0EC7
Signing time: Fri 08 Aug 2025 15:01:00 +0000
Manifest this update: Fri 08 Aug 2025 15:01:00 +0000
Manifest next update: Sat 09 Aug 2025 15:01:00 +0000
Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: 49TD4xkV6M+6uu8wCLpGhA2yLmBwzosITMF4D5uzc4s=)
2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:16:30:5d:e0:d2:98:36:9c:3e:a4:a4:a8:e5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Aug 8 15:01:00 2025 GMT
Not After : Aug 9 15:01:00 2025 GMT
Subject: CN=4d810e11044d8819a1ff1d7dbb4cd0a5172fc985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:cf:9f:a7:89:fc:7e:46:74:7c:c4:20:f3:
2f:d9:c3:1a:7a:a6:ca:71:2c:57:22:1d:66:c4:f7:
7b:30:87:dd:df:32:dd:2f:b4:fb:6d:d1:8a:f9:0d:
29:9b:a0:a4:0b:80:14:1c:e2:d5:21:c9:63:2b:76:
e9:9a:80:d6:c1:49:c8:fa:fd:8d:e2:aa:a7:c5:f5:
ea:e4:0b:5b:5d:39:48:39:bc:27:3e:66:7a:68:60:
f5:d6:1a:69:6e:e1:93:39:82:d8:e1:63:8b:6a:0c:
2f:7a:a8:bb:21:37:ea:46:1b:68:6d:0a:30:ca:9f:
b1:98:8e:66:f2:19:b5:7e:b5:25:19:e3:c1:0a:0d:
d9:b9:5b:65:1a:cd:3b:59:83:0b:78:4a:1f:72:95:
9f:98:8e:30:49:b8:bc:2f:5a:82:72:25:62:c3:a0:
eb:d6:c9:92:b9:8c:a8:8d:ba:c1:0b:12:ae:38:c6:
f8:a5:56:2f:5d:7c:a1:16:3e:74:cf:4c:0b:1c:4a:
44:3c:ef:8c:d3:d5:72:7c:a2:f8:1a:96:2d:92:7b:
3d:b9:62:ad:20:3a:51:0a:e7:94:53:ce:50:c2:9d:
01:ee:58:4f:26:fb:2d:ec:d0:75:3c:87:b7:ec:c0:
67:3f:bb:2a:da:06:84:3c:ba:40:87:97:6e:c7:33:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:81:0E:11:04:4D:88:19:A1:FF:1D:7D:BB:4C:D0:A5:17:2F:C9:85
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1e:34:bc:56:83:1c:c5:de:b1:d0:7d:89:e7:5f:69:46:91:
cb:0e:58:85:5d:0e:10:4d:4d:3b:0d:cd:ef:b7:90:90:a3:da:
d8:c8:4b:e9:9e:1e:08:93:af:25:11:2b:38:82:98:7c:91:82:
ad:7b:29:1b:f3:e2:83:6d:bb:03:37:29:ff:34:3c:68:fa:3f:
52:ec:bc:48:dc:f1:94:0b:a4:d7:a2:66:c5:14:cd:25:4f:c8:
49:b0:04:b0:68:39:24:f9:6c:54:87:80:47:0e:ff:09:c3:7f:
49:0a:47:3f:3c:a3:b2:36:d0:a3:6e:26:71:79:ea:6b:02:9b:
5e:34:bf:56:e4:28:9c:ed:8e:5d:6b:be:dd:0a:b2:52:c5:20:
d4:0a:a2:73:ab:77:fc:6f:9f:75:3e:a2:5b:a2:28:05:21:14:
bc:3c:c9:2c:5e:52:1a:12:e0:1c:3c:77:fc:e1:54:20:63:57:
0d:a7:2b:55:fd:33:bd:be:78:c3:0b:25:1f:08:ec:8f:53:be:
af:59:ac:49:3b:37:89:70:ed:d3:ae:c2:6b:db:0c:70:94:8a:
59:d3:a2:1f:17:39:24:09:ae:0d:f0:dc:bb:a7:6a:6b:cc:0b:
82:aa:a3:ee:7e:33:5d:f4:bd:a1:6c:c3:77:cc:71:d4:a1:ea:
9d:86:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:27:25 2025 by rpki-client