
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: 9/3jS1KoGFr1+CiFCDd4E8ITyfB3Q26lNMlPb046Crw=
Subject key identifier: AB:97:68:6A:D7:8F:FD:4B:A1:2E:4A:84:9C:97:97:EA:D6:13:26:1E
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 01978B47F6C1C2418D750BFB843A81087941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 0E43
Signing time: Fri 20 Jun 2025 03:00:38 +0000
Manifest this update: Fri 20 Jun 2025 03:00:38 +0000
Manifest next update: Sat 21 Jun 2025 03:00:38 +0000
Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: m7oOpB1WwoTOAYLoH6l+JPjDkj7h6nfeqfgAqcE++Ow=)
2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:47:f6:c1:c2:41:8d:75:0b:fb:84:3a:81:08:79:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Jun 20 03:00:38 2025 GMT
Not After : Jun 21 03:00:38 2025 GMT
Subject: CN=ab97686ad78ffd4ba12e4a849c9797ead613261e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:d3:64:fe:c4:1a:71:9f:77:73:88:61:c0:
a3:30:e6:c4:a5:51:3f:9c:af:37:45:a9:8f:0b:ac:
80:a8:51:4f:20:62:19:61:8a:de:d2:8a:bc:60:ef:
8c:48:a4:15:ff:68:8d:45:1c:f2:8e:7a:e3:64:44:
dc:9c:57:76:bc:68:30:69:a2:97:a1:1c:21:c3:1f:
b3:1d:6f:2f:55:08:80:38:98:31:41:41:67:6c:a5:
d2:5b:79:83:49:6a:4c:9e:fc:d3:81:ae:a8:d3:d1:
25:3a:0b:d0:d9:77:b8:67:7f:36:76:e1:61:24:ac:
d2:c3:65:d7:17:30:98:46:3f:23:52:7a:bd:a6:37:
a5:ae:d9:84:84:15:6e:17:0a:26:31:13:b0:bd:7c:
3a:1b:3d:46:79:f5:f2:65:22:4f:f2:00:5b:6b:76:
57:84:fa:e0:77:20:6e:0b:ce:8e:0d:2c:f0:18:ac:
1d:1d:77:85:95:5f:e9:75:70:6f:42:2b:26:d8:56:
ac:e2:15:60:6e:74:36:71:4c:b7:32:84:4f:a3:e6:
85:52:10:73:9e:79:df:4d:2b:96:8c:26:dd:81:9c:
a2:f1:b9:9c:b9:90:39:c1:f8:44:83:0f:93:1c:75:
b0:64:6b:4b:02:3c:3c:5e:94:79:b7:52:b3:fa:c6:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:97:68:6A:D7:8F:FD:4B:A1:2E:4A:84:9C:97:97:EA:D6:13:26:1E
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e9:67:d1:2c:20:1e:8e:4d:80:1f:be:7f:b0:56:d9:0b:58:
c9:d5:a0:80:38:aa:a0:0c:2f:12:cf:a3:c9:6f:de:4e:2a:9d:
29:0c:36:bb:ce:d6:54:44:c2:8b:8e:8f:1c:7e:8f:b8:e4:96:
57:87:11:00:91:f2:07:e7:56:10:f1:5e:53:9c:59:31:e8:8c:
52:48:f9:c9:ba:25:7a:61:a6:ec:f5:5a:c8:29:ee:78:64:65:
a1:26:b4:73:06:c3:9b:40:0a:15:82:24:e6:fe:c3:0d:13:46:
57:84:12:9d:e1:56:6b:57:a3:7c:6a:2b:9c:67:d8:f2:1d:ea:
e1:00:0c:26:1e:93:01:7b:f8:f0:8b:c3:e6:39:74:a3:bf:93:
71:aa:9d:da:47:03:26:68:b7:62:fb:89:1b:a8:d1:1f:1a:3f:
7a:d0:d4:35:a0:99:89:6b:68:17:bb:cf:45:af:da:5c:3f:74:
cb:d7:98:dc:cf:ad:3b:b9:4a:8d:e7:98:3f:14:70:ca:a7:c1:
56:1d:2a:77:23:05:b7:f0:7d:21:12:cd:40:a3:8c:8d:45:c8:
c0:dc:cd:1d:d6:11:db:2f:ab:0f:e0:a2:cc:4b:66:fd:7f:84:
29:68:84:69:c2:4b:eb:20:25:f2:b7:f6:54:23:29:c6:e0:cf:
10:3d:94:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeLR/bBwkGNdQv7hDqBCHlBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Mzc0MDE5YTU0ZDRiZGUyM2YwZGEyOGEyNTIxNTBkNWNi
NDczYWQwHhcNMjUwNjIwMDMwMDM4WhcNMjUwNjIxMDMwMDM4WjAzMTEwLwYDVQQD
EyhhYjk3Njg2YWQ3OGZmZDRiYTEyZTRhODQ5Yzk3OTdlYWQ2MTMyNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyzTZP7EGnGfd3OIYcCjMObEpVE/
nK83RamPC6yAqFFPIGIZYYre0oq8YO+MSKQV/2iNRRzyjnrjZETcnFd2vGgwaaKX
oRwhwx+zHW8vVQiAOJgxQUFnbKXSW3mDSWpMnvzTga6o09ElOgvQ2Xe4Z382duFh
JKzSw2XXFzCYRj8jUnq9pjelrtmEhBVuFwomMROwvXw6Gz1GefXyZSJP8gBba3ZX
hPrgdyBuC86ODSzwGKwdHXeFlV/pdXBvQism2Fas4hVgbnQ2cUy3MoRPo+aFUhBz
nnnfTSuWjCbdgZyi8bmcuZA5wfhEgw+THHWwZGtLAjw8XpR5t1Kz+sbouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuXaGrXj/1LoS5KhJyXl+rWEyYeMB8GA1UdIwQY
MBaAFDk3QBmlTUveI/DaKKJSFQ1ctHOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgt
YmJkMWFkNTNkYTQzLzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgtYmJkMWFkNTNkYTQz
LzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOln0Swg
Ho5NgB++f7BW2QtYydWggDiqoAwvEs+jyW/eTiqdKQw2u87WVETCi46PHH6PuOSW
V4cRAJHyB+dWEPFeU5xZMeiMUkj5ybolemGm7PVayCnueGRloSa0cwbDm0AKFYIk
5v7DDRNGV4QSneFWa1ejfGornGfY8h3q4QAMJh6TAXv48IvD5jl0o7+Tcaqd2kcD
Jmi3YvuJG6jRHxo/etDUNaCZiWtoF7vPRa/aXD90y9eY3M+tO7lKjeeYPxRwyqfB
Vh0qdyMFt/B9IRLNQKOMjUXIwNzNHdYR2y+rD+CizEtm/X+EKWiEacJL6yAl8rf2
VCMpxuDPED2UEA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 10:36:04 2025 by rpki-client