Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: pZw/37/mVbY3ykuLWR8A/Mon4FUyJ0Aabw0c1PgukkQ=
Subject key identifier: A0:1B:45:79:E7:CD:B8:8E:1A:20:62:98:84:89:93:22:A9:20:95:95
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 01977A549EBAFF92D8A2A09B3DACB66995B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 20:00:55 +0000
Manifest this update: Mon 16 Jun 2025 20:00:55 +0000
Manifest next update: Tue 17 Jun 2025 20:00:55 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: YdTm38N1npkpNitaW6iYweyoUf2vlUJ3ApfEvbnuKtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:9e:ba:ff:92:d8:a2:a0:9b:3d:ac:b6:69:95:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jun 16 20:00:55 2025 GMT
Not After : Jun 17 20:00:55 2025 GMT
Subject: CN=a01b4579e7cdb88e1a20629884899322a9209595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:a7:3c:ee:a4:3f:dd:d0:68:26:67:d3:d8:
12:e5:24:78:d2:66:91:52:a2:f5:4e:74:cf:38:1a:
d1:a7:de:c8:1f:6a:13:eb:e3:fa:e1:e6:65:5a:7d:
77:9b:8b:c6:c7:de:e9:0c:b7:76:9f:57:57:f9:cb:
68:27:4b:e2:64:81:44:4f:ee:4d:c1:fa:73:97:7b:
99:ea:14:8f:f3:0a:e7:00:bb:ad:8c:76:77:b1:50:
dd:b8:25:88:c0:04:55:96:82:ab:33:6d:60:8a:49:
90:cf:d8:be:6c:ce:08:e9:12:90:31:91:62:8e:27:
6f:8a:56:e6:70:08:a6:90:6e:44:f8:1c:b5:a2:d9:
ae:69:be:20:0a:73:fa:18:c7:4a:4d:d1:b5:ee:ea:
ff:20:06:81:63:f7:38:2b:56:16:b5:64:9e:ed:d7:
06:d1:e8:44:82:f3:1a:75:d1:16:de:11:a0:29:c3:
05:d3:d4:00:6e:fd:8b:90:88:bc:86:0f:25:2e:62:
b8:3f:7b:64:bc:85:49:6d:e9:e4:0e:16:b5:b1:04:
08:22:c5:b8:0a:6b:56:01:37:f5:a7:e4:b8:fd:bb:
31:fa:f4:6c:08:6b:3d:99:64:06:dc:46:41:ab:ed:
71:a3:78:0b:85:f4:19:da:82:63:5c:fc:41:a0:d7:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1B:45:79:E7:CD:B8:8E:1A:20:62:98:84:89:93:22:A9:20:95:95
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:81:02:c4:15:47:61:1c:a4:bf:3f:68:97:62:09:49:d0:5b:
72:b0:1c:3a:ca:fd:eb:15:f7:c4:8f:bd:01:e3:6b:3c:a1:81:
6e:58:8d:af:20:30:e4:27:1d:fa:bb:21:89:b3:2f:2e:e3:da:
24:8c:05:62:4b:41:52:98:01:6b:0d:7e:66:9d:c2:6a:3c:72:
07:32:5e:1a:30:89:cd:0a:04:fd:c7:a6:b8:49:01:63:25:12:
8e:21:06:c0:af:70:c0:63:5d:ca:fe:7d:f1:ad:ec:4f:73:a5:
e2:90:01:cc:5a:b3:0f:df:92:5b:76:56:b8:0d:9c:6a:ca:78:
07:a6:86:cf:7b:74:0d:a3:06:b0:c7:a6:0f:e9:8e:2e:45:dc:
cd:4d:c2:de:0c:5c:00:aa:d4:74:c3:3b:55:ad:31:71:98:f9:
2e:9f:9c:df:88:c0:b0:c8:85:4f:e2:f6:ea:91:18:c9:f3:f8:
d7:dc:02:f1:ad:48:35:87:c5:a1:2a:fd:70:71:6a:3f:0e:60:
17:ff:d0:a9:6a:aa:05:a1:49:64:fd:40:45:39:e4:1c:c5:1e:
9c:a8:68:ab:73:50:48:1e:c3:33:fb:69:0f:de:c8:26:8f:6f:
17:70:b7:fa:fe:ee:2a:e7:0a:31:02:a6:97:7e:d3:fe:17:82:
d1:1c:19:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6VJ66/5LYoqCbPay2aZW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5M2QyZjBhOTYxOTlhMDYwODU2Y2Y2N2UyMTA1ZmRhMmNi
OTNkMzcwHhcNMjUwNjE2MjAwMDU1WhcNMjUwNjE3MjAwMDU1WjAzMTEwLwYDVQQD
EyhhMDFiNDU3OWU3Y2RiODhlMWEyMDYyOTg4NDg5OTMyMmE5MjA5NTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNmnPO6kP93QaCZn09gS5SR40maR
UqL1TnTPOBrRp97IH2oT6+P64eZlWn13m4vGx97pDLd2n1dX+ctoJ0viZIFET+5N
wfpzl3uZ6hSP8wrnALutjHZ3sVDduCWIwARVloKrM21gikmQz9i+bM4I6RKQMZFi
jidvilbmcAimkG5E+By1otmuab4gCnP6GMdKTdG17ur/IAaBY/c4K1YWtWSe7dcG
0ehEgvMaddEW3hGgKcMF09QAbv2LkIi8hg8lLmK4P3tkvIVJbenkDha1sQQIIsW4
CmtWATf1p+S4/bsx+vRsCGs9mWQG3EZBq+1xo3gLhfQZ2oJjXPxBoNeEIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAbRXnnzbiOGiBimISJkyKpIJWVMB8GA1UdIwQY
MBaAFDk9LwqWGZoGCFbPZ+IQX9osuT03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTkt
NjE5ZmE4MGI4ZDc0LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTktNjE5ZmE4MGI4ZDc0
LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoECxBVH
YRykvz9ol2IJSdBbcrAcOsr96xX3xI+9AeNrPKGBbliNryAw5Ccd+rshibMvLuPa
JIwFYktBUpgBaw1+Zp3CajxyBzJeGjCJzQoE/cemuEkBYyUSjiEGwK9wwGNdyv59
8a3sT3Ol4pABzFqzD9+SW3ZWuA2casp4B6aGz3t0DaMGsMemD+mOLkXczU3C3gxc
AKrUdMM7Va0xcZj5Lp+c34jAsMiFT+L26pEYyfP419wC8a1INYfFoSr9cHFqPw5g
F//QqWqqBaFJZP1ARTnkHMUenKhoq3NQSB7DM/tpD97IJo9vF3C3+v7uKucKMQKm
l37T/heC0RwZmw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:05:29 2025 by rpki-client