Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: JR+Q9Vda/ljxA2he1x2BOpsvXV8ZDm3IlmCjfkX5oP4=
Subject key identifier: 46:05:E7:36:9F:E1:F3:98:31:51:38:96:69:66:B1:F1:A6:C3:E3:3F
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019887D6D415CE11EA3E0A8375EFAADBE48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 0463
Signing time: Fri 08 Aug 2025 04:00:59 +0000
Manifest this update: Fri 08 Aug 2025 04:00:59 +0000
Manifest next update: Sat 09 Aug 2025 04:00:59 +0000
Files and hashes: 1: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (hash: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: lmj+ghZOMWRautBN0WT988PapyT6SeZDJQ9KhXpG3eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:d4:15:ce:11:ea:3e:0a:83:75:ef:aa:db:e4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Aug 8 04:00:59 2025 GMT
Not After : Aug 9 04:00:59 2025 GMT
Subject: CN=4605e7369fe1f398315138966966b1f1a6c3e33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:86:f8:f4:62:fc:0d:d8:58:28:a7:8e:e8:
8b:7d:82:f1:69:09:58:e6:01:01:45:24:99:63:f7:
3b:b4:86:81:32:3f:d6:bf:e8:b4:ad:63:d5:2d:b9:
36:91:fa:9b:e9:fe:d1:44:7d:40:fb:41:33:7b:1f:
3c:82:e5:e5:23:ca:66:ff:70:0d:91:dc:18:9a:74:
bb:50:b9:40:d2:76:1f:c4:2c:a1:1d:58:ea:c3:af:
9f:0b:d7:39:ec:8b:b6:df:fa:9a:f6:0a:d8:4e:f3:
56:8b:d9:3e:7d:82:e4:d0:e3:e5:31:7e:60:59:47:
ff:d7:5f:0b:97:80:96:7b:8e:da:1b:31:70:65:2d:
df:61:43:e4:6a:52:13:ae:39:65:fd:24:1c:3e:6e:
4e:71:c0:06:a6:cb:e2:3f:72:0a:c2:2a:2b:81:71:
b4:a8:8d:04:8c:b4:41:5f:82:48:c3:1a:b1:48:d2:
12:b7:5c:86:17:a9:3a:a9:19:28:aa:b4:36:ba:69:
d1:7a:07:a5:ee:d9:58:cb:95:60:71:4e:f6:39:63:
10:ff:a1:f4:b0:44:21:d4:fb:49:34:7f:fc:e5:0b:
96:d2:4b:b0:f4:b7:a7:be:ad:86:e8:da:c0:47:f2:
cd:8c:10:bd:35:81:2f:60:20:5e:0b:1d:7e:78:f2:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:05:E7:36:9F:E1:F3:98:31:51:38:96:69:66:B1:F1:A6:C3:E3:3F
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:46:b5:b0:89:ff:18:bf:a5:2a:09:9b:e7:a6:d5:8d:8f:ee:
08:41:93:2c:da:e4:ca:4c:13:ae:96:e5:22:eb:8d:e1:1d:70:
32:0c:be:61:ae:76:8b:ce:88:14:12:4e:97:e2:ea:7f:f5:ce:
c0:6d:89:71:60:d0:9d:50:64:da:27:ed:d5:d9:d9:ef:00:60:
e3:20:bb:a3:1f:c2:49:9a:b9:c2:7f:60:2e:cc:fc:da:22:22:
61:b6:4a:99:56:9b:9e:2c:7e:d5:54:d8:27:5c:71:6a:8d:d5:
83:7a:35:14:14:31:1c:af:1f:30:3d:00:01:8b:de:5e:0f:5a:
af:68:43:65:71:ae:9f:1d:fb:26:c8:16:f4:cb:a4:40:f7:6b:
62:45:3c:3c:9a:19:d8:b7:04:ca:41:45:4e:36:a9:6d:c9:e0:
bf:e5:92:d5:01:ca:34:0d:0d:46:41:d5:6a:92:1d:3a:d3:38:
7a:0c:9a:dc:45:20:3e:76:5d:62:02:e8:e4:a0:d9:95:45:b6:
c7:0c:cc:06:2f:18:40:b7:00:96:8d:71:ef:aa:43:bf:5a:0b:
f8:21:8b:b3:09:bc:5b:98:09:36:23:c6:2f:50:73:f3:17:14:
b8:b7:c7:53:66:7c:2e:60:4f:ba:c3:4a:18:1c:33:f9:9e:9c:
92:94:ba:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiH1tQVzhHqPgqDde+q2+SPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDVkN2M3YmU5MTI2NTBkNzE0MjNjZDNjMjUxNmRhOTQw
OWVkYjYwHhcNMjUwODA4MDQwMDU5WhcNMjUwODA5MDQwMDU5WjAzMTEwLwYDVQQD
Eyg0NjA1ZTczNjlmZTFmMzk4MzE1MTM4OTY2OTY2YjFmMWE2YzNlMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA+G+PRi/A3YWCinjuiLfYLxaQlY
5gEBRSSZY/c7tIaBMj/Wv+i0rWPVLbk2kfqb6f7RRH1A+0Ezex88guXlI8pm/3AN
kdwYmnS7ULlA0nYfxCyhHVjqw6+fC9c57Iu23/qa9grYTvNWi9k+fYLk0OPlMX5g
WUf/118Ll4CWe47aGzFwZS3fYUPkalITrjll/SQcPm5OccAGpsviP3IKwiorgXG0
qI0EjLRBX4JIwxqxSNISt1yGF6k6qRkoqrQ2umnRegel7tlYy5VgcU72OWMQ/6H0
sEQh1PtJNH/85QuW0kuw9Lenvq2G6NrAR/LNjBC9NYEvYCBeCx1+ePJnjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYF5zaf4fOYMVE4lmlmsfGmw+M/MB8GA1UdIwQY
MBaAFDrV18e+kSZQ1xQjzTwlFtqUCe22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYt
MWM2M2RhY2FiZGU5LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYtMWM2M2RhY2FiZGU5
LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApka1sIn/
GL+lKgmb56bVjY/uCEGTLNrkykwTrpblIuuN4R1wMgy+Ya52i86IFBJOl+Lqf/XO
wG2JcWDQnVBk2ift1dnZ7wBg4yC7ox/CSZq5wn9gLsz82iIiYbZKmVabnix+1VTY
J1xxao3Vg3o1FBQxHK8fMD0AAYveXg9ar2hDZXGunx37JsgW9MukQPdrYkU8PJoZ
2LcEykFFTjapbcngv+WS1QHKNA0NRkHVapIdOtM4egya3EUgPnZdYgLo5KDZlUW2
xwzMBi8YQLcAlo1x76pDv1oL+CGLswm8W5gJNiPGL1Bz8xcUuLfHU2Z8LmBPusNK
GBwz+Z6ckpS6aQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:11 2025 by rpki-client