Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier: jgN+O/7A7vSNAJXPr4t1tRCF3Yz2MpJXM0n4vA27H3g=
Subject key identifier: 05:03:BB:67:F1:EF:E8:7B:D0:58:99:CD:D0:47:1F:E9:A0:24:CF:7B
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial: 01987FE64911C43B71106D568EAF05CAFAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 15:00:55 +0000
Manifest this update: Wed 06 Aug 2025 15:00:55 +0000
Manifest next update: Thu 07 Aug 2025 15:00:55 +0000
Files and hashes: 1: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: EchKlLWW9xZhwa63s2wTPyG4ukgjTioHjnGL4sP6qsE=)
2: rtw5EuFYH3ySq0jw3-ZmGwFMoqo.roa (hash: Ii5lxajvlSV2gkqSCAYWVLgdyHye7gIbfTFfAGtSUlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:49:11:c4:3b:71:10:6d:56:8e:af:05:ca:fa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Validity
Not Before: Aug 6 15:00:55 2025 GMT
Not After : Aug 7 15:00:55 2025 GMT
Subject: CN=0503bb67f1efe87bd05899cdd0471fe9a024cf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3f:84:7d:37:be:ee:62:71:5d:5e:6c:05:7e:
c1:15:d0:b3:b9:09:d7:87:eb:c4:3d:fa:41:55:02:
ce:9d:e6:3b:88:a7:54:be:c6:ce:c4:1e:6b:a3:e2:
40:ea:29:33:10:92:fe:dd:63:ee:0f:d6:50:4b:ab:
73:c7:30:a0:58:ee:87:17:ae:bf:88:ea:f6:96:ee:
a7:57:5d:2e:e6:00:e6:f1:4b:44:e6:ad:67:5b:1b:
73:7e:97:4f:53:3d:79:f8:c6:bd:b7:8c:35:a4:db:
b5:e8:86:32:c8:36:51:19:97:94:33:79:dc:ec:39:
60:81:b7:54:c7:cf:66:f4:01:aa:1c:5f:8e:5c:16:
28:c5:08:7a:1f:ad:f7:80:58:1e:fa:74:a5:fc:5f:
05:f9:a3:0b:60:01:04:f2:dc:fb:7a:ab:4e:7a:9e:
bd:ac:c8:11:09:83:84:ad:af:f1:08:c8:65:bd:61:
f7:ef:00:68:4c:e2:b6:e3:ab:a6:aa:e8:6d:01:3f:
31:6c:92:ca:b6:c6:39:b2:2b:ef:c5:6f:ab:1b:76:
55:ee:89:d5:d6:35:39:8d:70:86:ab:86:97:43:6a:
71:20:d4:5f:3f:cb:cb:39:54:db:c3:5e:d6:65:86:
33:57:ce:80:32:3a:82:bb:84:86:5c:5a:19:28:ab:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:03:BB:67:F1:EF:E8:7B:D0:58:99:CD:D0:47:1F:E9:A0:24:CF:7B
X509v3 Authority Key Identifier:
keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:27:58:e0:c8:8d:ca:c1:c6:be:9b:e7:e2:18:17:55:68:73:
d0:5c:ac:65:92:cc:88:e7:49:a7:7b:17:52:76:d3:91:75:98:
83:19:29:4c:9a:90:d7:7d:2a:17:d4:80:fb:d2:d5:b2:1e:31:
4f:bb:53:88:25:91:d8:dc:b2:d5:19:94:b3:91:c6:cc:65:db:
ae:45:11:83:a9:98:78:11:c7:ce:8b:d6:17:38:4f:27:9b:db:
89:b8:00:4a:d8:9a:31:05:ce:5f:af:ad:93:e8:a0:5f:e2:21:
d8:ac:49:a3:ab:e9:65:24:9a:97:d7:6b:92:a7:a6:86:9c:fa:
c0:f7:4e:13:40:6b:d3:11:b2:f4:0c:c4:5e:b8:97:74:dd:2d:
86:b8:d8:de:09:ad:5f:14:8d:98:c6:c5:c7:b3:89:35:fe:ea:
9b:b5:6f:06:e0:a8:22:9b:c1:c7:83:7e:6c:96:61:dc:44:95:
33:9b:91:e6:9a:9d:00:e3:09:d6:ff:57:9e:a9:46:cc:22:51:
c3:80:18:eb:b7:58:2a:02:d3:f2:3c:e4:c3:8b:06:87:a2:1c:
25:d8:d2:a8:1c:94:4b:32:a0:49:68:1c:b2:79:f7:00:45:20:
45:61:ea:8c:a5:2a:51:7f:41:b5:c0:13:79:de:dc:20:bf:b0:
5c:45:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:18:49 2025 by rpki-client