Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
File: Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft (raw, json)
Hash identifier: AieFlNtOsRpXmoKj1q59bE7szZxAVGYOK1GbA3L5wfA=
Subject key identifier: 71:21:09:B5:14:E4:82:BC:74:3F:46:21:38:13:62:C9:AE:49:10:86
Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
Certificate issuer: /CN=3adfd48a97720cd854029ddb266c51f91f07670d
Certificate serial: 01987418E8D7C8E090BEEDF4D4534CC5572E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
Manifest number: 0C17
Signing time: Mon 04 Aug 2025 08:00:46 +0000
Manifest this update: Mon 04 Aug 2025 08:00:46 +0000
Manifest next update: Tue 05 Aug 2025 08:00:46 +0000
Files and hashes: 1: Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl (hash: 4f1exkAUX7W8QqgyoD7qn4WFc6aWek+et0gTJx+e8cc=)
2: vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa (hash: lyBGyAokiSjopS7O45WDbuUZk8SIrQSCpnYKsmtEQ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:e8:d7:c8:e0:90:be:ed:f4:d4:53:4c:c5:57:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d
Validity
Not Before: Aug 4 08:00:46 2025 GMT
Not After : Aug 5 08:00:46 2025 GMT
Subject: CN=712109b514e482bc743f4621381362c9ae491086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:25:42:51:dc:78:33:3b:85:bb:53:c6:8c:
17:4f:6b:45:f9:9f:c2:05:28:d3:43:44:73:03:e5:
d3:76:52:6f:d3:17:65:eb:1e:f3:ab:36:d6:2c:da:
23:30:85:34:bc:e0:5e:ef:7e:5d:8c:ff:7a:ed:61:
a7:8b:97:0e:41:07:b4:12:a5:56:cd:e3:1e:a1:96:
94:c2:55:23:8c:d1:a3:9e:f5:73:91:ac:62:5b:54:
11:7e:d6:04:64:ef:0c:99:73:09:f0:8b:8d:bc:63:
c5:a5:73:c6:89:e2:3b:15:36:14:03:39:3a:91:a2:
77:57:f7:77:b0:0b:a7:fa:79:a7:56:17:1c:44:2f:
b5:3c:3f:5d:b4:14:50:b4:a7:ae:46:e1:72:c3:d2:
15:fa:ea:b1:9c:4b:99:57:8d:de:72:06:dd:6c:f4:
42:31:23:d5:76:25:57:17:b4:ad:05:7e:1e:28:d2:
1c:5d:ef:33:f9:cf:1a:bc:da:1c:c8:46:a8:85:f4:
2d:86:6c:0f:da:df:84:46:91:6f:6c:44:8d:44:23:
e2:99:d0:d1:d0:ac:ae:da:27:48:a4:4f:99:b2:91:
92:ea:26:9f:c6:5f:f2:8f:d8:4a:a3:65:6f:d4:9e:
a6:ae:90:74:20:c1:1c:ca:72:35:bc:05:d9:86:d8:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:21:09:B5:14:E4:82:BC:74:3F:46:21:38:13:62:C9:AE:49:10:86
X509v3 Authority Key Identifier:
keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8a:ca:45:37:9c:f4:12:36:87:c5:35:fd:bd:3a:e1:07:1a:
99:30:72:fc:dc:f7:e5:18:27:05:fc:53:a2:85:52:86:2f:0a:
dc:95:80:da:4e:fd:4b:e4:84:83:59:50:f4:b7:19:07:bf:d5:
49:45:31:0e:5b:cb:23:71:e0:c0:37:43:1a:02:79:93:10:6d:
f9:0a:27:a2:dc:e0:3b:3a:5c:33:98:5a:40:5c:43:92:f9:50:
c6:47:0d:c5:96:e2:ff:41:1f:44:87:d9:2c:ad:11:07:b9:37:
d0:af:a1:6e:85:a0:9f:ff:58:ce:aa:14:a7:21:95:10:df:7b:
eb:53:a2:5c:fa:dd:f7:fc:1b:b8:ba:b6:2c:b6:6f:dd:34:fd:
5e:d9:e5:29:25:86:f2:51:ab:bc:1c:52:fd:0c:e9:d1:bf:3f:
94:bf:77:36:d8:f8:e1:76:7a:a3:ec:73:2d:eb:c9:cb:da:c5:
a8:4a:ac:8c:f5:53:ef:01:4a:4d:ae:66:b0:0b:35:02:80:cb:
3a:01:4d:b5:db:7a:55:28:dc:04:17:51:83:0c:a0:98:33:81:
10:0d:5c:b0:27:63:02:48:58:a8:47:40:9d:77:0c:f5:7e:c2:
76:b6:b4:4f:8f:4b:3f:c4:81:bf:79:55:94:69:85:13:eb:9f:
93:1d:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:55 2025 by rpki-client