Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json)
Hash identifier: V2HSV4we2vYgHdl1T0AiKNZ2QY6FFbmTIjWOGC6b1h8=
Subject key identifier: CA:AC:BE:E0:FA:6B:C4:6D:4E:11:D2:95:D5:3C:42:1E:D4:FF:F6:7F
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 01976F2C2BE9BC9CACFF3974EFA8AC3FED12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 16:00:55 +0000
Manifest this update: Sat 14 Jun 2025 16:00:55 +0000
Manifest next update: Sun 15 Jun 2025 16:00:55 +0000
Files and hashes: 1: M4l3Cf3_669djsGWrF7n0AJt83M.roa (hash: MY4UMlUb6Y1AsO5cCAn8IrigWcCAqjlArLI2bOv+PX8=)
2: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: LZovkz5mFw2B1RXG/mup7VktCwIcozNwKPYlQog9iWA=)
3: TXoJbYdgwtSRoMICf6BpMrQmJMs.roa (hash: Ede1kltXJewHDWyl80pDm1qv2UWiny8U21Nq2Z6l0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:2b:e9:bc:9c:ac:ff:39:74:ef:a8:ac:3f:ed:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Jun 14 16:00:55 2025 GMT
Not After : Jun 15 16:00:55 2025 GMT
Subject: CN=caacbee0fa6bc46d4e11d295d53c421ed4fff67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:4e:ab:c6:15:20:2f:2a:a6:f8:5c:e6:08:
f0:eb:7f:cc:cb:a1:b3:1f:74:55:d9:10:c1:ad:ed:
6c:b0:bb:1f:31:52:df:a5:8c:98:8e:80:c8:b1:fc:
51:df:75:3e:d2:c8:78:1b:7d:24:8a:81:50:d8:e9:
1c:65:57:9b:be:d5:85:39:bb:2e:df:14:d5:d9:2e:
b7:3e:31:c2:ac:97:a3:c3:50:e0:98:57:3e:34:39:
c4:50:a0:df:03:4d:eb:2c:8e:30:38:b9:4c:71:60:
4f:9e:99:8a:a2:03:84:b9:fc:b2:32:33:bf:10:cb:
f7:68:24:75:09:b9:00:cf:51:dc:95:c2:3b:c2:fb:
aa:9b:73:68:9c:a3:b4:dc:33:9c:29:29:9d:3a:31:
5e:95:24:01:ae:bf:fd:08:b0:b9:be:07:fd:0f:2d:
d1:5c:37:96:bb:e3:4d:50:0e:29:06:f1:fb:4a:2e:
b6:7a:39:9a:14:f3:da:20:06:2b:1b:18:d7:d7:3d:
f4:3d:c2:d1:ef:aa:0e:5b:46:b4:17:73:80:f9:b3:
00:c0:59:6d:45:9f:55:e8:3f:9d:7a:ec:2b:a7:96:
13:e8:68:f0:de:ca:ed:b6:7c:d1:0d:3f:78:5d:60:
64:29:7a:fc:77:e3:6e:27:f9:a4:ed:59:f4:e8:b9:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AC:BE:E0:FA:6B:C4:6D:4E:11:D2:95:D5:3C:42:1E:D4:FF:F6:7F
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:64:c7:aa:1e:88:dc:d7:d2:9e:4d:6a:b0:1e:a7:9f:55:9c:
01:d2:ee:5f:b3:05:8a:9c:5b:4a:41:fe:4f:81:ba:a3:a1:7d:
12:74:6e:26:84:ac:c4:70:23:86:13:c0:a0:d7:25:d6:73:59:
8c:13:4c:6d:86:40:65:eb:7d:04:ce:dd:81:bb:3f:2e:86:d8:
ed:36:df:d9:3d:3c:c8:2e:51:39:f9:19:02:0e:64:dc:fe:b0:
ee:e1:3f:d4:da:5e:4a:2a:7e:a8:70:16:0a:ba:8a:74:38:1e:
ea:b6:8c:26:a0:9f:ef:aa:1e:d0:60:5a:59:d1:99:d4:94:d4:
d2:17:d2:27:70:26:b4:6b:d6:d1:d4:49:ae:5a:b8:ac:70:df:
41:21:ec:e8:d2:3d:08:8b:f3:eb:84:3f:cb:d8:ad:36:38:49:
a1:ab:44:02:08:2b:86:36:32:66:05:f0:9d:78:72:b0:6d:a5:
35:b6:1f:78:51:1a:75:fc:9b:a7:b1:3c:b3:be:9f:86:c3:8d:
49:53:89:ec:1e:1b:7a:68:dc:8c:de:9f:e5:a5:2b:67:cb:f0:
20:6c:49:6b:03:11:66:75:c4:70:f9:bd:3f:0a:0f:18:f6:f5:
79:99:b3:87:17:d2:a8:26:d7:69:dc:55:a5:23:81:be:8b:d5:
42:9f:6b:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLCvpvJys/zl076isP+0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5M2NjOGI3ZDJkYzcwYTI3ZDQwZmE0NTllNGU1NmMwMDVj
Y2M2M2EwHhcNMjUwNjE0MTYwMDU1WhcNMjUwNjE1MTYwMDU1WjAzMTEwLwYDVQQD
EyhjYWFjYmVlMGZhNmJjNDZkNGUxMWQyOTVkNTNjNDIxZWQ0ZmZmNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OtOq8YVIC8qpvhc5gjw63/My6Gz
H3RV2RDBre1ssLsfMVLfpYyYjoDIsfxR33U+0sh4G30kioFQ2OkcZVebvtWFObsu
3xTV2S63PjHCrJejw1DgmFc+NDnEUKDfA03rLI4wOLlMcWBPnpmKogOEufyyMjO/
EMv3aCR1CbkAz1HclcI7wvuqm3NonKO03DOcKSmdOjFelSQBrr/9CLC5vgf9Dy3R
XDeWu+NNUA4pBvH7Si62ejmaFPPaIAYrGxjX1z30PcLR76oOW0a0F3OA+bMAwFlt
RZ9V6D+deuwrp5YT6Gjw3srttnzRDT94XWBkKXr8d+NuJ/mk7Vn06Lk36wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqsvuD6a8RtThHSldU8Qh7U//Z/MB8GA1UdIwQY
MBaAFDk8yLfS3HCifUD6RZ5OVsAFzMY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzcwMDItZTc1Zi00MjAxLTk5ODgt
OTkxYTFjNzE0Zjk1LzEvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMzcwMDItZTc1Zi00MjAxLTk5ODgtOTkxYTFjNzE0Zjk1
LzEvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmTHqh6I
3NfSnk1qsB6nn1WcAdLuX7MFipxbSkH+T4G6o6F9EnRuJoSsxHAjhhPAoNcl1nNZ
jBNMbYZAZet9BM7dgbs/LobY7Tbf2T08yC5ROfkZAg5k3P6w7uE/1NpeSip+qHAW
CrqKdDge6raMJqCf76oe0GBaWdGZ1JTU0hfSJ3AmtGvW0dRJrlq4rHDfQSHs6NI9
CIvz64Q/y9itNjhJoatEAggrhjYyZgXwnXhysG2lNbYfeFEadfybp7E8s76fhsON
SVOJ7B4bemjcjN6f5aUrZ8vwIGxJawMRZnXEcPm9PwoPGPb1eZmzhxfSqCbXadxV
pSOBvovVQp9rog==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:54 2025 by rpki-client