Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json)
Hash identifier: pY+TRXknxuMTjcSXXoVtZ02hanw9DCRx/T0Aruwakxg=
Subject key identifier: 0B:C3:BB:31:D5:02:03:11:2F:33:0E:37:A0:61:A8:E6:FC:92:68:D3
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 019873E3883A9E17DE131103343621688592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:27 +0000
Manifest this update: Mon 04 Aug 2025 07:02:27 +0000
Manifest next update: Tue 05 Aug 2025 07:02:27 +0000
Files and hashes: 1: M4l3Cf3_669djsGWrF7n0AJt83M.roa (hash: MY4UMlUb6Y1AsO5cCAn8IrigWcCAqjlArLI2bOv+PX8=)
2: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: FJFTKItPfj152tRPUlM1sKt/azINfnh9ycMQkLNwC7s=)
3: TXoJbYdgwtSRoMICf6BpMrQmJMs.roa (hash: Ede1kltXJewHDWyl80pDm1qv2UWiny8U21Nq2Z6l0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:88:3a:9e:17:de:13:11:03:34:36:21:68:85:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Aug 4 07:02:27 2025 GMT
Not After : Aug 5 07:02:27 2025 GMT
Subject: CN=0bc3bb31d50203112f330e37a061a8e6fc9268d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:17:ff:86:8f:de:9b:cb:cf:c8:ce:fa:3c:
b7:da:86:01:d9:fd:1f:0e:42:29:88:9e:9f:36:3a:
16:6c:1b:3a:67:a9:26:cb:dd:a9:1a:eb:18:bb:40:
5c:b1:8a:d2:97:67:d5:0f:98:78:9a:bb:04:4c:d9:
85:f2:46:17:d7:03:1c:04:95:65:eb:52:e2:d9:da:
6a:d3:9c:18:a6:68:65:85:ac:31:f8:2a:53:68:20:
56:31:6e:dd:6f:67:aa:1f:25:77:00:e4:75:97:6d:
50:cf:a2:2e:43:d5:cd:91:54:51:b5:9f:7b:04:48:
c4:19:93:3f:ea:fc:ae:15:9f:5b:da:b1:62:13:32:
2a:dd:2f:fa:9d:68:6b:7e:d0:8b:11:01:94:6b:ac:
b6:08:3a:4c:0f:34:29:3b:2f:8b:08:9c:42:1b:80:
e2:f8:f0:b2:7d:ea:3a:b8:fa:89:93:cd:d1:68:55:
ea:43:80:9e:3e:d3:e1:f0:0e:7c:e4:f4:94:96:b3:
64:a3:f6:63:78:0d:ae:c5:8a:70:99:3d:2c:5b:a6:
54:ba:a9:d5:e4:b9:0f:92:6f:2e:dc:0b:55:f4:79:
bf:49:3d:46:ef:db:7b:e4:e5:c2:bc:02:0c:13:4a:
a2:9a:e4:0a:8a:4c:88:b8:14:60:24:6a:a5:f8:f9:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:BB:31:D5:02:03:11:2F:33:0E:37:A0:61:A8:E6:FC:92:68:D3
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e0:6c:dc:6b:be:2e:2f:1e:51:bf:93:63:6f:b2:f4:be:f7:
a4:b8:f5:09:ac:ef:ef:1d:24:5c:45:41:70:24:01:a6:15:6b:
49:ad:d8:02:2e:0b:9e:74:a0:16:04:04:a3:71:5e:06:81:11:
cd:79:48:69:8b:73:65:f7:f4:84:44:04:b0:05:ce:e7:c5:01:
37:b6:6d:61:8d:09:ec:33:f1:08:e6:43:92:5e:86:6b:48:7b:
e3:22:48:31:ad:e5:01:8c:fa:b8:e9:30:21:4c:78:e6:c6:fa:
66:c8:3e:57:fc:cd:d0:61:7a:c6:15:c6:8b:82:35:c1:33:e4:
ef:7f:2a:b3:58:4c:fa:d1:64:13:9b:a1:d8:17:7a:6d:93:0f:
42:83:11:90:6d:21:8b:b0:f3:72:38:3c:1f:1a:c0:46:d2:a3:
76:c8:19:1b:03:2d:c4:a5:5e:4f:d0:f8:19:e6:33:14:bc:96:
31:6a:38:fa:6a:33:70:fc:3c:69:61:93:9a:2a:bf:e4:3d:ab:
7a:8e:d4:88:84:30:65:fd:6d:16:83:a1:62:5f:16:be:e3:15:
a3:24:a0:f4:f8:45:6e:77:dd:bb:64:a2:74:7a:c3:62:6f:65:
dc:23:a0:26:95:56:3d:75:1e:af:7b:6c:35:55:79:6d:3d:87:
28:e2:d1:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz44g6nhfeExEDNDYhaIWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5M2NjOGI3ZDJkYzcwYTI3ZDQwZmE0NTllNGU1NmMwMDVj
Y2M2M2EwHhcNMjUwODA0MDcwMjI3WhcNMjUwODA1MDcwMjI3WjAzMTEwLwYDVQQD
EygwYmMzYmIzMWQ1MDIwMzExMmYzMzBlMzdhMDYxYThlNmZjOTI2OGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhkX/4aP3pvLz8jO+jy32oYB2f0f
DkIpiJ6fNjoWbBs6Z6kmy92pGusYu0BcsYrSl2fVD5h4mrsETNmF8kYX1wMcBJVl
61Li2dpq05wYpmhlhawx+CpTaCBWMW7db2eqHyV3AOR1l21Qz6IuQ9XNkVRRtZ97
BEjEGZM/6vyuFZ9b2rFiEzIq3S/6nWhrftCLEQGUa6y2CDpMDzQpOy+LCJxCG4Di
+PCyfeo6uPqJk83RaFXqQ4CePtPh8A585PSUlrNko/ZjeA2uxYpwmT0sW6ZUuqnV
5LkPkm8u3AtV9Hm/ST1G79t75OXCvAIME0qimuQKikyIuBRgJGql+PnpZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvDuzHVAgMRLzMON6BhqOb8kmjTMB8GA1UdIwQY
MBaAFDk8yLfS3HCifUD6RZ5OVsAFzMY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzcwMDItZTc1Zi00MjAxLTk5ODgt
OTkxYTFjNzE0Zjk1LzEvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMzcwMDItZTc1Zi00MjAxLTk5ODgtOTkxYTFjNzE0Zjk1
LzEvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOBs3Gu+
Li8eUb+TY2+y9L73pLj1Cazv7x0kXEVBcCQBphVrSa3YAi4LnnSgFgQEo3FeBoER
zXlIaYtzZff0hEQEsAXO58UBN7ZtYY0J7DPxCOZDkl6Ga0h74yJIMa3lAYz6uOkw
IUx45sb6Zsg+V/zN0GF6xhXGi4I1wTPk738qs1hM+tFkE5uh2Bd6bZMPQoMRkG0h
i7Dzcjg8HxrARtKjdsgZGwMtxKVeT9D4GeYzFLyWMWo4+mozcPw8aWGTmiq/5D2r
eo7UiIQwZf1tFoOhYl8WvuMVoySg9PhFbnfdu2SidHrDYm9l3COgJpVWPXUer3ts
NVV5bT2HKOLRvQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:20 2025 by rpki-client