Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: pM3G7PFKLHYiVYESV1+VOTIRhmZVFLkmCxCg/0K2+Uo=
Subject key identifier: 2E:CA:26:92:2B:02:71:40:EE:EC:C5:2D:9E:26:54:4C:C9:40:31:5E
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 01976D06DFF36C0E692E84DC6F6A64282250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 06:00:56 +0000
Manifest this update: Sat 14 Jun 2025 06:00:56 +0000
Manifest next update: Sun 15 Jun 2025 06:00:56 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: GjFmPGfXSpg/oRIZVbQwjK0vO2DLsRt8uKMng84zr0I=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:df:f3:6c:0e:69:2e:84:dc:6f:6a:64:28:22:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Jun 14 06:00:56 2025 GMT
Not After : Jun 15 06:00:56 2025 GMT
Subject: CN=2eca26922b027140eeecc52d9e26544cc940315e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:0a:06:b4:13:57:ae:d0:ef:25:95:0e:97:
78:1a:de:d6:b0:43:27:64:b7:68:91:7a:99:8e:3f:
91:28:24:a0:4a:c1:c9:22:19:71:50:ce:41:da:90:
2c:c5:93:f5:fc:dd:de:ff:77:c7:35:fe:7c:fb:bb:
9a:a5:7e:3b:6e:68:c6:dd:8e:60:70:52:f4:d3:ca:
91:32:d9:9d:bf:5e:5a:3f:47:41:2f:5f:5e:88:1a:
bd:99:b6:c5:06:01:7b:6c:fd:50:fc:35:fd:78:2b:
b2:b4:4c:0f:e7:a2:02:74:19:cb:81:56:6c:a4:35:
d8:89:f0:90:de:96:c9:ed:38:bd:ca:1e:3b:4c:5e:
37:3c:84:c1:f5:5e:2c:9e:ea:69:d1:ff:65:2f:09:
44:c3:27:49:27:92:c0:8c:ff:e4:50:3e:86:d2:d3:
5a:4c:73:87:f3:de:78:22:e6:0b:4e:71:51:ba:83:
a1:39:b9:b6:02:9a:d6:49:6a:ef:5f:87:9f:5d:df:
47:fc:44:d5:78:89:3d:83:97:b1:34:47:ce:c4:a9:
ce:2b:58:e3:df:7a:6e:86:7b:a4:b6:b9:66:e6:8c:
25:43:45:3f:7f:73:c8:b3:70:41:1b:97:d6:80:2c:
2f:56:59:ab:26:60:ff:c5:01:3c:fa:0f:b0:69:0d:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CA:26:92:2B:02:71:40:EE:EC:C5:2D:9E:26:54:4C:C9:40:31:5E
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0f:b6:c8:1a:b7:33:3e:66:6d:c0:7d:7a:e7:a8:63:06:87:
ad:26:a2:25:67:a5:8e:83:76:14:77:f8:55:af:ba:98:fa:b3:
7a:cb:4f:35:4f:39:39:1f:c1:68:f0:fd:42:63:5a:f7:6a:44:
2b:67:32:79:ad:68:d8:39:d3:bb:d5:0a:48:c2:92:03:28:a1:
1a:45:f6:f8:05:43:90:2f:88:a5:a5:42:fe:65:f2:34:3e:0e:
17:5d:e1:99:53:6a:15:e3:55:57:b1:a7:bf:74:20:cd:47:f1:
76:e1:14:a8:f6:c9:f8:27:0c:49:f8:c9:71:a6:bb:96:66:ef:
66:bc:2a:66:75:dc:0a:36:63:f3:6e:ba:26:f0:25:a6:4c:50:
6d:19:7a:0c:fc:c1:d7:cc:c0:66:53:07:ae:a8:8b:03:d5:f0:
5f:48:3c:a3:f1:1e:17:db:17:65:70:2d:24:87:98:dc:e0:c3:
bd:4d:22:3d:a8:fd:02:55:1b:92:93:27:e9:6f:b5:37:bb:2c:
f2:91:61:37:f8:de:39:57:ff:8d:bb:81:ba:89:b4:68:04:2b:
33:cb:07:b0:3e:be:8f:45:91:9d:5f:7c:33:8e:a5:cd:bc:a5:
13:9f:b7:49:b0:ff:33:9b:95:68:25:c7:52:a5:f6:50:a6:b5:
26:a2:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:11 2025 by rpki-client