Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: 3vW8OaCmetd1vAEEXDsn5ozo5VYrRfECIxDkSwXjZEU=
Subject key identifier: 62:B6:34:87:AB:AC:1D:85:E9:76:1F:0C:54:03:80:25:87:73:36:2E
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 01987B9C1054D2AC8AF4999E2D3C7D631421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 19:01:21 +0000
Manifest this update: Tue 05 Aug 2025 19:01:21 +0000
Manifest next update: Wed 06 Aug 2025 19:01:21 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: Xaua012AJxEJXPzOtiXQ8rEu5m/4wC6dv3SHTazt5CA=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:10:54:d2:ac:8a:f4:99:9e:2d:3c:7d:63:14:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Aug 5 19:01:21 2025 GMT
Not After : Aug 6 19:01:21 2025 GMT
Subject: CN=62b63487abac1d85e9761f0c540380258773362e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:fc:e4:60:00:cf:60:53:8c:d5:bd:b1:55:
3a:bf:99:3d:9d:53:17:9a:92:04:c1:f8:66:85:e8:
5e:08:0a:46:d4:07:cc:3a:45:06:67:c5:d7:f2:d6:
c2:af:b3:34:4f:60:fb:32:53:7c:78:5d:08:6a:f3:
fe:c1:63:dc:23:e9:83:e2:ed:e6:5a:1c:46:32:a5:
f3:b8:60:98:3a:1e:72:f8:62:05:3d:bf:04:a3:ec:
1e:62:25:05:c5:c9:61:12:03:39:11:e9:c7:41:e6:
b6:ed:49:1b:c7:22:b3:81:93:e1:30:85:1d:f4:19:
8b:0f:11:c5:20:8a:70:3c:67:46:e2:57:29:dc:3b:
8a:a8:4a:2c:3e:67:f2:82:72:7d:30:d0:06:9d:b4:
ac:7f:1b:82:10:61:2e:87:d7:55:89:57:84:b6:f8:
ca:3f:90:5e:73:3d:34:5d:45:ea:21:1e:00:7d:3c:
fa:39:bd:e7:0c:22:43:ad:a1:e4:6e:34:d0:01:70:
73:47:54:21:66:bc:67:e6:d0:59:fb:a5:72:02:13:
f4:21:8f:28:76:f0:b3:0a:f4:89:3c:aa:ed:9c:17:
e3:f7:b2:9d:aa:fb:29:21:2a:57:8e:db:0e:0a:ae:
65:f0:d8:16:04:9f:e5:b7:f5:eb:8d:2b:4d:be:f6:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B6:34:87:AB:AC:1D:85:E9:76:1F:0C:54:03:80:25:87:73:36:2E
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1d:24:f0:aa:e7:93:ea:b9:dd:45:06:6c:23:f1:a4:fe:7d:
7a:4f:ea:80:bd:6c:f7:f2:b0:30:2c:14:e9:cb:b0:4d:d7:a3:
ad:80:1e:92:00:f8:cf:2e:26:cd:65:13:03:29:f8:51:b8:57:
5a:16:25:eb:6f:ef:48:ac:b3:fa:eb:8e:a7:9a:62:8d:91:4b:
c4:34:d1:ea:74:95:85:d2:18:fd:f1:28:a7:1c:09:dc:16:ed:
a7:14:de:24:9c:1a:58:c2:c0:8f:ca:7a:1b:4e:22:7f:9b:b1:
56:fe:55:72:c7:d8:ab:ec:20:08:ed:7b:bc:50:0e:37:c7:e5:
09:be:6e:9f:a3:37:2d:10:10:21:85:bd:30:91:45:f1:ad:f5:
2a:f9:98:de:36:5d:4c:e1:b2:ae:e7:cf:2c:ea:34:fc:c2:66:
a6:91:a3:93:e5:5d:fd:da:b6:5b:03:2c:6a:24:12:f5:b7:bb:
63:a7:48:99:ab:5b:e0:4f:25:d9:e9:f1:90:0b:0d:ff:04:80:
29:52:e1:47:29:14:72:bd:3e:dd:5e:a5:83:a6:0b:9c:f0:03:
8c:fa:c9:e9:fc:a1:5c:50:20:99:15:01:be:ed:f9:3b:86:db:
bf:4d:ae:a9:bb:1d:47:cc:44:ef:a1:33:7d:50:c2:37:77:25:
d2:0d:a6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:37 2025 by rpki-client