Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: eFxdVYt6Bh/TFhvuUdovvVKstDPLP/nV6cqJcqj++P4=
Subject key identifier: B1:36:A8:59:31:AA:D0:BC:C0:FE:8A:AE:8B:9D:FE:75:89:73:36:B9
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 019881D531E793B1B2AE1062D588369A0EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 161A
Signing time: Thu 07 Aug 2025 00:01:29 +0000
Manifest this update: Thu 07 Aug 2025 00:01:29 +0000
Manifest next update: Fri 08 Aug 2025 00:01:29 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: ha5CPcqrty9MtzL6Na9DGGwECkfBLM7zF938FkU2YmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:31:e7:93:b1:b2:ae:10:62:d5:88:36:9a:0e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Aug 7 00:01:29 2025 GMT
Not After : Aug 8 00:01:29 2025 GMT
Subject: CN=b136a85931aad0bcc0fe8aae8b9dfe75897336b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:55:c1:64:47:6e:5b:f9:c2:4c:b8:f9:7b:aa:
ac:b8:37:35:3e:ef:db:01:1a:a4:fe:d9:d0:43:8c:
a6:f3:78:38:ed:58:69:8f:b2:92:59:1b:ac:ea:b9:
cd:b0:40:3d:87:e5:59:d7:76:d5:12:a9:61:c0:60:
31:b3:e5:75:a7:87:fc:df:73:57:4b:88:9f:bd:a9:
d6:76:dc:3e:cd:7c:af:59:c4:93:37:59:90:39:50:
7a:65:30:69:8f:29:51:c6:d9:a4:d7:cb:24:dc:51:
ff:8e:59:ae:f4:9d:a3:81:b8:5c:2a:09:5d:72:d3:
8c:fa:31:ad:f5:73:19:1e:89:ed:7a:eb:d8:32:95:
e1:70:3d:2e:88:d7:6e:50:08:cf:67:44:87:a8:3a:
44:94:94:92:5f:be:62:72:c7:cf:b4:92:9b:69:61:
ff:84:6c:ac:17:99:d2:7f:f2:6a:3e:d2:69:2c:1c:
f4:35:13:c5:81:0a:bc:fe:19:6e:7f:56:cc:f8:8f:
e0:7e:3b:93:e3:0e:a7:2c:a3:d9:8e:c9:a9:f1:df:
63:6e:e1:0a:65:98:6b:39:61:cb:85:d0:4d:f8:4b:
3e:23:3e:bf:d0:fb:15:5e:88:2c:45:70:e1:a4:c5:
76:0c:51:99:6d:72:44:c2:0c:78:b4:7e:48:c2:cc:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:36:A8:59:31:AA:D0:BC:C0:FE:8A:AE:8B:9D:FE:75:89:73:36:B9
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:af:c1:fa:e8:26:f6:64:45:19:c6:94:ca:cd:f7:4e:d6:88:
ce:a8:de:50:ad:bc:5d:71:04:82:6c:3a:93:07:9f:28:df:e0:
e3:d0:c6:27:7f:cd:63:a0:39:42:6f:fd:f8:8d:85:cb:9d:06:
54:d0:c9:db:39:e7:3d:a3:b2:8c:81:d5:ab:1a:15:33:a2:c2:
36:3b:8f:da:cd:ce:26:8d:28:a8:63:8f:97:5f:b6:d4:e6:5c:
58:6d:6b:92:25:c8:15:fe:77:60:bb:d7:8c:16:d3:8b:5a:98:
47:e0:60:fc:f7:8a:97:34:df:28:89:86:64:8d:6f:f1:cc:ab:
12:20:e5:65:a1:b3:cb:12:c5:9c:78:48:34:7e:20:b7:f5:93:
07:ab:4b:9e:e9:48:07:fa:83:0f:44:1d:ae:f5:3c:6a:f2:e3:
e2:13:99:30:c9:9a:74:89:0f:d3:4d:66:8a:b5:97:24:18:18:
3e:0c:8f:25:fc:a9:09:8d:e1:77:ee:e4:0e:5f:f5:be:4b:b3:
3e:47:73:4a:79:7b:75:05:7c:95:39:b8:f2:d0:6e:10:8d:93:
de:d6:34:9f:fb:e2:4e:26:81:23:dd:f1:1d:02:4b:ca:4e:34:
ee:d7:c6:a0:94:11:db:22:5d:26:5d:73:0b:70:8b:cd:4a:91:
a7:02:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:26 2025 by rpki-client