Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: Nf0zvpPqZYx9VuP4zk9+5zLHsa+qXNxsbdLPsGTzL7w=
Subject key identifier: 5C:86:4E:81:D8:74:82:8C:22:11:0B:00:19:9E:72:8D:B6:2A:3A:2A
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 01977DFA337E7EC6BFA105E199B48DEA0A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 03F5
Signing time: Tue 17 Jun 2025 13:00:38 +0000
Manifest this update: Tue 17 Jun 2025 13:00:38 +0000
Manifest next update: Wed 18 Jun 2025 13:00:38 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: A3/oXzNxySaHCa70lCP/2jpbsoRMe0EN1CTjlFus2Co=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:fa:33:7e:7e:c6:bf:a1:05:e1:99:b4:8d:ea:0a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Jun 17 13:00:38 2025 GMT
Not After : Jun 18 13:00:38 2025 GMT
Subject: CN=5c864e81d874828c22110b00199e728db62a3a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:e1:55:9e:88:b8:ff:9d:14:e6:ea:47:48:
a9:80:5f:5b:51:3d:a1:14:6c:87:0e:5b:02:05:54:
3e:56:31:a7:36:80:af:d5:09:1a:fd:dd:48:0c:8a:
75:36:13:77:ac:45:c9:d0:02:fe:81:8f:58:93:c2:
b6:c6:a4:7f:c5:79:8c:ef:ba:04:14:32:86:20:ad:
39:fa:62:a4:57:c0:75:45:4a:2f:8b:7a:d4:b4:6d:
5b:cc:10:ac:1b:64:82:32:d0:d8:32:ca:bb:c1:be:
ca:83:d3:8c:93:f6:7a:e3:d1:00:ba:97:0f:14:f1:
ba:ab:79:71:b1:90:b5:e3:f6:01:d7:38:86:a0:98:
eb:58:48:e3:36:16:5b:1e:23:06:df:13:6d:19:00:
d1:ab:30:cb:09:e2:95:bf:c3:52:81:57:e9:74:b5:
b6:dd:fe:9e:60:50:bb:70:af:03:1b:a5:e9:c0:4d:
2d:68:f5:9e:35:b6:cf:e4:d4:88:8b:06:11:fe:a3:
36:4a:48:57:b3:e6:c1:50:cd:68:44:d6:7f:c3:77:
4c:b0:18:e5:f7:04:b6:95:8e:e3:f4:00:d4:0d:2c:
7f:2a:2f:55:43:5e:af:5c:3c:06:0f:9d:a3:98:92:
5b:fb:b2:35:66:aa:ae:d5:55:51:54:55:59:0e:c8:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:86:4E:81:D8:74:82:8C:22:11:0B:00:19:9E:72:8D:B6:2A:3A:2A
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1f:d9:8f:5a:0a:ba:e9:b1:fd:28:60:fc:9c:d1:ef:e4:69:
69:3c:a3:b2:b0:03:0e:0b:4c:0b:07:7c:d0:f2:58:fd:8a:a5:
04:5c:67:0e:58:6e:6a:90:cd:f8:13:31:78:bf:75:a4:4a:62:
bb:38:05:1e:8d:3c:2c:20:8a:4c:69:0f:10:a9:06:a5:89:91:
b2:08:9f:71:44:0d:69:07:9c:3b:bb:46:80:38:4d:14:15:1a:
c9:ba:10:15:67:22:17:65:97:f0:25:4b:d5:8f:7d:94:b0:aa:
b1:35:db:b8:86:f7:7f:0e:01:2e:7a:ee:b6:5f:96:74:f8:10:
84:61:a5:bd:ac:fb:44:65:4b:7e:1c:20:53:a0:08:d3:03:72:
92:d6:d2:ca:e0:2e:c9:00:06:41:5e:5a:07:be:2c:86:c6:2c:
6c:07:3f:7e:e7:5a:14:90:93:99:95:e4:38:d3:8c:d1:32:3c:
fd:85:96:b3:70:49:e4:2f:d4:4a:b6:d1:d9:d0:17:57:b0:bb:
d7:b6:ea:8e:a7:22:28:95:fc:f1:d6:40:ab:56:01:17:c2:c5:
fd:34:9b:ec:e0:c4:92:bb:2b:74:ce:14:24:43:d9:14:3c:d8:
3f:9e:b1:72:6a:e2:1a:10:e0:61:27:80:bf:ad:08:b6:98:1d:
44:56:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:06:49 2025 by rpki-client