Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: Ru0fGDzBiorb3iS8wjUIh2cYY3ASzDzzkRrdyoc91zI=
Subject key identifier: 73:FF:FA:C7:97:B9:50:10:B2:35:0A:F0:CE:2B:98:E7:D5:88:8A:16
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 019887D710AAD208743633C03D37E507FFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 15B5
Signing time: Fri 08 Aug 2025 04:01:15 +0000
Manifest this update: Fri 08 Aug 2025 04:01:15 +0000
Manifest next update: Sat 09 Aug 2025 04:01:15 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: mwgpDSWa0advkMLDHx/TnY13cm5+9BHkjR+lpQaZjiQ=)
2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d7:10:aa:d2:08:74:36:33:c0:3d:37:e5:07:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Aug 8 04:01:15 2025 GMT
Not After : Aug 9 04:01:15 2025 GMT
Subject: CN=73fffac797b95010b2350af0ce2b98e7d5888a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:f8:0a:ff:d7:05:91:7f:49:a7:89:d9:39:
fa:89:ef:e8:08:db:cc:8a:e0:a5:79:17:10:31:db:
e0:4d:5d:9d:b6:26:de:8a:d9:56:94:4d:ab:71:b1:
85:8d:66:ea:4d:17:0c:91:9f:a2:94:6f:c6:29:55:
71:86:d0:29:be:79:3d:64:48:90:5d:be:57:e3:7a:
a0:06:78:61:eb:1b:bb:36:a4:dc:6e:b7:05:3d:b9:
07:f2:25:9a:fc:82:f0:63:1b:7d:b6:7e:15:9e:10:
f3:df:46:0a:bf:b0:d0:e2:f7:39:40:52:f7:ce:3a:
ad:7e:4e:c4:04:ed:1c:73:bb:87:9d:e6:80:e5:fb:
b5:4c:c7:c7:b7:6f:21:2b:4b:fa:da:42:4b:f5:fd:
f1:a7:99:05:cf:81:06:34:c3:d7:5f:00:cb:c8:47:
c7:67:bf:d6:21:01:d8:17:ab:34:87:60:e4:7b:99:
60:7c:44:9c:dd:8c:27:ca:a2:c3:73:43:df:5e:fb:
f8:0a:09:67:f0:d2:73:6f:71:63:92:c4:88:14:f8:
dd:3d:01:66:51:2d:c8:6b:80:5a:b6:0c:35:14:d2:
08:7d:c1:a8:50:3b:5c:47:17:ed:9f:54:76:81:f9:
ac:b2:dc:90:a1:22:c9:2b:95:28:fa:5b:e3:4b:8e:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FF:FA:C7:97:B9:50:10:B2:35:0A:F0:CE:2B:98:E7:D5:88:8A:16
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bd:51:c1:45:46:c2:7b:60:a1:25:a6:ed:cb:cd:69:a4:e9:
4b:54:90:dd:93:38:b2:24:c2:50:b5:1d:63:21:6a:a3:33:a5:
a5:dd:39:e0:47:5f:4e:cf:b1:ab:b2:0d:03:60:a3:61:ea:ac:
0a:17:06:3d:9d:c8:8a:16:eb:59:99:cc:90:45:26:f0:02:1e:
83:38:a1:c2:63:0c:a5:61:d9:98:61:f8:dd:80:ab:fa:08:36:
e4:97:63:46:02:55:a0:56:9d:9a:03:90:65:60:3a:59:0b:6a:
1d:ba:b4:97:9b:df:5e:28:56:16:3f:31:e5:93:a7:ee:fb:1b:
5b:a3:20:7f:c5:e2:7d:a0:7d:26:84:30:cf:55:57:c5:4c:f5:
84:2d:07:de:b6:3e:b3:7c:e7:7e:9b:7f:ad:bb:ab:6d:71:b9:
e7:04:19:54:20:59:e6:8d:4f:a5:f5:d3:bb:11:56:c5:54:77:
e3:a1:b6:6c:78:94:0a:c0:0d:6d:87:47:0f:ee:6a:1f:1b:01:
ed:a3:ee:84:61:4f:16:c6:b5:86:87:d9:ef:e1:4b:ce:ed:e3:
89:c8:a4:fe:8a:db:a2:f0:dc:b6:b0:56:8a:42:29:c0:0c:68:
b6:ab:37:68:46:96:3a:ea:be:e1:d7:f1:6b:fe:1d:77:8c:45:
e2:fa:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:22:16 2025 by rpki-client