Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: HLSNSXwFRzm5lScT34R03+soUrmzKpEN6eeDj421yEU=
Subject key identifier: CE:5C:AE:3E:70:BE:E2:3A:96:22:76:4E:91:34:5D:9F:32:AF:7F:E9
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 0197797888172F5F4031D39F42149702A6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1529
Signing time: Mon 16 Jun 2025 16:00:31 +0000
Manifest this update: Mon 16 Jun 2025 16:00:31 +0000
Manifest next update: Tue 17 Jun 2025 16:00:31 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: nQy9V22aUWu9opriYHnU7Ws78MVspKR+5SKpKwMR+2A=)
2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:88:17:2f:5f:40:31:d3:9f:42:14:97:02:a6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Jun 16 16:00:31 2025 GMT
Not After : Jun 17 16:00:31 2025 GMT
Subject: CN=ce5cae3e70bee23a9622764e91345d9f32af7fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:1b:e3:f4:8a:bf:80:8a:7a:04:a7:d5:c1:
5c:eb:89:86:3e:8f:70:1f:ca:b0:62:98:f5:bf:2f:
43:29:d2:9b:2a:62:d3:3d:74:22:0f:f4:82:3c:47:
ad:00:54:84:10:f6:5e:07:f6:36:f7:66:4b:f8:de:
d7:2e:0a:b8:43:89:ab:67:7b:df:ca:06:dc:85:98:
8b:7a:b9:b3:7e:7f:7a:ff:ba:97:ba:b9:05:e4:0a:
2c:0a:ea:46:2c:f3:f4:21:ea:06:07:db:d7:bb:54:
b1:fc:0c:18:d3:e8:5b:57:0c:8c:03:99:2d:09:5d:
64:75:95:09:66:75:b5:27:38:d8:79:da:8e:30:df:
f5:33:7d:f1:27:79:12:ed:51:d3:4a:3f:7a:bb:df:
67:cf:50:58:96:e4:dc:e7:38:76:ed:38:3c:18:85:
e1:ec:51:e5:e1:51:46:f3:f4:52:94:25:cd:ea:e8:
63:2b:f8:b5:8b:8d:19:ad:bb:2f:77:ab:ca:8b:cc:
c0:d7:ad:8f:28:d0:bd:6d:ca:a8:5f:c9:ef:dc:e6:
b6:aa:08:f7:4d:fa:e6:4c:92:65:70:9e:f2:e7:9b:
5b:68:79:52:c9:5f:54:d0:17:04:1e:3a:82:13:b5:
33:18:bf:eb:0c:df:cc:7d:8d:42:ca:c1:f8:c1:d9:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:AE:3E:70:BE:E2:3A:96:22:76:4E:91:34:5D:9F:32:AF:7F:E9
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ab:2e:49:36:1e:ee:c4:09:72:d2:a2:42:70:fc:2f:58:68:
4d:6e:c3:81:29:6e:87:17:d2:70:49:66:44:69:92:41:da:f3:
46:e7:b9:ac:13:5d:a5:91:2b:0b:d3:ce:f9:ce:1e:20:d2:a9:
bf:1f:32:b2:2a:f4:27:bb:53:0d:4a:5d:a2:04:2b:65:27:99:
69:01:2d:d2:71:78:20:ae:85:9a:d4:69:d2:fc:3e:bc:db:a8:
50:62:bc:f3:cb:e2:ae:5b:4d:0e:e5:4c:15:b3:ed:b2:b7:56:
16:4d:74:1d:88:cd:9d:ed:8b:43:f9:af:61:55:c9:33:e0:f7:
ad:2a:8e:7d:47:f8:22:bd:85:6b:fb:52:4c:2c:ed:f3:f6:52:
69:5a:26:7c:f9:ad:f5:e6:28:72:e8:e6:cc:e4:9f:89:da:07:
5b:cc:6f:00:4b:61:3a:d0:b7:19:2a:73:77:b0:cf:2d:7a:33:
eb:b2:2f:74:ca:c7:8e:a4:e8:d2:2b:d4:75:9c:58:7a:27:7f:
93:90:be:da:15:df:7b:8e:c6:2c:6f:36:71:f6:21:30:fe:86:
c6:04:4d:65:02:05:1f:50:29:fc:50:c2:57:4c:fe:b8:3a:21:
fb:80:17:c2:b0:27:4a:d8:46:3e:43:90:d0:40:08:46:1b:55:
fd:14:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:57:20 2025 by rpki-client