Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: jkoAQd8kSocKdyshy7gabDNltGDGhelf/Kp1ne2ib3s=
Subject key identifier: C1:38:12:E6:F0:C0:9F:55:73:C8:49:EF:2B:3B:BD:48:16:31:3C:4C
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 01987418F99CE494660AAF0F37194BE416B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 03DB
Signing time: Mon 04 Aug 2025 08:00:50 +0000
Manifest this update: Mon 04 Aug 2025 08:00:50 +0000
Manifest next update: Tue 05 Aug 2025 08:00:50 +0000
Files and hashes: 1: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: Z7XPQGdiiYXdQlFyybBziwCfw90kSB1XK2pgPLbPj8s=)
2: XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa (hash: MHnaHZdpDHAywK5Gif3w+d5y+x0GzsWCN2jIZcL+Afc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f9:9c:e4:94:66:0a:af:0f:37:19:4b:e4:16:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Aug 4 08:00:50 2025 GMT
Not After : Aug 5 08:00:50 2025 GMT
Subject: CN=c13812e6f0c09f5573c849ef2b3bbd4816313c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:6e:32:55:8d:ff:ac:5e:56:92:2f:b7:f9:
ba:72:e5:81:bc:bd:8a:c3:75:3f:f0:b6:2e:bd:78:
e1:7f:2c:22:bd:1b:29:d8:48:5e:dd:49:46:99:2b:
20:7b:e8:7b:08:f2:a6:3e:29:d8:d9:04:55:0c:0d:
90:b1:b2:ec:f8:29:09:51:68:34:00:92:58:39:df:
1a:cd:6d:02:09:77:e1:5f:ed:cf:2c:b5:31:46:9f:
81:9b:42:5b:81:a7:b5:f2:3b:22:74:52:cc:96:9c:
12:4e:24:fd:ff:68:9a:4d:f4:31:39:e8:9e:9f:6a:
98:33:e8:6a:63:83:a6:ae:88:13:af:73:80:d0:7f:
ee:3a:0d:02:7e:a0:bb:f6:fe:30:29:43:ad:2d:27:
3e:6b:5f:7e:1b:9b:43:fe:39:15:d1:dd:30:02:54:
5f:86:b3:41:bc:33:4e:4f:bc:0b:fa:30:b5:85:5f:
6d:ac:1d:48:c7:2a:e2:e4:af:57:f0:df:cb:1f:15:
3c:2c:be:57:77:db:91:a1:cc:0e:16:7f:de:34:7c:
00:1e:af:d5:7f:d2:91:3d:f9:84:fc:68:80:2e:2f:
f9:f1:0d:9c:ea:4e:f3:18:f9:7c:38:17:35:ff:ba:
ad:56:3f:63:75:78:3e:df:b1:9e:3f:16:c2:1c:56:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:12:E6:F0:C0:9F:55:73:C8:49:EF:2B:3B:BD:48:16:31:3C:4C
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f4:1b:58:35:6a:95:54:c7:10:3f:d2:84:12:9c:2d:67:62:
a7:23:c8:73:e9:f4:e7:32:46:e5:4d:7f:9d:bb:63:b6:da:04:
15:92:11:c5:12:95:16:f5:da:9c:9f:76:ca:87:f5:39:2e:4a:
b5:5b:c4:d5:c5:02:80:2e:1f:c8:1e:ec:e4:b9:f0:a6:86:e3:
8e:0e:8b:1f:01:30:94:70:32:7e:f4:c5:e6:49:71:75:54:32:
08:d6:43:31:9a:c9:bd:2d:db:0b:cb:83:51:74:22:f1:ac:e6:
d5:e8:40:da:eb:e1:c8:81:65:fd:cc:47:13:51:8a:e4:a1:c3:
a9:2c:e5:a6:a3:9d:c0:a7:8e:37:31:62:d0:f5:46:d1:ef:17:
7b:4d:d1:a9:6e:b5:13:02:27:41:b5:ff:e0:06:a6:79:e4:ac:
3f:bf:66:04:af:12:08:78:ad:a2:d3:47:11:5e:21:79:a2:19:
ed:05:02:58:00:91:15:7a:0b:1b:fc:3a:07:f3:0f:e1:bf:b4:
b9:47:0a:11:eb:4c:b9:22:69:65:6e:b4:e1:3f:a4:fa:4b:bb:
ce:47:e8:50:76:d9:77:71:84:50:de:30:fb:59:17:44:40:2e:
d3:de:62:44:a9:24:9d:69:9d:23:6d:2c:76:ce:ad:9d:5e:79:
38:aa:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:01 2025 by rpki-client