Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
File: otCM3GpDDvDaiCmRcla2rY0KNvk.mft (raw, json)
Hash identifier: Be6GCOYZPAvAHE/PsNcTjYfNbwvPcOwQxYPO8Dc64a0=
Subject key identifier: 7D:BB:0E:31:7D:15:45:0E:6C:4A:51:B3:1C:05:EA:32:71:99:9A:65
Authority key identifier: A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9
Certificate issuer: /CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9
Certificate serial: 019892C963140045E5C38DE95F2DA282709A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
Manifest number: 084A
Signing time: Sun 10 Aug 2025 07:02:08 +0000
Manifest this update: Sun 10 Aug 2025 07:02:08 +0000
Manifest next update: Mon 11 Aug 2025 07:02:08 +0000
Files and hashes: 1: otCM3GpDDvDaiCmRcla2rY0KNvk.crl (hash: RPKaQ2AQlP7TCecJI/GNWef8epBwxFkxLFbAuTW8vuA=)
2: uWHHQqBwsm-RgF6BGlPrCIiU5u8.roa (hash: c70DUe86Dscr+BOk1RbQf+gmFBszpSvbzYy8111R1f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:63:14:00:45:e5:c3:8d:e9:5f:2d:a2:82:70:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9
Validity
Not Before: Aug 10 07:02:08 2025 GMT
Not After : Aug 11 07:02:08 2025 GMT
Subject: CN=7dbb0e317d15450e6c4a51b31c05ea3271999a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:4d:04:34:2e:bb:4d:f7:28:81:a5:5d:b8:
7c:41:8d:1b:e4:bb:3d:f2:39:9c:90:3a:90:ea:fb:
79:3d:2d:2a:05:5d:b6:ed:a9:25:e8:84:7e:a3:46:
b5:11:5c:50:fe:16:04:0f:5d:4f:9e:46:df:42:9d:
85:0a:26:78:21:62:59:62:e8:5c:d8:7b:db:c3:a3:
09:68:23:f1:7d:e8:99:de:05:ec:4d:75:7f:df:30:
60:26:dc:1c:24:f8:e1:34:68:06:a8:3e:65:e8:3b:
5a:1c:63:7c:c7:1c:28:0c:b7:fe:65:59:5a:2e:df:
d3:65:2d:09:05:41:77:22:a8:fe:b4:2e:79:82:4c:
67:dd:16:d9:a9:f7:c1:fe:8d:5b:54:41:2a:99:5f:
05:86:56:1f:56:14:ac:27:0a:b6:d4:a4:78:bc:19:
2a:86:6b:e3:72:4e:9b:71:d1:33:f3:9a:15:71:56:
22:c5:33:10:65:9f:1a:b6:a1:c7:32:0d:2c:8f:b9:
e2:f2:6c:31:b4:0a:70:ee:97:fe:d8:af:ed:91:19:
39:e5:35:ee:03:8a:05:87:b4:1d:48:aa:3f:a6:e6:
50:9b:43:01:58:2e:d0:a1:02:77:10:f4:76:93:e0:
a0:e9:a9:c3:32:f1:b7:66:ba:6d:87:f9:ca:5f:cb:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BB:0E:31:7D:15:45:0E:6C:4A:51:B3:1C:05:EA:32:71:99:9A:65
X509v3 Authority Key Identifier:
keyid:A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e5:ea:22:e5:6f:6a:c3:4c:1c:c6:7f:af:31:78:5d:e7:b9:
f1:f5:57:71:18:64:21:79:62:33:f5:9e:07:9b:58:1c:7e:94:
a9:57:47:3e:ce:aa:a4:b5:98:5b:a9:e5:e2:f2:ca:56:49:ff:
46:93:f4:83:a8:56:b7:3b:1c:57:ff:8c:f8:ee:63:dd:b6:d5:
80:1b:fa:b6:a0:d3:9e:53:72:19:21:01:3b:25:7f:8d:e8:a7:
34:d8:fd:b3:93:5e:06:6d:4a:e7:be:c1:2e:75:3c:88:d0:ea:
a0:bc:73:d7:e4:56:42:b6:f5:55:b5:44:fc:f7:8c:78:d6:72:
e3:17:e2:d5:11:37:5d:f4:1b:b4:b1:b6:41:7a:de:89:1b:70:
85:46:47:24:3a:aa:99:89:e7:6c:bd:61:bf:d1:fd:ff:ab:14:
56:05:a6:0e:c2:38:3a:d0:d5:04:60:0d:05:2a:17:a7:f4:ef:
4f:82:13:82:3c:03:13:30:75:09:4a:f6:71:ed:19:05:4c:a3:
15:c3:ae:9f:f3:30:a0:b6:44:a0:cf:ed:f9:ac:80:80:98:96:
06:34:64:5d:8f:38:0e:33:b4:0d:aa:9d:98:48:0c:0b:2b:e0:
f7:b5:eb:a1:77:ff:b9:78:9e:70:f7:e9:ef:48:09:9d:89:23:
6f:8b:06:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:01 2025 by rpki-client