Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: sRc6jw6XHr8MVSPq9xQPbb8reZl/qhEOn5jhvb8YBOE=
Subject key identifier: B0:F9:6E:D1:17:24:59:1A:6B:06:9E:C8:E9:D7:95:15:F5:E0:CA:0B
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 01984A4177A5F13297D3677A48EC88FBF2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 05:01:01 +0000
Manifest this update: Sun 27 Jul 2025 05:01:01 +0000
Manifest next update: Mon 28 Jul 2025 05:01:01 +0000
Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=)
2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=)
3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: tR4KjngjOIIZReOituscfwUASnj9DO0EL+UsxKvjzK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:77:a5:f1:32:97:d3:67:7a:48:ec:88:fb:f2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Jul 27 05:01:01 2025 GMT
Not After : Jul 28 05:01:01 2025 GMT
Subject: CN=b0f96ed11724591a6b069ec8e9d79515f5e0ca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a5:4e:6e:5c:af:b0:fc:e5:be:fb:ee:ec:41:
a4:bb:60:74:7b:bd:d6:31:e8:56:8d:d0:79:16:ce:
53:09:d1:c6:4c:48:b9:7d:4b:35:fb:d8:15:b1:ee:
15:39:e2:28:80:d0:34:d2:bf:d3:74:13:3c:c6:48:
4b:91:37:4c:e5:f9:4c:71:e3:a5:7f:94:40:c9:fd:
02:ea:e7:dd:f3:25:57:f3:c2:45:f7:fd:35:fa:d4:
b0:80:4c:6d:14:fc:8c:cc:13:9b:fc:a8:53:3c:ef:
32:22:1b:06:d9:f8:17:be:01:90:ac:d9:fe:d8:b0:
68:e3:f1:47:15:6c:fe:49:ee:ae:72:2c:1a:50:e6:
d0:55:72:0c:bc:a4:4b:2f:ac:06:76:28:73:a2:b9:
83:1d:08:7a:0a:14:ed:12:b8:b6:f7:16:c2:71:c5:
bf:92:5f:a3:d4:5e:e8:af:b8:48:eb:9d:f2:cc:73:
2c:a2:6c:22:5a:5f:98:f5:24:4f:20:b4:dc:5d:3d:
4e:35:2e:05:a8:ec:09:58:71:82:96:ab:45:51:4c:
68:87:b9:5e:1d:8a:97:83:4e:3f:5c:65:68:bb:3b:
bb:0b:31:03:5b:10:09:80:dc:d2:25:9c:44:00:c6:
49:68:b7:b7:a7:cf:f6:1b:ef:f3:b4:1d:cb:2f:a6:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F9:6E:D1:17:24:59:1A:6B:06:9E:C8:E9:D7:95:15:F5:E0:CA:0B
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:21:aa:4b:49:91:52:41:73:89:68:20:47:db:27:63:d5:24:
4b:91:7f:d6:4f:9a:95:56:a1:09:0b:b1:99:3b:5c:0e:eb:f2:
82:06:77:4a:3f:c0:57:98:0a:82:92:35:95:5d:cf:ce:97:f2:
15:a4:a3:e0:91:c3:be:47:a8:fe:f7:2a:ae:9f:3c:e3:10:63:
e6:a9:82:79:63:0a:b5:16:6a:3d:bd:04:78:4b:b2:3e:67:30:
04:da:99:ef:9e:38:e7:b0:04:32:a3:00:3c:e1:73:b4:5c:3d:
d7:97:02:0e:85:2f:a1:44:93:02:fc:97:26:5f:32:51:ec:cc:
c1:48:ff:28:da:97:5d:2d:7f:45:ed:19:0a:06:33:5c:13:9c:
50:ba:f5:0a:72:5b:61:22:eb:25:eb:33:2a:ee:b0:18:8d:7d:
a5:5b:32:66:93:25:7b:7d:0a:ec:9f:cb:4c:64:8d:40:e7:e4:
d6:35:77:97:1d:c3:ca:48:06:35:2a:d7:16:3f:7d:f6:4f:2f:
f8:12:38:bb:07:01:3f:48:76:a2:8b:d7:71:e8:b5:07:83:ff:
d7:8b:8d:21:d4:0c:71:6b:74:66:aa:a7:20:9c:19:96:a1:20:
d6:90:2e:22:56:e9:a7:30:45:38:7b:5a:ee:2e:9e:38:dd:28:
92:9b:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:45 2025 by rpki-client