Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: FeoGOxyPWrRcpxEa7WrlWpczOhIiWSNI8W2LUtANiZ0=
Subject key identifier: B6:DB:35:08:FF:3F:C4:0D:6C:80:5D:D6:07:B4:57:3C:7E:85:CB:86
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 01983D29F2EC577F71AD2D3E4F8326CA7403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 0458
Signing time: Thu 24 Jul 2025 16:00:15 +0000
Manifest this update: Thu 24 Jul 2025 16:00:15 +0000
Manifest next update: Fri 25 Jul 2025 16:00:15 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: IkxbxUrw/TIhQWuUEJi6OnSeYMsl1/PiyGf4n3/ckv0=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:29:f2:ec:57:7f:71:ad:2d:3e:4f:83:26:ca:74:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Jul 24 16:00:15 2025 GMT
Not After : Jul 25 16:00:15 2025 GMT
Subject: CN=b6db3508ff3fc40d6c805dd607b4573c7e85cb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:62:1e:9e:f4:0d:d9:22:1d:4c:fa:a1:3b:
5b:44:c8:87:74:9b:46:51:a8:57:aa:aa:4e:37:14:
56:59:70:e6:0f:49:61:cf:f6:ba:e7:b4:91:0c:4d:
00:17:39:68:40:fa:48:cc:c1:25:55:24:bc:c8:83:
a1:96:46:a5:23:60:35:15:d2:9c:b9:af:ea:0a:d5:
34:67:21:1e:42:49:17:0d:bb:5a:ae:b8:ee:50:2e:
b7:df:fa:2a:03:97:96:b1:d9:91:bf:d3:b3:1c:dd:
e2:3a:cc:f2:ba:fa:05:34:d2:27:bb:c2:d2:6f:d7:
34:dc:58:e7:9f:a0:9a:2f:b2:3f:53:e7:b7:c1:f8:
d8:91:cc:af:8f:a0:2f:78:2a:fa:75:ca:51:69:bc:
53:ec:79:30:5b:7c:ec:b1:53:aa:27:4e:68:3d:17:
72:30:a6:47:54:44:c8:c8:56:ca:46:ac:ff:2b:32:
3e:1f:7e:44:e9:f3:42:f0:72:d9:d5:86:f5:8a:37:
ae:fc:55:24:f8:50:b0:55:51:39:a1:0a:e5:5b:af:
53:a8:c2:12:6c:33:db:3d:f4:0e:cf:a0:5b:71:1b:
eb:ef:b9:df:2a:02:6d:2a:45:99:66:1d:43:5e:d0:
c8:3d:ff:df:65:6f:64:f5:99:fe:b8:76:2a:fa:b5:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DB:35:08:FF:3F:C4:0D:6C:80:5D:D6:07:B4:57:3C:7E:85:CB:86
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:39:f7:38:25:78:eb:01:f0:e5:b1:22:1a:ba:4c:75:37:28:
88:56:7c:47:27:48:2c:fe:84:a2:75:04:eb:ae:d4:09:13:39:
c3:cd:2a:21:1e:20:c1:a2:e1:9a:3c:92:51:22:1b:59:54:53:
81:a3:25:31:31:d8:52:a3:ec:bf:99:de:66:fc:9d:8f:de:4a:
bd:2f:d8:fc:66:a7:1d:97:19:12:98:6d:75:63:56:3b:45:0c:
cd:e3:53:15:3d:75:4d:0d:a1:37:ce:83:ac:bd:74:6a:66:47:
f0:e2:34:46:52:92:1b:c2:1d:7c:48:f0:d7:ee:11:fc:7e:4b:
dc:d5:e9:07:79:5a:26:21:34:5f:2c:1d:39:f5:b9:c1:55:0f:
e6:23:da:e7:07:f4:e4:4a:41:b6:81:e9:d6:5e:ed:18:1c:63:
74:4d:d8:c2:49:3b:1f:21:75:14:f4:a6:f4:d4:a1:9a:52:75:
25:fa:8c:26:3e:72:5a:3f:24:15:25:74:87:33:89:f3:a6:47:
be:df:b3:b5:27:03:5b:b2:93:b2:aa:27:47:32:7c:d0:ac:1c:
14:d4:6a:57:94:70:19:3b:2d:9f:87:ab:6c:bc:62:db:d1:b7:
bf:5f:a4:cc:f8:7b:55:55:db:5c:80:84:ab:70:11:5c:85:fc:
8c:93:9d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg9KfLsV39xrS0+T4MmynQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5
NjRiNDAwHhcNMjUwNzI0MTYwMDE1WhcNMjUwNzI1MTYwMDE1WjAzMTEwLwYDVQQD
EyhiNmRiMzUwOGZmM2ZjNDBkNmM4MDVkZDYwN2I0NTczYzdlODVjYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CdiHp70DdkiHUz6oTtbRMiHdJtG
UahXqqpONxRWWXDmD0lhz/a657SRDE0AFzloQPpIzMElVSS8yIOhlkalI2A1FdKc
ua/qCtU0ZyEeQkkXDbtarrjuUC633/oqA5eWsdmRv9OzHN3iOszyuvoFNNInu8LS
b9c03Fjnn6CaL7I/U+e3wfjYkcyvj6AveCr6dcpRabxT7HkwW3zssVOqJ05oPRdy
MKZHVETIyFbKRqz/KzI+H35E6fNC8HLZ1Yb1ijeu/FUk+FCwVVE5oQrlW69TqMIS
bDPbPfQOz6BbcRvr77nfKgJtKkWZZh1DXtDIPf/fZW9k9Zn+uHYq+rVVoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbbNQj/P8QNbIBd1ge0Vzx+hcuGMB8GA1UdIwQY
MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt
ZWMxNjczNWEzMzgyLzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy
LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTn3OCV4
6wHw5bEiGrpMdTcoiFZ8RydILP6EonUE667UCRM5w80qIR4gwaLhmjySUSIbWVRT
gaMlMTHYUqPsv5neZvydj95KvS/Y/GanHZcZEphtdWNWO0UMzeNTFT11TQ2hN86D
rL10amZH8OI0RlKSG8IdfEjw1+4R/H5L3NXpB3laJiE0XywdOfW5wVUP5iPa5wf0
5EpBtoHp1l7tGBxjdE3Ywkk7HyF1FPSm9NShmlJ1JfqMJj5yWj8kFSV0hzOJ86ZH
vt+ztScDW7KTsqonRzJ80KwcFNRqV5RwGTstn4erbLxi29G3v1+kzPh7VVXbXICE
q3ARXIX8jJOd9A==
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:38 2025 by rpki-client