Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: MUwRlb+6P2lDxn8jDsOdXDtCOmt1I5y6B1mXVR+AVm4=
Subject key identifier: A5:DE:EE:2D:BF:C4:E5:4E:51:88:34:A5:2C:C6:A9:A7:2C:08:E1:18
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019846645506EAFBD270EE0BF42E8816958A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 11:00:37 +0000
Manifest this update: Sat 26 Jul 2025 11:00:37 +0000
Manifest next update: Sun 27 Jul 2025 11:00:37 +0000
Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: JSivH12DU4id365YMMrpJwMagavFeAxPE1KEi2xvR+A=)
4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:55:06:ea:fb:d2:70:ee:0b:f4:2e:88:16:95:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jul 26 11:00:37 2025 GMT
Not After : Jul 27 11:00:37 2025 GMT
Subject: CN=a5deee2dbfc4e54e518834a52cc6a9a72c08e118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fb:c5:98:91:e5:f5:44:b0:9b:f2:ab:fb:a0:
f2:03:63:8a:70:75:84:bf:b4:d2:6b:a1:eb:37:64:
bd:41:60:b8:0b:37:f4:77:68:93:6f:a6:d8:d9:9c:
f1:c6:a1:13:21:8f:95:47:e2:50:22:c9:93:c3:1d:
53:ae:75:4a:2f:c1:9d:6a:7a:76:f8:cc:e4:1f:47:
58:af:d0:74:ae:47:f2:bf:01:b2:0b:c6:be:94:32:
d2:08:f8:19:ed:dd:c8:10:55:c3:36:85:d3:ef:23:
03:70:9e:a5:35:e8:cf:44:f2:ec:01:9e:e3:2c:ae:
4d:b3:42:c2:05:8d:7b:4d:f2:9a:92:05:be:19:c1:
c0:49:92:54:fd:a5:cb:f8:21:29:2e:e8:c1:28:92:
bd:88:a6:50:b7:1e:d2:18:87:5b:2b:26:66:fa:0c:
d7:98:71:a8:7c:7f:1f:3c:af:aa:d8:08:3c:d4:07:
de:26:c6:55:61:49:ac:2f:ef:49:b9:8d:40:71:c5:
ff:61:41:f5:fd:08:31:4c:d6:d5:d1:ac:52:34:95:
cc:03:7b:c6:f5:e5:30:c1:d6:ae:ed:96:63:39:0c:
e3:7c:d1:b4:c9:7d:29:4a:f5:9f:3e:c8:92:42:5e:
3f:7c:d9:6c:96:d0:a4:b2:ba:99:2b:49:6d:3b:94:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DE:EE:2D:BF:C4:E5:4E:51:88:34:A5:2C:C6:A9:A7:2C:08:E1:18
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:19:08:57:fb:29:49:68:db:6b:63:f8:62:8c:b8:66:ff:51:
d6:cf:95:e7:9b:b1:4e:58:59:1b:23:24:43:d9:e9:0e:08:ed:
1e:b6:04:94:db:cc:4f:fb:fc:8f:d5:00:d4:03:33:e1:b9:27:
36:71:dc:32:63:1c:8f:0a:a6:e0:4f:83:e5:20:8e:76:35:88:
14:dc:b8:17:66:38:52:7f:67:68:03:6f:8e:0d:6f:8a:2b:fb:
a1:0a:5d:7a:cd:c4:eb:d4:c0:d8:68:48:75:a9:ce:31:41:72:
52:e1:0a:bc:24:ef:c9:80:b0:2e:eb:c5:c9:1d:b3:78:9e:1e:
93:68:17:c3:0f:d0:b0:0b:7b:10:58:44:91:37:96:ab:aa:0b:
6f:a2:f5:50:ef:16:a1:6b:a8:7a:95:f1:f9:32:58:c0:17:c1:
e1:a9:5f:19:c1:b4:07:3c:cc:bc:ae:4a:c6:0b:83:94:19:87:
c8:8a:5c:64:d8:1b:9c:1f:5b:63:04:76:37:99:32:89:3d:2d:
e9:a0:13:a9:bb:96:62:d2:d5:43:29:62:1b:21:bd:1c:5a:f9:
3b:a5:f3:8a:62:9d:74:70:98:e4:80:a3:10:28:c1:dd:9a:1c:
67:60:39:2e:b5:57:80:44:3a:ba:dc:2f:c0:ef:a4:25:03:cd:
3e:1a:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 16:18:44 2025 by rpki-client