Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: JKzlBH33Robne8Ie6NnwVrkbzPX7DhBOfdDBqy4UQak=
Subject key identifier: DE:12:BC:89:31:17:B2:34:CD:F7:68:F4:D6:C8:F5:53:84:FC:44:62
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 01991C53104BBEA35AFDBBF8E84B988ADBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 020A
Signing time: Sat 06 Sep 2025 00:00:29 +0000
Manifest this update: Sat 06 Sep 2025 00:00:29 +0000
Manifest next update: Sun 07 Sep 2025 00:00:29 +0000
Files and hashes: 1: NR0WsT059Uu9ocKkEY9pXlrin1E.roa (hash: VV0hNdxr41R7/bkmPoA35nvmhlKGJglGwfeyHr+U+LY=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: J2S7M8zH5kwgCiqWpw8cL0Dpg948oG9qpaklcurb+18=)
3: SEh_0GqoSaiRBqWseUujp9ajyxU.roa (hash: 4qBD/oh8RDMtbEgS97ZhV1TCABNjw7BvgNSejlDS+ZM=)
4: g6a9uq2KRc9wYONVhtFPPZGaBr4.roa (hash: Jcii24w5hELShXLMXhNP2/DuSUjwnJEfN84e/8CYORI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:53:10:4b:be:a3:5a:fd:bb:f8:e8:4b:98:8a:db:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Sep 6 00:00:29 2025 GMT
Not After : Sep 7 00:00:29 2025 GMT
Subject: CN=de12bc893117b234cdf768f4d6c8f55384fc4462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:89:48:cf:bb:20:e9:64:08:b8:a8:43:17:
eb:fe:45:28:0b:da:52:a2:9e:cb:76:05:e7:a1:79:
0b:23:d9:58:3d:42:3d:88:6d:49:1f:e0:3b:77:1d:
c6:24:76:45:cc:9c:b5:65:e9:ca:9f:f7:0b:71:7d:
7b:44:29:16:75:f9:c5:04:dc:5e:68:1b:e3:65:5a:
21:72:2c:93:de:16:9f:52:4d:80:d3:87:a4:55:47:
53:12:ea:5a:2e:b3:38:95:de:af:a9:8e:21:ea:37:
ac:01:c6:59:f6:cc:be:0c:d2:0f:6b:a0:21:06:8b:
3b:f7:82:7b:b4:10:91:2f:bd:0c:e7:c7:18:7f:0c:
2f:da:e4:43:45:1a:9d:bb:94:a2:23:2a:3f:30:ce:
e6:14:0f:f3:0d:15:37:68:b1:02:93:6a:86:e9:5d:
ca:20:49:49:b2:cf:a5:e3:3d:c2:21:ed:a5:d2:88:
63:d2:2c:cc:62:76:ef:18:20:71:80:dc:4c:e5:98:
da:fe:2d:64:84:dd:85:20:53:af:13:61:fb:6f:29:
87:eb:18:6a:ce:e0:13:a7:d0:84:21:37:52:58:b5:
e1:91:4e:76:26:eb:39:39:d1:55:f8:1d:02:1e:07:
40:8d:b2:3d:f9:4c:0d:6d:22:5b:8a:6b:47:12:4a:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:BC:89:31:17:B2:34:CD:F7:68:F4:D6:C8:F5:53:84:FC:44:62
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:60:50:05:d7:e4:dd:65:95:37:57:8d:bc:bc:d5:ff:53:b2:
32:1a:c3:5a:1a:e6:55:3a:78:0a:4b:06:a9:d6:d3:79:ab:8d:
65:31:e8:fa:ad:0c:40:5a:61:bd:f7:5a:d0:c8:a8:41:b5:eb:
ef:04:a7:a6:e6:d1:8a:5d:f1:de:b9:83:13:37:01:3f:0a:11:
40:3e:11:10:a5:74:0b:f0:3e:25:5a:81:4d:8c:d9:65:51:c4:
fa:21:b2:a5:fc:4c:76:b5:b3:5e:cc:44:b9:52:86:8b:b7:b9:
72:03:f0:52:44:c2:0a:57:a6:f8:f6:86:34:f3:4b:35:36:77:
fc:cb:6e:7a:86:c2:5d:be:63:c0:9e:75:8c:e2:fa:ba:3d:56:
38:53:d3:3f:ac:cd:f7:81:02:42:2e:97:dd:a9:81:0d:c7:b1:
47:e6:aa:50:d5:28:11:40:fc:43:87:db:fc:cf:fc:25:5a:e5:
92:d9:6b:1a:be:c2:35:c7:42:23:05:5c:cc:38:74:5a:ff:8f:
28:04:ba:21:dd:59:77:14:48:44:db:3f:95:71:b0:5e:53:bc:
7c:80:39:1d:ea:fb:81:40:de:14:9b:f4:cf:86:e2:2a:be:eb:
25:fc:53:b3:5f:91:b2:fe:2e:c9:c1:a4:69:23:05:3b:28:18:
33:4a:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:14:57 2025 by rpki-client