Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: ElJYzHQdRSTcupLUN9j3f9hfnp0w+rC+28QQjwWT11o=
Subject key identifier: E7:24:1E:05:A4:2D:6A:90:CF:19:84:CF:BC:5A:7E:A1:69:12:F9:45
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 019A71EEA7ADD41194512E53F0F4AA564E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 8F
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: VoU+i7fj2VRKDFRG8Do+Xmsy/lefCnxC2uJ3l2mbVJA=)
2: wuqKrfx0UPDoVQxdKV8k97AGu4E.roa (hash: QvAJVSN4EtHNESjcwxnKTv7sFwnj2Nb91/xIZcXw158=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a7:ad:d4:11:94:51:2e:53:f0:f4:aa:56:4e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=e7241e05a42d6a90cf1984cfbc5a7ea16912f945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:18:8b:69:7f:53:e0:a7:98:48:72:7c:0d:
98:86:32:aa:b7:af:17:47:66:84:e5:d7:59:f7:e4:
33:df:e6:10:e9:1c:b3:35:3d:c2:b9:bb:3e:e2:e5:
b9:84:b8:39:ad:ac:0d:b8:2a:3e:37:eb:78:07:71:
cb:7c:b8:41:c1:e0:36:5b:b3:a4:f5:c1:a9:47:97:
62:2b:ab:29:71:69:87:0c:94:23:09:c7:88:9b:72:
d4:76:2e:c1:f7:3a:11:fa:7f:0b:71:40:0f:31:07:
aa:d7:53:73:99:92:75:5f:d1:2f:e8:8c:8a:ee:ab:
c2:35:f5:a9:ed:24:56:45:ba:9a:bb:8d:3d:e0:c5:
ae:7f:24:b2:e9:2f:28:3e:95:9b:07:6a:ba:70:6b:
4f:dc:32:26:16:f6:35:15:26:63:7c:1c:32:a8:3c:
17:65:33:2e:d8:8c:12:03:43:0f:62:7b:2f:0e:06:
dc:e1:54:4c:10:47:32:d1:bf:c7:dc:6f:ab:9a:3d:
68:5d:da:69:a4:58:11:e5:77:ca:47:78:66:27:64:
e2:9c:14:68:79:b1:b5:5f:da:3e:c7:cd:52:5e:8f:
f3:ad:5b:bc:a4:7b:97:d0:e1:86:de:f3:0c:56:32:
c8:7f:78:ca:77:cc:16:8a:69:c5:f5:c5:43:fc:d7:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:1E:05:A4:2D:6A:90:CF:19:84:CF:BC:5A:7E:A1:69:12:F9:45
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f6:1a:59:68:90:c8:9d:13:2e:10:2d:5d:f3:1a:9d:90:29:
19:a8:f3:f0:ff:1b:49:25:41:f3:8e:13:e7:43:79:f9:a6:25:
26:09:1b:e4:c7:45:7c:c4:0e:72:49:5c:09:53:2e:65:d9:43:
0a:e5:d2:41:73:4f:bd:a9:a4:79:b1:6e:bf:09:ab:82:2b:35:
8b:41:71:6a:d2:b0:8c:0f:46:5c:19:6f:3e:e0:08:4b:78:8e:
58:05:ad:30:d5:45:09:d2:a8:70:6b:52:5a:1c:a2:57:2c:a5:
3b:8f:00:be:86:fe:cf:07:92:ad:35:52:04:81:18:21:2b:22:
eb:cc:9c:a6:15:49:05:25:72:29:eb:3e:93:c2:60:82:01:1e:
80:86:48:6b:95:ed:50:e5:38:10:b3:8a:e9:db:67:03:5d:d0:
3f:4a:90:e9:a1:26:b7:c4:e8:9d:70:bb:23:f6:f8:8d:91:f7:
4e:4d:4b:bd:b9:f3:9b:bb:34:f0:ca:e4:47:d8:17:70:97:f7:
75:5e:9c:22:3a:19:6d:a9:24:1b:59:97:4b:d3:99:9c:95:18:
b3:06:0d:46:76:4a:56:c1:fb:dc:6a:ae:c0:62:67:60:68:dc:
db:82:6f:3b:66:fd:ec:ee:f2:78:79:f5:c0:f4:cc:da:ef:99:
e8:aa:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:31 2025 by rpki-client