Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File: RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier: voMoZLkt1c30vsP/OGbhwqohYzuk5LROuDLaqFlnc0o=
Subject key identifier: F8:A3:2D:20:87:00:59:0A:1D:DF:6C:90:0E:B4:A7:19:FA:BF:29:68
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 019966C8A6B4BDFD4856DF37C49E81FA56F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number: 09B1
Signing time: Sat 20 Sep 2025 11:00:49 +0000
Manifest this update: Sat 20 Sep 2025 11:00:49 +0000
Manifest next update: Sun 21 Sep 2025 11:00:49 +0000
Files and hashes: 1: OZ7XXs5-vTfiSAWKoDmEkN7zWeQ.roa (hash: l/UsCgIJDNyf/l0N4v4B7v81nHJghd1pRCptDGkln1E=)
2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: qjspB2IIiXkaLL/dYOaNvZQoWBLRscE9kK6CNQK739o=)
3: bollIzhNfRvYanh5m9u8c1tqdcM.roa (hash: h9HWb5No43oY67BT/CufDxfVRQJTjdQZn1o0Ans09NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:66:c8:a6:b4:bd:fd:48:56:df:37:c4:9e:81:fa:56:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Sep 20 11:00:49 2025 GMT
Not After : Sep 21 11:00:49 2025 GMT
Subject: CN=f8a32d208700590a1ddf6c900eb4a719fabf2968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:f2:dd:a9:b0:41:24:21:80:70:a4:13:d1:
4b:63:13:ae:0c:c6:90:31:2c:7f:03:b7:a5:78:04:
5c:2f:24:bd:68:d7:b3:3e:d4:75:0d:67:2d:1a:41:
f7:82:53:00:73:3a:89:58:80:ea:9a:50:ae:79:94:
48:1d:45:f1:23:87:1d:48:7d:9e:28:e8:69:7b:45:
16:1e:c6:2f:7d:e8:09:67:87:fe:eb:06:5e:b8:93:
7d:60:90:4e:d7:f3:36:e6:1e:1a:61:e4:b0:e5:e3:
11:0e:a3:e8:52:f5:a0:1c:5c:f7:24:8f:46:57:9c:
a2:6b:f1:44:91:b2:a6:18:76:c3:83:f2:c6:8a:90:
69:4b:22:6b:d6:9d:51:17:d4:c6:f2:df:e9:61:bc:
91:85:d6:8b:82:ca:4e:a6:ff:26:ca:47:ec:0c:f5:
3f:6e:ea:a0:eb:07:5a:93:72:84:86:f0:f7:0a:13:
ba:f0:a0:f5:60:a4:4a:f1:ba:49:ee:e3:be:2c:2d:
14:58:d6:d2:f8:bf:0d:9f:8c:06:14:08:1e:ca:0e:
95:66:ad:2d:ef:4f:7d:67:8c:ac:1c:a0:a7:26:e3:
00:31:97:75:58:da:b1:25:dc:de:89:28:cb:81:de:
6c:5b:d3:65:46:f7:a6:cd:e3:a1:50:0f:eb:a3:93:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A3:2D:20:87:00:59:0A:1D:DF:6C:90:0E:B4:A7:19:FA:BF:29:68
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:14:96:95:86:00:8b:3a:e1:7c:70:82:c8:6c:45:f7:ee:76:
86:0a:6c:27:09:99:f2:22:7c:3e:3e:07:36:d7:15:f1:81:43:
b1:3d:b4:b5:12:cf:89:18:2a:e0:fe:24:fd:41:32:21:7c:30:
dc:c5:37:28:45:51:22:59:d8:1f:3c:9d:fc:ab:fc:a0:1e:5b:
4b:43:34:d5:39:4e:87:9d:7d:83:91:c9:8b:90:36:bb:ff:36:
7b:93:d1:b3:70:43:09:a3:ee:af:ee:77:8f:be:89:e0:c3:b6:
9a:a3:2c:e1:86:cd:c6:0a:be:f4:9b:4f:4c:ed:00:de:62:fc:
b7:aa:28:45:97:91:6f:1f:7a:be:03:3a:27:a4:38:d9:52:d2:
d5:41:d6:6d:c2:1d:cf:20:be:6f:7a:71:a9:7f:2a:14:ed:1a:
aa:cf:ed:5e:23:82:27:04:6b:cf:2e:cf:77:59:e3:8d:96:cd:
79:8d:1b:6b:0e:fb:fc:3f:f8:fb:9b:a5:12:dd:44:e3:a5:56:
56:50:4d:44:b8:47:8a:f4:3c:1a:a4:85:f0:e6:84:8f:c5:c5:
72:7d:f1:59:7e:26:65:f6:68:bf:3b:4a:46:99:28:e4:87:80:
11:77:07:5f:e6:84:90:d8:18:e2:f8:8d:ee:0b:f9:77:7d:7d:
8e:4a:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 12:11:25 2025 by rpki-client