Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File: RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier: U/5SXdgO+53/QEjA9wtH9IEM7Ih1K+sYbAArQA9bu98=
Subject key identifier: 8C:2F:1B:E6:79:89:88:CB:42:C1:F8:1F:42:A1:EB:4B:BB:67:85:5C
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 019A582E4B495E3E3B02F52A281BEAD9C589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number: 0A2E
Signing time: Thu 06 Nov 2025 08:00:20 +0000
Manifest this update: Thu 06 Nov 2025 08:00:20 +0000
Manifest next update: Fri 07 Nov 2025 08:00:20 +0000
Files and hashes: 1: OZ7XXs5-vTfiSAWKoDmEkN7zWeQ.roa (hash: l/UsCgIJDNyf/l0N4v4B7v81nHJghd1pRCptDGkln1E=)
2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: 7EoIDeIdD2bMR0hcZbRCabxMVe2tXEsml0fM30Wc9F4=)
3: bollIzhNfRvYanh5m9u8c1tqdcM.roa (hash: h9HWb5No43oY67BT/CufDxfVRQJTjdQZn1o0Ans09NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:2e:4b:49:5e:3e:3b:02:f5:2a:28:1b:ea:d9:c5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Nov 6 08:00:20 2025 GMT
Not After : Nov 7 08:00:20 2025 GMT
Subject: CN=8c2f1be6798988cb42c1f81f42a1eb4bbb67855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:47:38:a5:7a:53:b4:d5:b5:58:7c:6f:e8:
c0:87:22:d2:a2:fe:d2:19:03:13:e4:bc:11:5a:2e:
3f:34:5f:b2:68:9a:79:ac:b3:16:3a:ba:9b:56:d5:
c6:7a:49:32:37:ef:99:43:c0:98:23:36:99:da:64:
bd:c7:22:a7:39:0e:f2:97:6f:52:e0:46:88:7b:d3:
1a:75:29:ce:a3:39:8c:09:aa:1a:c2:2d:85:3c:61:
ca:33:28:e3:92:0a:7d:87:28:60:d3:b7:49:26:b7:
9f:29:3e:f7:fb:00:7a:08:c3:92:c5:0d:5a:b4:d2:
0b:d8:41:8a:5d:28:76:f1:43:f2:6b:aa:44:67:a8:
f2:f9:f4:01:64:e0:85:0a:d5:d1:85:f8:0f:ab:db:
6f:38:f4:8e:bb:b8:54:80:ec:9f:a1:b5:16:f1:12:
82:22:74:be:be:74:10:36:61:fc:97:fc:6d:be:3f:
84:d1:c7:83:5e:94:e7:aa:5c:bb:bc:db:1e:29:87:
ac:ef:81:74:a0:8d:f0:7d:2a:de:3f:24:24:8f:8c:
c3:f8:ae:09:4c:31:db:76:0a:a9:c3:8b:33:dd:60:
56:1b:10:38:1b:56:40:7f:84:66:b7:cd:6e:a8:15:
08:08:92:11:c8:d0:d8:cf:f7:b8:67:8d:6a:11:12:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:1B:E6:79:89:88:CB:42:C1:F8:1F:42:A1:EB:4B:BB:67:85:5C
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:70:71:02:17:1b:d5:00:a8:b8:e4:e0:61:fb:5a:c9:20:54:
b8:b8:d9:d0:e1:be:63:3b:a7:62:1f:3e:6a:bb:c0:3f:30:e5:
22:a5:81:87:8f:f2:2b:ce:49:cb:e0:40:3f:6a:92:b2:3a:01:
1f:73:e1:ed:a9:a8:1f:28:25:3f:01:11:6e:f7:07:e3:c8:0f:
e7:13:5c:ef:0d:ae:9b:38:e0:87:89:c2:41:f8:d6:7f:39:8e:
77:6a:8a:33:26:7a:5b:2c:92:c3:33:ac:c2:7b:c6:25:be:2d:
bf:7e:5a:6d:68:7e:02:05:f7:d6:cd:6c:00:cd:62:a4:fa:7a:
7d:ae:e4:30:2d:e0:aa:59:31:8b:ce:e4:c3:ce:b3:51:44:eb:
be:0d:27:e7:b8:24:d0:5e:8f:7f:18:72:7a:f4:2b:51:21:a3:
ba:d4:f9:10:6e:6c:05:99:f5:0a:de:57:fc:32:9c:5c:85:05:
51:73:1c:95:04:f4:60:2a:0c:cc:05:b8:e8:29:5f:8c:0c:23:
ba:9f:c2:40:e1:74:0b:f3:de:01:83:5e:74:8c:46:96:b9:f3:
ca:7d:90:04:b0:12:a1:94:d5:13:65:95:f6:2e:f9:31:28:32:
0c:87:ef:61:e3:f3:79:47:80:8f:2f:c6:ea:01:7b:5d:f3:c3:
aa:90:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:19:08 2025 by rpki-client