Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: zJYC9KYugH8sBLfa2qAMJQUnh9rXWrZ2XO7qR47MHns=
Subject key identifier: 20:70:9A:39:46:96:B6:D9:54:14:3F:AD:84:80:15:F4:06:AE:7D:B4
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 01992CA28AC4DACCC7BF88518582B36BB09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 04D4
Signing time: Tue 09 Sep 2025 04:01:13 +0000
Manifest this update: Tue 09 Sep 2025 04:01:13 +0000
Manifest next update: Wed 10 Sep 2025 04:01:13 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: zE+mZbpwLfNg2212uVFQL6oej3F3oEDYK9mXRp7vlqc=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:a2:8a:c4:da:cc:c7:bf:88:51:85:82:b3:6b:b0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Sep 9 04:01:13 2025 GMT
Not After : Sep 10 04:01:13 2025 GMT
Subject: CN=20709a394696b6d954143fad848015f406ae7db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:ed:a7:54:b5:f2:96:e7:b1:fe:59:14:6a:
22:46:6c:e6:7e:a5:b9:99:9c:cc:e4:ae:27:64:bc:
ec:eb:7c:81:0c:af:c8:13:b0:09:0a:be:58:69:84:
99:bb:b5:07:19:d1:82:d5:13:f5:2e:05:c9:f1:8d:
a6:83:c9:38:8e:d2:e3:3b:66:94:58:b9:0b:28:32:
4a:4c:ba:54:c1:b7:52:e5:0f:da:89:63:5b:90:5c:
99:03:cf:76:5d:13:e3:4f:8b:e6:17:65:a1:01:52:
43:c8:1a:96:3b:df:97:d3:49:d2:9b:4f:65:20:5c:
19:d4:e5:c4:6c:6a:00:b2:52:4e:89:df:5b:8f:cb:
3e:09:42:95:cc:37:55:7f:54:a3:22:a8:9a:16:4c:
ea:a7:03:1a:52:5a:3d:4e:25:f3:b5:e5:bb:5a:69:
ba:8d:da:5a:7c:eb:1f:1a:20:4a:79:b0:23:56:25:
fc:d2:fe:0d:fc:8f:d0:05:9c:fd:30:46:2f:76:15:
fa:27:2d:a1:cf:7b:8a:59:4a:5e:c4:4b:27:34:2f:
a4:03:71:d4:9b:d8:7c:f3:5f:52:58:19:44:06:7d:
0e:1e:8e:b4:f2:f3:78:67:df:f0:5a:84:a8:28:64:
81:52:bd:5c:c1:a7:2f:4c:fc:d0:55:cb:2e:3a:b9:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:9A:39:46:96:B6:D9:54:14:3F:AD:84:80:15:F4:06:AE:7D:B4
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:69:49:f3:8d:cf:ff:85:51:6f:94:fd:f1:63:24:1b:28:34:
e1:81:2c:c9:b2:0e:5e:99:86:5c:ee:7d:ab:e0:15:2c:f3:b2:
ea:36:5f:8f:79:4e:eb:13:1f:50:9b:d0:ed:4e:8c:7e:37:f2:
96:ec:9b:82:74:40:c1:d0:c3:64:2d:bd:fe:2b:a0:27:a5:0b:
57:81:0c:85:a9:4f:ad:91:9f:7f:c6:33:2e:65:d8:76:88:0d:
28:aa:16:3e:de:02:bd:df:06:96:55:88:31:06:ed:d6:e2:4e:
b7:c4:8b:71:ec:0c:3d:93:56:35:1e:0d:d0:5e:4c:90:7b:28:
9a:f3:52:97:40:a3:5e:b1:eb:3d:be:3b:21:50:78:6f:bc:34:
d8:4c:9a:b5:8a:fd:34:c7:d8:cb:1a:5a:f8:84:44:e9:06:26:
71:47:eb:a2:db:19:d0:14:ce:b7:e6:15:46:b2:8d:a5:f2:da:
7b:0d:af:0a:b4:f7:9b:e9:fb:6f:1b:a3:a4:d6:29:42:4d:7c:
60:ab:91:94:3a:78:23:06:37:54:0e:14:e2:79:7f:ae:23:53:
33:ed:e6:cc:6e:51:2f:51:b4:bc:62:e7:62:09:af:28:f5:b8:
e1:cb:c9:c9:50:01:d2:48:5c:49:a1:b2:d4:24:cd:d6:8b:a6:
c1:51:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:13:10 2025 by rpki-client