Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: ybXnPlPfyTRPRv7KaGjiiDff2ibEd5mWJWzLLdQOwKA=
Subject key identifier: 61:51:9B:DD:16:92:B7:AE:51:5B:B7:2B:6E:15:6F:FF:EF:0F:D7:F3
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019A293031179A3908C9DD8D3FE6D26E4D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 16F7
Signing time: Tue 28 Oct 2025 05:00:15 +0000
Manifest this update: Tue 28 Oct 2025 05:00:15 +0000
Manifest next update: Wed 29 Oct 2025 05:00:15 +0000
Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: J2o5o/Lljmfig2xCxJcvKbVKzquq3QD+4u6nnlSqh6o=)
4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:31:17:9a:39:08:c9:dd:8d:3f:e6:d2:6e:4d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Oct 28 05:00:15 2025 GMT
Not After : Oct 29 05:00:15 2025 GMT
Subject: CN=61519bdd1692b7ae515bb72b6e156fffef0fd7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:62:27:7a:7a:a6:9c:61:0f:f4:1e:fc:75:
e0:53:ea:ec:c7:40:ee:5b:46:27:ee:30:54:d2:b1:
80:f4:98:34:7b:ee:6d:1b:48:af:0a:9a:d6:73:4e:
fb:4d:03:84:87:2f:c0:45:6f:fd:12:35:04:7d:54:
8c:f2:5b:d5:a1:69:82:be:57:16:73:53:78:15:54:
d0:c9:4f:e0:8d:25:e9:6a:0c:a7:0d:5e:c8:5d:d9:
a4:1e:aa:a8:25:bf:52:b8:a2:45:45:cf:6d:dc:be:
b4:cc:05:ea:cf:fb:7f:f3:fb:62:03:93:06:81:e1:
33:08:ff:66:9b:fb:c3:e7:4f:77:49:3d:48:c0:df:
8e:6f:29:6d:71:35:22:73:e8:5a:d4:74:8b:10:77:
a9:6a:ef:3b:33:a4:2b:d4:a0:5f:7c:63:9b:eb:79:
50:c4:45:c9:7e:84:18:31:d1:bb:7e:3a:50:9e:31:
4a:1b:13:fd:39:87:77:c0:4a:07:aa:70:b3:6d:19:
df:d5:eb:18:9b:7b:7a:17:78:67:1c:54:d9:15:c1:
de:a8:f8:86:fe:f9:90:9d:0d:13:82:a5:de:7a:fb:
c7:a3:05:90:3a:fb:5c:c0:e9:b5:f3:f4:0d:00:7b:
73:b1:6a:82:68:98:12:2d:e4:49:24:ed:9b:a8:b0:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:51:9B:DD:16:92:B7:AE:51:5B:B7:2B:6E:15:6F:FF:EF:0F:D7:F3
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:84:55:08:34:6f:41:bd:2b:80:ad:1f:f0:c9:07:b3:0f:50:
f1:1c:d0:e6:21:b6:a8:d8:ab:08:87:24:e6:e7:0e:92:0d:a8:
f2:25:54:47:58:f6:01:af:9d:f0:05:e8:68:6f:8e:64:99:12:
52:ea:22:b1:74:1c:21:9e:d0:12:75:aa:91:d4:25:87:5d:4e:
4c:b6:fd:5d:93:88:44:8e:5e:f1:13:2c:18:e6:75:88:8a:e4:
fd:bc:36:13:ef:a6:76:ca:48:0b:91:76:66:60:2e:c9:58:fc:
91:1f:7e:11:6d:01:b3:44:7c:15:86:e6:63:55:fc:64:90:ad:
65:7a:17:0f:72:48:1e:29:71:9f:65:5c:42:5c:f3:f2:14:e9:
97:50:95:24:48:1a:f3:2b:b3:14:26:f0:8a:6a:02:d7:e2:1d:
e7:fa:3f:02:a6:b3:16:b7:50:8d:3d:b1:12:c6:42:ba:4f:e3:
2d:ac:21:59:51:28:f4:41:df:f2:7d:44:0a:49:e5:36:22:e1:
94:74:4d:be:c2:a1:ef:c5:44:5d:c1:5b:1c:2b:35:38:81:7f:
b2:b6:9c:69:81:c8:d0:b5:e4:04:f4:da:a6:56:ab:de:0c:08:
71:b9:03:e0:a2:b6:02:14:ab:a6:0e:75:20:15:1f:6f:2c:e6:
68:66:51:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopMDEXmjkIyd2NP+bSbk0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZGRhZWIxNjRlMzk4MjE0YTE3MWEwNDEwZTZiMDIzMmQ2
NDJmNTAwHhcNMjUxMDI4MDUwMDE1WhcNMjUxMDI5MDUwMDE1WjAzMTEwLwYDVQQD
Eyg2MTUxOWJkZDE2OTJiN2FlNTE1YmI3MmI2ZTE1NmZmZmVmMGZkN2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXRiJ3p6ppxhD/Qe/HXgU+rsx0Du
W0Yn7jBU0rGA9Jg0e+5tG0ivCprWc077TQOEhy/ARW/9EjUEfVSM8lvVoWmCvlcW
c1N4FVTQyU/gjSXpagynDV7IXdmkHqqoJb9SuKJFRc9t3L60zAXqz/t/8/tiA5MG
geEzCP9mm/vD5093ST1IwN+ObyltcTUic+ha1HSLEHepau87M6Qr1KBffGOb63lQ
xEXJfoQYMdG7fjpQnjFKGxP9OYd3wEoHqnCzbRnf1esYm3t6F3hnHFTZFcHeqPiG
/vmQnQ0TgqXeevvHowWQOvtcwOm18/QNAHtzsWqCaJgSLeRJJO2bqLCJzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFRm90WkreuUVu3K24Vb//vD9fzMB8GA1UdIwQY
MBaAFKLdrrFk45ghShcaBBDmsCMtZC9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzkt
MTEyZTExM2JiN2I3LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzktMTEyZTExM2JiN2I3
LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYRVCDRv
Qb0rgK0f8MkHsw9Q8RzQ5iG2qNirCIck5ucOkg2o8iVUR1j2Aa+d8AXoaG+OZJkS
UuoisXQcIZ7QEnWqkdQlh11OTLb9XZOIRI5e8RMsGOZ1iIrk/bw2E++mdspIC5F2
ZmAuyVj8kR9+EW0Bs0R8FYbmY1X8ZJCtZXoXD3JIHilxn2VcQlzz8hTpl1CVJEga
8yuzFCbwimoC1+Id5/o/AqazFrdQjT2xEsZCuk/jLawhWVEo9EHf8n1ECknlNiLh
lHRNvsKh78VEXcFbHCs1OIF/sracaYHI0LXkBPTaplar3gwIcbkD4KK2AhSrpg51
IBUfbyzmaGZRgA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 08:52:50 2025 by rpki-client