Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: S7NUg3rAGoKsIFHL5VuyrdjOt4ixhUZcA5gL1oLWGIc=
Subject key identifier: 24:9C:6A:96:8B:87:E9:4A:C7:B7:9F:0B:C4:7E:D2:AB:F2:EE:EA:19
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 01974B5695347EA0B97B4733C519EFD7DA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 17:00:54 +0000
Manifest this update: Sat 07 Jun 2025 17:00:54 +0000
Manifest next update: Sun 08 Jun 2025 17:00:54 +0000
Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: YphTUaG1qmJP2Ttm5cOw0Jt+SiW70dc3uF8xKKfnkeg=)
4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:95:34:7e:a0:b9:7b:47:33:c5:19:ef:d7:da:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jun 7 17:00:54 2025 GMT
Not After : Jun 8 17:00:54 2025 GMT
Subject: CN=249c6a968b87e94ac7b79f0bc47ed2abf2eeea19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:c3:07:bd:3e:89:3e:eb:e6:d5:e7:15:02:
3d:39:dd:b3:3d:d3:ca:8c:ab:a0:eb:80:0c:6b:6e:
ff:e6:64:0a:0a:12:af:8f:0e:2c:16:99:33:f4:27:
c8:0a:40:51:97:c5:0b:0c:58:63:0f:93:13:49:cd:
3f:12:ed:c8:65:b2:54:f2:04:67:e0:82:96:c3:f0:
6c:3a:af:1c:78:17:e2:bb:1f:95:f9:9d:5f:ae:a3:
78:18:10:c7:d9:6d:f4:29:48:e7:4b:d9:05:bb:3d:
dd:89:d8:e7:98:b5:ff:41:fd:67:0f:54:48:81:0b:
a7:bc:59:f3:9f:3a:a6:cf:08:9b:cd:40:e9:ba:bd:
b3:61:cf:30:64:d1:07:75:69:0c:0a:e2:6d:0f:7c:
00:5d:47:39:af:6a:f4:51:1e:2a:5d:0c:fb:5c:78:
70:ca:af:4b:77:79:3f:fc:ee:41:a3:2c:ec:b7:92:
d6:90:73:cb:4c:77:49:9b:df:c0:8a:f1:aa:28:f1:
b8:83:0c:c9:03:3d:14:b8:05:e6:06:3c:dc:b8:fb:
26:f6:0a:94:c8:03:49:d5:b4:9d:d6:2f:23:6d:58:
5c:43:83:eb:50:87:4f:ec:31:5a:ba:46:8a:5c:db:
db:56:54:e8:59:f7:41:f2:da:c4:3a:32:9a:5b:73:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9C:6A:96:8B:87:E9:4A:C7:B7:9F:0B:C4:7E:D2:AB:F2:EE:EA:19
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:28:df:61:b8:8a:37:39:b8:4a:47:51:d2:60:7d:70:65:e2:
e4:cc:7c:3a:e1:7e:1b:d8:78:67:27:d6:9d:58:61:96:38:ea:
1c:83:1c:6d:32:83:28:d2:01:1b:c1:83:a2:a6:bf:15:e4:e3:
41:70:f5:09:83:80:89:23:cf:32:87:8e:e0:06:3f:6a:13:b6:
01:cc:d4:2f:14:f8:b4:c2:56:a9:16:1a:71:13:23:9d:65:41:
3b:06:98:62:00:0d:9c:45:36:13:22:5b:e4:af:d2:da:79:3c:
e8:b2:5b:a5:c0:9e:4f:15:8c:43:0f:1c:cd:6c:2f:5d:77:e9:
da:a3:14:32:54:31:82:eb:6e:fb:b5:c5:84:c9:52:b8:00:cc:
d3:ad:00:f8:6c:25:ac:ff:71:8f:ca:e8:7f:86:89:00:29:33:
05:22:eb:9d:a9:8a:35:c6:93:d3:23:f2:ac:96:70:27:5a:09:
d4:10:a5:62:1e:5e:b1:8e:34:9e:e5:44:b2:c2:67:35:d1:61:
cb:58:1c:81:1a:09:63:c9:21:95:87:8f:55:eb:66:63:fc:4d:
8a:51:c4:f4:72:43:aa:4a:36:2a:8b:f7:17:53:49:ac:cf:e8:
ce:32:6e:2f:fd:6f:70:1f:ad:bb:88:11:15:7c:25:23:7b:4d:
a9:0c:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:10:10 2025 by rpki-client