Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: UDsDArrjnuXemhtkI+7V1qyMF/57aOVjs38DILRSQMs=
Subject key identifier: B3:76:9F:E1:13:E6:D0:BD:1B:96:32:CA:DF:27:67:08:09:B5:78:E3
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 0198D54DF2A0343DC2351AC40CCB51E27DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=)
2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=)
3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: HflmdRZLOcYmvTaNfT+s5GNImyfTjRZwPiHWkKDep+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f2:a0:34:3d:c2:35:1a:c4:0c:cb:51:e2:7d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=b3769fe113e6d0bd1b9632cadf27670809b578e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:3c:28:9b:81:3b:50:34:fb:18:54:81:56:
73:8d:28:cf:61:f5:0d:61:d5:38:f6:5c:84:28:bd:
86:99:0c:9b:a7:ee:b2:7f:94:bb:2c:16:29:c5:1f:
6a:79:5b:fb:39:31:b9:f9:0b:e7:42:3f:f5:2a:d5:
c1:f0:c5:bc:c2:e0:02:3b:00:42:4b:37:d6:44:c7:
f4:f9:69:fd:2b:d7:db:ca:a8:7e:0e:b7:76:27:ef:
71:4c:62:50:80:9c:e2:05:ed:ef:7e:40:d4:75:25:
c2:94:c2:4d:7e:b7:32:f8:52:11:73:f8:4b:d7:8a:
30:83:78:c2:82:04:f2:49:af:1e:c3:63:eb:3f:40:
89:1c:c0:59:b5:37:5d:6c:ec:79:38:f2:e0:3e:7d:
c7:3f:2f:79:55:ad:9d:bb:ff:49:0d:6e:77:49:57:
e4:5d:dd:9b:ce:66:cb:79:a6:5c:71:16:7b:f4:15:
c2:45:37:52:27:02:2a:a3:14:de:3e:81:30:f0:1c:
cd:69:86:74:e9:68:4b:59:6b:43:67:6b:0f:3b:27:
4a:19:2e:2c:ec:a0:34:fc:78:a9:b8:20:69:27:4c:
71:12:6b:b8:a6:30:36:0e:c5:76:f6:64:ac:ab:68:
f3:fc:84:8e:25:55:00:78:0d:eb:dd:15:5f:8f:6c:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:76:9F:E1:13:E6:D0:BD:1B:96:32:CA:DF:27:67:08:09:B5:78:E3
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2d:fb:83:f5:86:82:83:4b:e8:c7:1c:fc:7b:77:b7:f8:8c:
cc:c4:6f:51:0f:36:a4:0a:e0:30:ee:c7:d3:da:b9:a7:08:5f:
93:b7:e5:73:7d:81:70:10:91:f5:6b:08:5c:d6:fa:cc:b8:8f:
56:bc:05:a2:77:b4:68:9b:8b:8e:5c:08:48:3c:9f:2a:39:58:
0e:3c:f0:5f:0b:09:57:65:e6:1c:59:2a:95:f9:f4:bd:0e:e5:
3f:03:6c:fb:cf:37:e5:70:12:b2:02:39:03:2b:e9:39:21:f5:
04:78:4d:cf:1c:1b:58:86:15:20:6a:0c:48:b3:f4:e2:77:0c:
65:f2:99:e2:d5:25:68:8d:cc:ef:63:dc:bf:4e:9a:58:8e:10:
49:03:1a:02:ef:40:c5:90:76:11:cc:10:f8:fb:89:28:c7:e6:
ed:44:07:f0:e9:99:7a:06:4b:b7:fe:e2:17:fc:b6:17:46:1c:
1b:8d:32:f3:b9:5a:6d:c8:e6:10:04:9e:01:a0:d7:93:f4:85:
9e:b8:62:23:6d:d3:72:58:a3:25:33:af:3d:0e:fe:d3:b5:7b:
3a:e1:3b:15:7d:ed:d2:6b:3e:dd:33:3d:27:80:7b:59:86:47:
7c:34:b7:ac:cb:7b:41:d1:16:19:21:c1:72:98:91:3a:77:b6:
80:b7:7a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:34 2025 by rpki-client