Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File: RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier: RBRX3NjTtcSvWxId25JGpaIBy+zgh6qw5WQ4/PYzWOY=
Subject key identifier: D2:1E:EC:B8:3E:7D:91:8E:5A:B6:62:94:02:4F:E5:83:3F:AA:60:42
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 0197B821048CA9F20303AD25C677459F0CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number: 08D2
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: OZ7XXs5-vTfiSAWKoDmEkN7zWeQ.roa (hash: l/UsCgIJDNyf/l0N4v4B7v81nHJghd1pRCptDGkln1E=)
2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: /lYsiaDCODZqFrAQsQIJK8efN7E0aPwOmcNj6SSH6mY=)
3: bollIzhNfRvYanh5m9u8c1tqdcM.roa (hash: h9HWb5No43oY67BT/CufDxfVRQJTjdQZn1o0Ans09NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:04:8c:a9:f2:03:03:ad:25:c6:77:45:9f:0c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=d21eecb83e7d918e5ab66294024fe5833faa6042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:2c:30:8b:d3:5c:5c:16:40:33:81:fd:b9:
0c:5f:9c:78:d7:ac:63:fd:5a:b9:54:ea:bd:41:8a:
3a:c6:d4:ca:ea:8e:05:c8:64:46:f7:b6:c5:c6:98:
6c:72:b9:c6:d4:54:bc:8f:95:55:a2:37:cd:e4:74:
a9:48:c9:00:18:f0:af:9b:2b:6c:96:2b:28:78:42:
42:c2:d9:41:d0:a6:19:36:15:92:aa:e3:6b:b9:ab:
da:1a:57:c7:06:bf:0e:b0:dc:e8:10:6f:9a:86:6d:
eb:5c:74:a7:11:91:36:f6:a6:72:aa:d2:0c:49:a6:
86:0d:64:9b:3f:f8:3f:fa:9d:d3:fe:ad:a1:c4:ea:
55:2f:40:a5:75:54:0f:2d:af:1c:c9:0e:55:0f:a0:
29:83:75:85:99:cf:42:0a:30:e8:f1:6c:b5:36:30:
1f:75:e2:f3:a9:d0:cb:b2:58:33:25:38:4f:8b:3c:
41:01:75:86:bb:a3:77:f2:56:d3:c4:b9:90:51:fe:
dd:fe:4a:ae:99:9c:f3:56:4f:0d:ad:30:34:0f:c1:
0f:78:ac:65:b9:b5:92:50:2f:e6:38:99:a1:34:22:
69:6a:04:66:56:a0:22:06:3a:6d:e8:1d:b7:56:20:
0e:c8:c9:8d:e2:2b:49:5c:fc:fe:6d:6e:2a:59:f0:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1E:EC:B8:3E:7D:91:8E:5A:B6:62:94:02:4F:E5:83:3F:AA:60:42
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b6:f6:b0:9e:77:d6:ff:04:02:2b:86:4b:08:28:59:42:8e:
d1:10:83:61:18:2e:34:7a:43:94:31:20:0c:5f:c7:83:d2:98:
d7:83:a0:95:cc:f3:d2:bb:b6:28:e6:59:a8:4b:6a:87:db:c5:
c7:6b:bb:be:b2:62:f8:6c:f1:3f:f4:fc:2e:bf:08:dd:3f:45:
74:a5:03:2b:2f:db:6a:12:d7:9b:4d:bf:c1:97:e5:de:67:e7:
60:2b:77:8b:62:45:e4:a4:6a:a2:fd:40:9d:9b:69:ce:0a:82:
19:be:dc:4f:78:a5:e3:ca:7f:95:a5:84:3f:3a:72:88:ad:9a:
b4:68:a4:f6:7d:46:42:e7:96:82:fc:58:dc:4d:59:98:d3:84:
0e:83:46:80:c6:5e:29:41:d4:25:24:a8:01:0a:3e:38:0c:47:
ab:82:62:82:ce:32:46:57:63:8a:24:74:9d:c8:bc:ac:47:f0:
69:2c:7c:f8:02:73:48:9d:3b:62:ad:02:7e:ff:20:18:fb:dc:
92:11:94:26:f2:09:d8:4d:76:ce:41:5e:df:eb:42:f2:97:df:
90:24:a4:46:1c:9c:60:54:c6:1a:36:47:fc:36:9c:15:ed:ab:
73:c8:53:73:2d:0b:9f:3c:6b:93:0e:8d:27:4e:fb:36:6f:c0:
57:cb:4c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:39 2025 by rpki-client