Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: ZbyoIoFmZ5vbkkz1O2SYiuxgtSyNsZQJf4cUwcN0Me0=
Subject key identifier: E5:E3:A6:19:BF:21:85:63:41:B3:7B:FB:3B:BA:CF:EC:E7:28:55:32
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 0198D54DC831832E442B7A401B1C32649803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: qsjssa/8ZLTNNcLPkgSyC4jJwW488Tb/PYuGNu8nnvE=)
4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c8:31:83:2e:44:2b:7a:40:1b:1c:32:64:98:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=e5e3a619bf21856341b37bfb3bbacfece7285532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:d3:8f:79:e2:db:19:0d:51:d7:d2:73:70:
16:92:16:7d:22:dd:8d:c8:a0:bc:0d:4d:2c:72:e4:
6a:c5:b9:02:7b:26:b3:83:d4:8b:32:51:df:8a:0d:
39:5b:96:fe:88:a4:01:ff:7c:ed:e8:1d:66:5c:bf:
1d:5e:52:0d:27:9c:7c:d8:10:cf:b8:26:d5:00:cd:
27:2b:81:ea:73:73:b8:2d:cd:ed:bf:37:df:5d:83:
1e:e9:66:11:bc:e5:2d:fb:3f:94:bd:85:9a:ab:35:
33:76:9b:3b:95:89:c2:81:6b:6e:88:fd:3e:f8:fa:
52:c6:65:1d:e5:45:e1:4a:55:f5:1c:ad:dc:e7:f2:
89:c4:57:4d:b9:ea:4f:1c:be:3d:fc:f8:fa:b1:57:
45:e0:56:39:0c:e4:c6:97:9b:91:81:df:59:f0:48:
f2:a0:fd:08:37:f2:34:04:11:85:1b:51:9f:91:d3:
ab:da:ec:fa:93:5b:e3:0a:cd:85:ab:c6:57:9d:3e:
06:28:94:ef:a9:9c:81:8e:30:b4:23:9a:ba:81:61:
59:7f:ca:d6:b6:1b:8b:4a:0c:0b:e0:5b:89:b0:fc:
28:48:36:6e:1d:c2:b0:8a:dc:30:8b:5f:e4:32:e9:
11:c7:0a:ec:b1:c6:6b:1e:af:b4:08:9c:4e:99:cd:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E3:A6:19:BF:21:85:63:41:B3:7B:FB:3B:BA:CF:EC:E7:28:55:32
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7c:7e:98:f0:67:9a:4c:ac:54:f9:df:b9:f7:45:27:a5:f0:
2e:43:97:1c:b5:bc:bf:05:e1:54:52:9e:8d:3a:57:bf:16:90:
c7:af:e9:4c:c7:f4:4a:f7:8f:f5:34:8f:c2:4f:6b:bc:b9:26:
87:cd:a6:81:9a:3a:34:f3:95:cb:3f:05:37:1a:79:3e:38:cb:
d1:36:10:9a:c2:3f:c3:07:87:b8:d4:f9:4c:ee:aa:34:6d:c9:
18:52:be:9b:40:97:f9:ca:58:04:9e:59:75:f2:67:7f:2b:7e:
be:ca:17:0f:d4:4f:60:b4:df:7b:41:d5:f6:a0:9c:b3:6b:0b:
a0:4f:19:99:3e:eb:48:5b:a1:b2:90:d2:21:22:b1:77:fd:17:
04:3e:3b:fc:03:6f:40:86:0b:49:d7:22:ed:6d:be:c6:10:2f:
3f:fb:09:17:a2:ee:52:e4:96:ca:fa:07:91:8d:60:66:21:b1:
9a:d4:46:27:27:db:96:8a:e8:9b:54:8e:34:6e:c1:0c:90:58:
f1:67:77:60:96:a4:f4:2a:e6:c3:74:09:20:0a:4f:ae:30:4d:
e2:cb:87:86:99:5c:25:7c:94:9b:84:ae:66:8b:07:b0:9c:74:
1b:25:48:6d:84:fc:c4:cc:f1:f4:19:8e:32:09:78:5e:59:4b:
8d:e8:0e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:26 2025 by rpki-client