Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: qb9+iYJFY29MpWeLdQPTul32kc+AS19ZbHlVRdsJkY0=
Subject key identifier: 27:94:4A:C8:F7:5F:F4:F2:E0:F6:36:2F:C5:D7:BB:C9:3C:3F:D6:BD
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 0199FCC66728651CFF80199822E0BF9C6FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: WAqYtcn+zQ03TZRDBl0fO86vt/l3BVTFSEIPEKhAE2E=)
4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:67:28:65:1c:ff:80:19:98:22:e0:bf:9c:6f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=27944ac8f75ff4f2e0f6362fc5d7bbc93c3fd6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:6b:2d:eb:a8:50:8e:9a:4d:dd:43:d7:f8:
6f:67:70:b8:02:db:91:5e:78:7b:31:02:a9:8c:0c:
37:da:e7:df:f7:fb:90:ef:a4:8b:46:66:cb:25:a0:
65:ab:ea:15:5f:9d:23:a2:c9:af:a1:da:aa:68:58:
57:cf:51:12:66:3f:b3:eb:06:02:dc:f7:f6:20:32:
29:1d:6d:f7:2f:0e:52:a4:d2:0a:2f:9d:51:a0:35:
73:bd:a2:38:3f:d3:5d:2a:13:30:bb:9f:b1:be:ca:
6c:e5:19:3f:ec:a6:8b:ed:fe:8d:87:88:0b:39:6c:
19:6c:22:66:4a:e0:56:6f:67:18:36:c4:d4:e5:aa:
6b:00:65:b8:05:78:e2:62:2e:b6:b5:b4:ad:7d:6f:
3e:49:85:e8:98:20:40:dd:05:7c:b1:df:c0:50:64:
5d:3a:37:a5:77:d2:9e:e6:74:8b:35:2a:27:f1:36:
f4:0a:a7:07:de:08:95:91:42:d3:c8:7a:44:5a:6e:
12:42:d8:4c:b3:f3:03:32:e7:79:da:1a:3e:ef:61:
76:0c:ca:31:60:51:81:82:07:65:19:32:af:8e:a9:
a2:63:47:02:e1:3a:a0:22:da:c8:07:f9:1d:18:10:
48:20:a6:70:6a:1a:c2:d1:d9:79:75:f2:29:6e:47:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:4A:C8:F7:5F:F4:F2:E0:F6:36:2F:C5:D7:BB:C9:3C:3F:D6:BD
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:56:64:88:a4:e1:52:64:d1:05:f9:f5:b6:bd:68:4d:c6:66:
68:97:fd:e2:86:a7:02:fa:c0:e0:01:86:98:ea:3a:82:91:a7:
9d:00:4e:86:72:15:9d:92:da:a8:1f:96:ee:93:f7:1b:0a:56:
32:39:f5:9b:c0:6c:53:fc:f2:ce:1c:97:06:1f:fe:0b:1f:53:
cf:db:00:2b:a2:d5:d3:73:59:86:9b:7d:b3:2c:9d:bd:9d:21:
ae:ca:89:92:71:65:03:1a:1b:83:08:ed:82:15:2b:17:56:37:
22:aa:b1:3d:bb:83:dd:68:21:16:af:39:d8:dd:81:20:0d:ec:
eb:22:ed:38:57:6a:0a:c4:6f:c4:0c:06:19:04:75:6f:bd:3b:
7c:a2:a7:11:f8:c3:d9:00:af:1c:76:1d:0a:82:ed:eb:09:e0:
56:7a:9a:b4:48:b7:90:f4:6e:a3:9e:2b:65:ad:47:93:53:a2:
b6:59:23:2f:5e:07:ef:61:5a:b2:cd:dd:d2:39:c9:97:25:74:
fc:9f:70:92:05:c8:fc:01:c2:36:f7:28:b7:10:6a:4d:eb:e4:
6a:23:80:84:b3:8f:be:9b:71:41:09:76:cf:b1:e9:a1:c2:a5:
40:9e:9b:74:95:b6:d3:53:2a:3b:a1:f9:c6:86:bc:ca:8b:b5:
7e:ea:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:59:18 2025 by rpki-client