Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: WAKsxeneYIxY/cjs5hEpvgM8wloq2eAyTJbNscdbEOo=
Subject key identifier: C3:A8:D5:39:14:7B:D0:8F:57:5B:62:FC:AA:5A:93:B3:7B:EA:5D:8B
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 0197B77C41504298959A80D19700D2E99BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:03 +0000
Manifest this update: Sat 28 Jun 2025 17:01:03 +0000
Manifest next update: Sun 29 Jun 2025 17:01:03 +0000
Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: kr4fouaN+s/z0wUuV/VGmMu8Y0fxi7mO1+LpSoWevf0=)
4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:41:50:42:98:95:9a:80:d1:97:00:d2:e9:9b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jun 28 17:01:03 2025 GMT
Not After : Jun 29 17:01:03 2025 GMT
Subject: CN=c3a8d539147bd08f575b62fcaa5a93b37bea5d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:82:66:f3:cf:b4:d8:56:5e:ba:e4:13:fe:
ba:dd:2c:da:8a:36:b3:7a:30:49:bc:97:cf:a8:aa:
b5:3a:32:ed:91:e7:78:82:db:7e:e3:0d:8c:ca:87:
80:34:54:57:16:b1:4d:0e:85:05:5f:ee:a8:3d:9f:
61:60:44:55:c6:7b:d1:74:40:8e:23:d4:ca:4d:9d:
e1:9f:ec:a6:d6:04:65:38:b5:d6:c7:9a:e8:3d:dc:
f4:89:59:0e:8d:5f:3b:ff:03:e0:45:70:ab:af:bd:
97:ae:73:39:c6:11:08:02:96:3f:79:4e:ef:64:d4:
9e:8f:58:8c:83:b8:2a:cf:a8:98:6f:55:1c:ae:b7:
af:65:14:0a:7e:40:d1:77:73:ee:40:22:10:ef:fd:
69:5d:71:ad:c2:b1:6e:39:4e:bc:c0:df:6f:9d:34:
14:06:92:b2:64:37:52:f1:43:34:28:5b:c0:a1:51:
21:7f:95:fa:ae:9b:33:c1:6d:ed:ba:ea:5c:19:61:
21:9b:ab:2d:a4:ac:0d:7b:ed:ce:56:3f:24:fa:31:
4f:80:ec:d7:60:3e:9a:14:bb:cd:e1:1c:ee:2c:02:
ab:fe:a1:bb:75:9b:5c:1d:f4:31:2f:8f:7c:39:5d:
ef:c4:51:4c:e8:db:15:2e:1e:4c:41:24:97:4f:7d:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A8:D5:39:14:7B:D0:8F:57:5B:62:FC:AA:5A:93:B3:7B:EA:5D:8B
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:00:6b:71:55:9e:c6:1d:94:68:64:fd:f6:c8:98:99:b5:26:
30:2b:ec:23:59:cc:e0:53:b4:18:70:65:e7:54:b4:24:54:2d:
17:23:e6:69:bf:7c:eb:1d:df:ea:bc:89:67:6b:42:ea:db:2e:
46:e3:b4:68:1c:91:a9:72:df:28:03:db:b3:88:d9:0a:a7:ac:
93:41:68:b7:b7:25:a5:70:c8:b1:cd:18:be:0e:83:ee:92:72:
f9:cc:8d:51:58:f7:f6:f0:53:d1:1c:4e:96:9c:be:06:40:51:
a6:2e:7a:5c:b3:46:93:9d:0f:50:95:01:d7:a8:69:c6:e8:77:
d4:df:48:5e:f9:78:a2:9e:0c:4f:b1:fc:d7:37:8c:19:eb:ec:
ad:2d:66:bd:bb:cb:e1:c1:26:f4:eb:b3:47:b3:8a:bd:c1:bf:
d6:e5:d8:5b:5b:b7:f5:d3:06:01:42:72:24:a8:2d:35:4d:ef:
8e:d0:5b:3e:5e:69:79:2d:3e:0d:f8:f0:6e:23:de:c5:d3:e2:
86:bd:bf:21:d7:b9:08:05:1e:ee:69:78:1b:86:70:55:07:03:
f3:30:01:0d:e7:f3:2f:29:d2:94:37:2f:5f:73:5a:37:75:79:
40:6a:22:7c:32:82:11:bf:d9:59:1b:f9:13:da:93:89:1b:38:
03:ab:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:09 2025 by rpki-client