Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: LlZVVgei2EjkhaYBiKalZlXve5hYBaLimyvplW4Ops0=
Subject key identifier: DA:A6:19:B9:AF:BE:99:F8:D4:33:14:69:95:64:6C:9D:79:2A:DD:F8
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 019897128CAB0145DB1EEFA93218D3E84A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 01C5
Signing time: Mon 11 Aug 2025 03:00:31 +0000
Manifest this update: Mon 11 Aug 2025 03:00:31 +0000
Manifest next update: Tue 12 Aug 2025 03:00:31 +0000
Files and hashes: 1: NR0WsT059Uu9ocKkEY9pXlrin1E.roa (hash: VV0hNdxr41R7/bkmPoA35nvmhlKGJglGwfeyHr+U+LY=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: yzrsDvaZSY2NGWYQXCxAkham4smbODmuR8ikUQ8oH6E=)
3: SEh_0GqoSaiRBqWseUujp9ajyxU.roa (hash: 4qBD/oh8RDMtbEgS97ZhV1TCABNjw7BvgNSejlDS+ZM=)
4: g6a9uq2KRc9wYONVhtFPPZGaBr4.roa (hash: Jcii24w5hELShXLMXhNP2/DuSUjwnJEfN84e/8CYORI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:8c:ab:01:45:db:1e:ef:a9:32:18:d3:e8:4a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Aug 11 03:00:31 2025 GMT
Not After : Aug 12 03:00:31 2025 GMT
Subject: CN=daa619b9afbe99f8d433146995646c9d792addf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:91:37:67:5d:dc:f8:c3:ce:da:a0:b6:ef:
b2:8a:e1:26:8d:39:4f:d9:69:5a:27:9a:00:24:cb:
42:d9:21:cc:23:b2:c2:05:01:47:49:fa:0a:1f:c5:
c9:a0:24:fa:d4:e6:c1:76:f8:24:af:1b:42:f7:b5:
2a:d5:e1:c3:06:9c:42:65:eb:20:c1:ba:df:9d:5d:
5a:92:bd:ef:8f:17:88:e3:af:5c:9a:1e:ee:a8:14:
49:ba:e4:ec:78:7f:b5:e8:b9:d1:d0:a2:b8:13:f7:
d6:88:ba:bf:b4:c3:ff:6d:c2:25:a1:0c:c7:84:d3:
1c:dd:a9:ee:0b:a0:f4:c2:6c:71:72:47:df:51:74:
42:48:f7:cc:6b:d6:8e:83:bc:da:72:ea:6d:aa:3a:
b5:c6:6c:dc:c8:e6:68:0e:0b:6c:1f:1f:7a:81:03:
28:fb:8c:36:50:68:45:20:86:82:cc:66:62:ba:5a:
f3:4f:7b:2d:be:c9:9d:b8:99:49:7a:78:88:13:17:
e5:9d:fb:e3:d9:e0:75:66:f7:25:3f:db:d4:0f:cf:
65:4f:b5:97:78:b6:d1:2e:4c:f1:64:f3:56:a5:ba:
99:ba:a7:56:d3:fb:8e:ce:8a:83:58:c3:70:73:9d:
91:25:31:1c:ef:23:2c:d8:6e:a1:77:fb:3a:ed:1e:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A6:19:B9:AF:BE:99:F8:D4:33:14:69:95:64:6C:9D:79:2A:DD:F8
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e6:0a:e3:de:85:f3:ef:03:e2:a1:2a:8d:c5:2b:70:39:6b:
95:9c:0c:d5:c2:17:ea:a4:83:08:7e:f7:91:62:0b:8d:71:8d:
7d:9c:28:8f:f1:61:a6:1b:fb:bc:31:05:3c:b2:0e:42:63:7c:
54:e9:dc:0c:8a:ed:57:f5:0f:53:f9:a3:6a:2d:0a:c4:c3:0e:
f8:60:22:7e:57:a1:44:40:e0:71:e4:76:3b:66:a2:ad:06:f8:
d2:08:74:5b:62:b6:9f:24:8d:9a:8f:20:14:3d:69:a6:e0:90:
99:e5:f7:08:2c:6d:37:a7:2c:fd:3f:93:a7:0f:7a:1f:ce:71:
14:27:a0:99:89:c7:06:e1:34:50:5f:6b:0d:94:71:25:31:f7:
58:d6:64:bd:65:93:5f:1a:05:f0:bc:52:55:45:28:99:8d:d6:
03:11:2b:2d:2e:64:60:25:52:3f:a5:fb:9e:55:67:94:0b:2f:
11:68:f8:be:5e:04:84:96:ce:a5:c0:ab:1c:e6:dd:98:f2:96:
64:87:6f:e9:8d:98:ee:1c:e3:46:66:27:8f:7e:30:36:13:36:
d1:81:70:9f:3c:02:9e:87:30:ea:8a:a6:ac:37:b8:85:9b:10:
29:b2:7a:fc:ae:7c:6a:0a:41:10:27:a9:40:c2:de:ff:dc:bc:
8b:79:0c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:21 2025 by rpki-client