Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json)
Hash identifier: LFAW3VbxofxdsqEBKxEMolSFP1MITxBSC8ffvj9rc78=
Subject key identifier: CD:27:A3:0A:1D:32:60:41:30:26:93:71:74:9D:65:9E:47:73:B3:ED
Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Certificate serial: 019A4F6273C3F6C6A6455847D2EF85ED1299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
Manifest number: 02A9
Signing time: Tue 04 Nov 2025 15:00:43 +0000
Manifest this update: Tue 04 Nov 2025 15:00:43 +0000
Manifest next update: Wed 05 Nov 2025 15:00:43 +0000
Files and hashes: 1: NR0WsT059Uu9ocKkEY9pXlrin1E.roa (hash: VV0hNdxr41R7/bkmPoA35nvmhlKGJglGwfeyHr+U+LY=)
2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: XW2qUAzENsEl/fE1zLuEiws1GEB2PCt5biixTu+fuRQ=)
3: SEh_0GqoSaiRBqWseUujp9ajyxU.roa (hash: 4qBD/oh8RDMtbEgS97ZhV1TCABNjw7BvgNSejlDS+ZM=)
4: g6a9uq2KRc9wYONVhtFPPZGaBr4.roa (hash: Jcii24w5hELShXLMXhNP2/DuSUjwnJEfN84e/8CYORI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:73:c3:f6:c6:a6:45:58:47:d2:ef:85:ed:12:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2
Validity
Not Before: Nov 4 15:00:43 2025 GMT
Not After : Nov 5 15:00:43 2025 GMT
Subject: CN=cd27a30a1d32604130269371749d659e4773b3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:2b:7d:33:57:dc:ac:f2:88:5e:f5:78:fa:
70:08:1a:d4:8c:19:d1:f7:27:d1:39:ba:c0:01:73:
55:d7:b6:6a:f1:e6:aa:ed:51:74:67:4f:99:cf:8b:
5a:8e:f7:e5:d0:19:06:70:19:8a:ae:85:87:13:84:
10:4c:10:0c:65:9b:24:12:80:6c:63:e4:1c:3a:f8:
fa:05:88:80:50:02:9e:37:ec:09:cb:27:82:ca:e5:
a2:50:61:89:4b:6d:33:32:f3:1b:26:63:a3:ae:b1:
47:2f:1e:92:20:5c:73:46:15:ad:03:4f:d2:72:40:
3c:d7:a7:c5:cc:35:76:f0:a0:d0:29:69:c8:b4:0e:
75:cb:1c:f2:69:06:05:0f:11:dd:2e:3e:02:42:48:
36:5f:96:14:62:f2:96:ac:2b:f4:4f:96:a7:25:33:
bf:61:c8:2b:98:36:e9:12:2c:b9:e8:9a:6f:2e:38:
89:d1:2b:88:71:f3:25:25:92:3d:d3:4a:98:8a:ae:
1e:77:fc:8b:c4:48:c1:8a:36:f5:ed:b8:de:be:32:
c4:4d:49:e0:5b:11:2c:7f:b4:45:8c:26:f5:17:f2:
21:02:3b:2b:11:62:93:f7:6e:26:ad:9b:24:4a:d8:
4c:df:b8:ff:c8:45:90:0c:9a:7c:b8:c5:ad:4c:59:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:A3:0A:1D:32:60:41:30:26:93:71:74:9D:65:9E:47:73:B3:ED
X509v3 Authority Key Identifier:
keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:80:51:d3:4b:82:4f:d8:d4:5c:be:ad:60:00:18:3a:d4:14:
1b:4c:bc:7d:f8:7d:7f:e9:b2:fb:3c:a8:2c:e2:6c:3d:e2:b3:
06:4a:35:03:f4:71:c5:61:b9:71:41:68:a2:73:1f:df:c1:74:
5d:1a:a8:20:da:ff:09:44:94:de:99:57:51:96:7a:e9:08:35:
61:c0:ba:19:07:cc:a8:c0:80:d3:4b:7b:da:b5:cd:f1:8f:ae:
51:a0:e9:a0:af:57:c6:f9:41:e4:51:15:61:32:4e:bc:2d:41:
35:4c:e8:a8:aa:e0:dc:64:21:0a:e8:c6:1b:7e:00:ad:0a:4b:
1a:08:02:7d:33:2a:4c:b3:17:4f:de:2c:09:13:e0:0b:dd:d1:
b2:46:7b:8e:82:2f:82:fd:14:f0:3b:1e:91:c0:46:16:b6:d3:
c0:36:38:77:94:e1:b3:f2:0a:5c:37:cf:0f:2b:50:56:72:ad:
12:d5:eb:8e:1e:32:25:4f:18:dd:23:9d:a0:2e:c2:c0:91:43:
47:ab:79:61:68:b3:19:c4:16:fd:fc:16:12:59:0b:51:36:37:
06:31:3e:55:49:a6:4d:eb:de:42:7a:35:94:2f:19:04:e1:86:
40:87:d2:e2:ee:81:8f:f8:a1:0f:97:d6:72:a5:a1:94:00:10:
c9:ae:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:20:53 2025 by rpki-client