Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: I9BLrYn3TQdXBwd9ORXWMPcKdfz/185AnKW/nVCVUac=
Subject key identifier: 41:A7:63:A1:0B:59:CE:96:1D:DE:16:C0:0C:F3:7B:DA:27:00:F6:99
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 01989780DCD3082C0CC53D06D11FE58E6D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 05:01:01 +0000
Manifest this update: Mon 11 Aug 2025 05:01:01 +0000
Manifest next update: Tue 12 Aug 2025 05:01:01 +0000
Files and hashes: 1: cXzh2EByibI6pp16VOl9xphGioo.roa (hash: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: ZBVU0eo1jnEr2N6dljwYTxlPcYjZ/h1vdYFc5t8wQ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:dc:d3:08:2c:0c:c5:3d:06:d1:1f:e5:8e:6d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Aug 11 05:01:01 2025 GMT
Not After : Aug 12 05:01:01 2025 GMT
Subject: CN=41a763a10b59ce961dde16c00cf37bda2700f699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:a7:bd:34:ad:db:b0:b1:5b:7c:65:39:d4:
c0:52:32:f7:82:4d:fe:06:a5:36:d1:c3:78:70:9d:
7b:d6:0d:c4:7d:42:7a:20:b7:d8:38:29:64:58:60:
c6:c1:91:bb:3f:a6:2a:73:6c:05:83:eb:02:78:ef:
a8:f6:a7:5e:02:a5:30:7e:d3:8c:fa:11:85:23:cc:
4a:c7:cb:59:04:a8:55:2a:62:3e:d0:4d:1a:e8:04:
fb:02:9a:b4:39:73:09:05:b3:c6:b3:c7:63:9f:af:
a5:df:61:39:30:52:74:59:50:4a:d8:c4:1e:d0:35:
50:cb:58:d0:47:2c:6a:d1:86:3a:84:a5:59:90:f9:
06:a4:ea:2e:eb:5e:79:d1:d4:d7:0d:b5:e1:6c:7e:
67:0b:68:03:55:92:4e:51:f8:9d:e4:94:0d:02:ef:
31:67:c7:cb:39:24:81:05:b2:8d:70:7d:e4:19:ec:
f0:32:79:9e:fc:9d:d1:bc:ca:83:ac:e3:74:7f:4d:
0d:e4:84:eb:68:11:4d:ac:5b:86:55:2b:83:6c:f6:
d3:6a:b6:5d:f1:2a:2a:94:55:19:f5:c9:42:f4:01:
66:66:e6:f2:32:33:32:fe:c8:2b:b6:95:e2:0c:a3:
83:4f:ff:a0:15:b8:64:c7:fb:90:9d:af:e8:0a:fb:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A7:63:A1:0B:59:CE:96:1D:DE:16:C0:0C:F3:7B:DA:27:00:F6:99
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bf:f9:be:26:be:ae:e3:fe:bc:8f:75:6e:a8:e0:07:f8:64:
09:1c:ad:f4:2e:f5:ed:d0:df:bc:6b:01:69:52:59:c5:51:26:
6a:28:e9:7f:eb:9f:1c:c1:7f:d9:3c:db:63:69:ca:05:9b:db:
dc:c5:4a:a2:e2:4b:66:22:6a:c2:b6:9c:7c:87:ea:2b:75:73:
0b:d7:b3:e6:93:41:45:5a:4a:d6:74:68:3c:f2:41:03:71:d1:
11:7f:83:23:8f:8b:e4:c8:a6:57:2e:9b:9b:72:2f:48:3d:00:
20:93:82:81:53:41:51:44:25:43:70:d9:19:dc:e7:e1:86:16:
e6:0b:56:e0:1b:3d:a1:1b:c5:a2:ae:59:d2:10:3b:50:a0:70:
05:e0:02:7d:56:3a:42:e0:88:75:34:2b:40:0c:fe:80:f5:26:
f4:bb:6c:6a:98:ce:81:85:4c:5b:57:56:e8:34:68:9a:9b:a0:
70:83:75:ca:b7:6c:09:a8:13:f4:7d:65:dc:a5:cd:89:2e:2d:
71:a9:7f:b8:6a:ce:87:48:c3:f7:ab:1b:f4:47:57:e5:ed:d4:
1d:86:57:5b:aa:04:b8:cd:0d:49:35:8a:4b:01:7a:1d:d6:17:
5a:ed:93:eb:92:fb:08:ff:b5:2d:62:79:42:2a:2f:e3:de:3b:
4e:3c:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:26 2025 by rpki-client