Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: A54QyGZtt200Q9a9+ihHtI3KCiKoy/ofJAwZRjh/oQY=
Subject key identifier: 91:5F:FC:F3:4F:37:D1:38:C4:62:48:4D:12:EE:78:50:81:49:E1:5A
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 01987F0A684551DA01B28FD2FDAC8F3BEE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 11:00:45 +0000
Manifest this update: Wed 06 Aug 2025 11:00:45 +0000
Manifest next update: Thu 07 Aug 2025 11:00:45 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: 9+PjiVDvTA+UhnwG5iemsgd/sDTFVM8A9YZkZVF5RXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:68:45:51:da:01:b2:8f:d2:fd:ac:8f:3b:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Aug 6 11:00:45 2025 GMT
Not After : Aug 7 11:00:45 2025 GMT
Subject: CN=915ffcf34f37d138c462484d12ee78508149e15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:86:53:3e:92:ad:52:19:9f:db:5f:b1:e6:
45:b4:9c:b9:f4:42:df:ce:ea:1f:c4:46:69:1c:c8:
5e:2d:a0:13:63:ca:c0:0d:81:67:a4:1c:7f:44:4f:
b9:84:dc:2a:2e:e2:c6:b7:80:75:0f:dd:37:8a:f0:
a7:c3:7a:aa:74:2c:47:aa:11:dd:66:ee:7f:b2:26:
4b:b5:29:bc:d3:67:52:13:37:41:10:8a:e0:19:1c:
18:ea:42:fa:34:99:0b:91:18:be:49:26:76:7a:34:
04:75:cd:09:7e:2f:e7:db:a6:24:a9:f5:7f:83:a9:
08:34:6f:0f:3b:f8:78:c6:a8:bd:97:3f:23:0f:5e:
43:b8:c7:a6:9b:55:c1:cd:4d:6b:14:6e:7a:95:50:
52:6c:9a:fa:5b:dc:9d:b3:15:15:78:5d:03:75:57:
c3:8e:2f:39:48:90:b4:0b:b0:9c:4e:d5:bf:bd:54:
53:b1:91:7e:05:13:a6:f6:2a:1d:cc:5d:4e:45:ca:
a6:11:aa:a0:7e:f0:4f:7e:de:49:03:35:77:da:88:
80:52:cb:1e:54:bc:e3:98:39:af:df:fb:af:b0:b5:
9a:0d:5c:58:8e:12:58:fd:ad:c5:38:b7:4b:f7:c9:
bb:2a:67:93:b2:6f:07:6b:5d:f2:7c:ab:29:90:cf:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:FC:F3:4F:37:D1:38:C4:62:48:4D:12:EE:78:50:81:49:E1:5A
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cf:bb:89:d5:ff:31:c1:77:3c:6c:fd:67:68:61:a5:20:18:
d1:36:94:3b:e9:72:db:00:06:53:c4:ae:72:49:07:47:21:9e:
24:f6:fb:8c:a7:b5:00:fe:8b:aa:8e:61:ca:ed:8b:7d:a6:c1:
54:37:be:fc:de:93:a5:e1:f4:af:73:d7:8d:b8:de:85:67:07:
9f:41:ac:a8:75:3d:51:d3:78:9f:d8:43:a6:83:84:51:9d:0d:
bf:4d:d2:85:c5:c3:c0:37:2a:53:75:e2:e0:e9:52:bf:35:1f:
51:d8:45:65:66:bc:f6:72:d7:0a:15:58:40:91:52:2b:5a:c7:
71:a0:ef:a7:62:70:1b:c9:e2:a0:39:7c:66:4d:34:ed:85:3d:
46:f7:57:50:65:b8:a0:5d:f6:c8:89:c0:dc:df:09:12:58:2d:
9b:be:f1:4a:cb:13:44:6c:da:7e:9b:0f:9c:7a:ce:e2:d6:94:
c1:7c:0e:0e:61:87:ab:76:bd:58:c8:2c:39:84:c8:8f:be:3f:
9c:b9:d7:f6:c4:74:3a:65:d2:cb:65:53:b3:be:7b:ad:67:55:
74:cd:81:b9:00:3b:90:41:d0:0a:45:cb:90:97:df:b3:44:ae:
ae:47:cb:3f:6a:3b:af:6f:9e:05:ec:37:e3:06:a6:2e:75:b9:
23:30:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:53 2025 by rpki-client