Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File: RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier: 3hBhxmRwSzy+JJ315tPkAFzrTrwq4nsdqXQ4eMnrIq8=
Subject key identifier: 26:ED:54:9E:28:91:97:5D:90:0D:75:9E:96:6C:6D:16:30:3A:77:B9
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 019A4E86681E3C31F45827296EAFC209ACBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number: 0A29
Signing time: Tue 04 Nov 2025 11:00:22 +0000
Manifest this update: Tue 04 Nov 2025 11:00:22 +0000
Manifest next update: Wed 05 Nov 2025 11:00:22 +0000
Files and hashes: 1: OZ7XXs5-vTfiSAWKoDmEkN7zWeQ.roa (hash: l/UsCgIJDNyf/l0N4v4B7v81nHJghd1pRCptDGkln1E=)
2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: sdKXoEac2QsIKyPJqM3KieF4AcHD/TV3UgolmmMGWhk=)
3: bollIzhNfRvYanh5m9u8c1tqdcM.roa (hash: h9HWb5No43oY67BT/CufDxfVRQJTjdQZn1o0Ans09NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:68:1e:3c:31:f4:58:27:29:6e:af:c2:09:ac:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Nov 4 11:00:22 2025 GMT
Not After : Nov 5 11:00:22 2025 GMT
Subject: CN=26ed549e2891975d900d759e966c6d16303a77b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:08:83:4b:fc:e7:bc:7a:fd:22:91:c5:93:
b0:9a:67:6e:18:f0:58:f1:9d:0b:83:ff:c3:45:87:
52:9d:0b:ed:69:55:d2:3b:ab:5d:24:1a:26:fc:6b:
15:32:6a:f9:8c:01:08:21:b1:4e:79:59:11:93:34:
a2:2f:ea:b6:5e:54:be:c6:1d:03:a2:f5:a5:36:c3:
5a:46:74:da:82:41:05:88:c8:3d:63:1f:de:c8:41:
d8:8b:31:76:4e:91:2d:ef:42:3a:c0:1f:4c:79:63:
60:20:d0:f6:b8:96:a8:d1:bd:c4:cd:78:3c:6f:ed:
ae:d2:19:da:aa:c1:27:df:92:9f:33:a2:22:55:65:
18:65:ac:9f:b1:49:60:86:ea:01:24:61:9a:20:fc:
da:4b:a2:a0:ff:59:01:16:f9:6b:da:f9:42:d5:39:
71:0b:58:ba:64:9c:b5:b4:ea:96:85:fc:55:df:22:
f3:6b:19:98:dc:4a:13:40:0f:95:6f:22:b9:91:54:
0d:03:fd:fe:23:4f:bb:ce:bf:aa:e4:44:77:d2:3f:
52:bd:b5:2e:8a:83:cb:c9:67:c3:15:cf:f8:00:6d:
b9:58:9b:b5:21:b0:c6:1a:ff:bb:6f:af:0b:c1:63:
e8:e3:fd:b4:9e:9f:a6:90:7c:45:d9:e3:5b:d2:11:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:ED:54:9E:28:91:97:5D:90:0D:75:9E:96:6C:6D:16:30:3A:77:B9
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5a:86:a4:dd:04:a8:74:6f:1a:72:60:9a:ef:6f:87:c5:78:
22:5b:c4:41:d7:b4:c4:95:a2:e4:8f:72:03:ae:4c:52:58:04:
ec:ac:90:3c:2b:0f:bf:f3:70:6f:4d:9d:63:9d:66:cb:de:3c:
d0:aa:1d:7e:f2:4b:55:dd:3e:24:af:56:44:64:50:5d:3b:a8:
a7:69:81:01:d5:43:99:e1:2f:9b:08:25:1d:85:a8:8f:b5:5e:
fd:01:65:16:35:0b:0f:9f:df:e6:67:b4:ce:64:b1:bd:8b:0b:
24:12:fe:08:f4:72:42:37:ae:89:81:3b:4e:92:64:e3:3e:95:
c8:d3:63:93:f9:87:0f:b6:aa:1a:2c:1d:04:ef:cd:bb:73:56:
91:82:33:3f:8e:82:6b:ab:35:c7:0a:fe:52:f9:84:da:2d:8c:
c0:f6:52:cd:d5:0e:66:97:4c:d1:e3:e4:0b:34:41:ca:eb:e7:
50:2a:5b:16:a6:a3:75:3a:73:66:85:0a:6c:86:3c:9b:44:60:
cc:30:04:14:e4:44:20:07:4c:51:1e:3f:f7:1d:75:da:7c:58:
ac:64:ae:45:5d:59:a7:2b:65:c1:24:86:83:23:e5:59:8e:4d:
19:ef:14:57:69:52:b0:ea:5c:29:10:c1:66:40:c4:6a:05:4d:
c2:f1:8e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:25 2025 by rpki-client