
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: 9EFt3UtihZexWuddBQSHeY2TLWfRfj5zgIUWWIkuDPE=
Subject key identifier: 9A:6F:27:30:1F:C3:C9:97:6B:F5:D1:49:24:77:AB:4D:89:3D:B7:CB
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 019880C1CD71171AEAF8320B74378D76F34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 047B
Signing time: Wed 06 Aug 2025 19:00:40 +0000
Manifest this update: Wed 06 Aug 2025 19:00:40 +0000
Manifest next update: Thu 07 Aug 2025 19:00:40 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: ydZp/mOEgkcSiK0/yoMAiFb4/AqUVMYQObtqT8ilFDI=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:cd:71:17:1a:ea:f8:32:0b:74:37:8d:76:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Aug 6 19:00:40 2025 GMT
Not After : Aug 7 19:00:40 2025 GMT
Subject: CN=9a6f27301fc3c9976bf5d1492477ab4d893db7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:8f:fe:1c:f0:cf:f9:8f:ff:23:0f:8d:40:
d1:1c:32:b0:ce:cb:ea:83:ac:9d:11:e3:b1:95:6e:
f2:1a:b2:21:5e:be:62:c5:03:1e:2e:48:a7:eb:8f:
76:15:75:c0:b5:85:41:7e:00:68:42:3b:4b:38:4b:
80:5f:4f:50:01:b1:af:94:39:e3:49:2f:c0:42:20:
f2:0c:45:a1:02:b1:c3:40:55:e7:b1:00:bf:64:e4:
a8:7f:df:c0:ac:02:33:07:15:c8:93:2b:6f:dd:e4:
a4:9e:5b:a2:cd:e9:10:e4:3b:9f:fa:87:a3:4e:95:
bf:a1:30:38:91:81:4a:15:c9:0e:67:45:a8:fa:c7:
8d:19:f8:ac:71:e1:42:d4:f2:9c:2c:2d:a8:88:9d:
83:9a:9a:63:94:12:8d:18:35:c0:b5:f9:fd:62:f8:
73:fe:22:0e:1f:f2:76:97:b7:46:11:f5:e3:f1:27:
3c:08:b8:6e:d4:f8:28:dc:7b:a7:1d:65:8d:6e:ed:
5e:ba:99:d4:aa:b2:ee:e3:3b:34:61:aa:51:a5:30:
49:3a:11:b9:b5:cc:51:f1:4a:de:8f:a9:28:1a:60:
fa:57:ae:c1:35:3d:65:50:02:3f:66:2a:20:65:1c:
28:10:5f:80:bf:bf:dd:81:f1:cf:32:cc:74:7e:85:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6F:27:30:1F:C3:C9:97:6B:F5:D1:49:24:77:AB:4D:89:3D:B7:CB
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:08:cc:62:bd:5c:df:57:d9:3b:e5:ed:08:ce:50:98:3d:aa:
81:aa:9e:82:ae:bd:f9:ed:bf:39:ef:2e:c3:da:99:25:6f:0f:
66:81:2b:f7:6d:ef:da:03:ab:93:65:d3:a9:c0:8d:4b:a6:0d:
55:d1:1c:a8:75:17:89:51:88:54:9c:17:06:3f:32:63:39:1e:
76:d1:2a:b5:e7:74:eb:03:e4:72:d6:bd:b6:d0:51:eb:94:4c:
da:86:42:7b:5e:c7:d5:7b:88:ce:ca:04:1d:b0:51:d8:08:a5:
70:15:24:3e:2b:b9:33:39:01:6f:75:ab:76:0c:21:a9:6b:44:
d8:b5:38:3c:b0:4a:1a:40:d0:4f:d3:56:aa:da:eb:63:71:30:
d1:d9:83:68:2c:a8:5d:b0:fa:71:6b:32:13:e7:76:75:75:29:
b1:81:9b:06:68:69:f8:71:08:1b:ef:a4:a9:5d:27:20:09:ab:
13:4b:38:a8:b6:b1:2e:e6:d1:76:cd:17:86:d2:47:0d:d5:0c:
dd:24:95:38:47:b7:a2:7a:b9:9c:c2:5e:5b:18:4e:2b:91:4b:
9d:23:ae:1c:39:b3:fb:f7:12:42:69:6d:9f:ef:fb:21:15:d2:
02:81:88:ec:9a:1d:3d:67:c3:ce:c9:61:e4:87:e2:e2:40:e3:
22:34:2e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwc1xFxrq+DILdDeNdvNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5
NjRiNDAwHhcNMjUwODA2MTkwMDQwWhcNMjUwODA3MTkwMDQwWjAzMTEwLwYDVQQD
Eyg5YTZmMjczMDFmYzNjOTk3NmJmNWQxNDkyNDc3YWI0ZDg5M2RiN2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMmP/hzwz/mP/yMPjUDRHDKwzsvq
g6ydEeOxlW7yGrIhXr5ixQMeLkin6492FXXAtYVBfgBoQjtLOEuAX09QAbGvlDnj
SS/AQiDyDEWhArHDQFXnsQC/ZOSof9/ArAIzBxXIkytv3eSknluizekQ5Duf+oej
TpW/oTA4kYFKFckOZ0Wo+seNGfisceFC1PKcLC2oiJ2DmppjlBKNGDXAtfn9Yvhz
/iIOH/J2l7dGEfXj8Sc8CLhu1Pgo3HunHWWNbu1eupnUqrLu4zs0YapRpTBJOhG5
tcxR8Urej6koGmD6V67BNT1lUAI/ZiogZRwoEF+Av7/dgfHPMsx0foXhhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpvJzAfw8mXa/XRSSR3q02JPbfLMB8GA1UdIwQY
MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt
ZWMxNjczNWEzMzgyLzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy
LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgjMYr1c
31fZO+XtCM5QmD2qgaqegq69+e2/Oe8uw9qZJW8PZoEr923v2gOrk2XTqcCNS6YN
VdEcqHUXiVGIVJwXBj8yYzkedtEqted06wPkcta9ttBR65RM2oZCe17H1XuIzsoE
HbBR2AilcBUkPiu5MzkBb3WrdgwhqWtE2LU4PLBKGkDQT9NWqtrrY3Ew0dmDaCyo
XbD6cWsyE+d2dXUpsYGbBmhp+HEIG++kqV0nIAmrE0s4qLaxLubRds0XhtJHDdUM
3SSVOEe3onq5nMJeWxhOK5FLnSOuHDmz+/cSQmltn+/7IRXSAoGI7JodPWfDzslh
5Ifi4kDjIjQuzg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:37 2025 by rpki-client