Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: UBj0E2/8IfUeXRR/NUTDwkqefMmaU+h/y8e7EOLq3kU=
Subject key identifier: 77:CB:C0:83:E7:B2:B5:44:C8:EE:A2:55:34:59:24:28:01:DF:85:06
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 019A4E4F806F46CCEB600C6321B0B458876B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 056A
Signing time: Tue 04 Nov 2025 10:00:24 +0000
Manifest this update: Tue 04 Nov 2025 10:00:24 +0000
Manifest next update: Wed 05 Nov 2025 10:00:24 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: SFZ8CSOe9EbSyXeFt5WqVYRAbTlLbXASHhQ7jgshMTo=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:80:6f:46:cc:eb:60:0c:63:21:b0:b4:58:87:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Nov 4 10:00:24 2025 GMT
Not After : Nov 5 10:00:24 2025 GMT
Subject: CN=77cbc083e7b2b544c8eea2553459242801df8506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:94:cc:e9:ab:dc:38:e4:3d:64:4f:71:4e:
75:1c:ec:79:b2:0d:b0:ff:e2:33:11:67:f2:90:10:
96:2c:26:5e:a9:a2:ea:e2:51:72:06:c1:0f:88:a5:
5b:75:2a:14:fb:06:29:34:b2:61:86:ef:73:46:5a:
b6:f6:5e:17:c3:a3:bb:75:4d:6f:1f:f5:26:56:52:
65:da:8e:b8:f6:e8:09:e7:e9:33:bc:89:24:bf:f7:
22:37:7c:63:cf:bd:90:9a:34:ba:8e:2b:75:c9:ad:
6c:09:1d:ae:60:b0:eb:21:66:9c:34:17:39:0a:18:
f9:9e:d9:ff:63:39:bc:7f:90:94:db:0a:c2:15:ca:
ff:e9:01:13:6d:a4:f4:7a:ae:f1:cc:2c:9d:77:2f:
20:12:05:e2:83:71:6f:c4:04:96:be:d2:6d:18:6b:
a2:67:92:38:d3:d0:02:71:13:df:5b:78:0d:ad:10:
a9:c1:d1:e2:d9:18:ba:81:51:0a:31:a4:54:f5:87:
6e:3f:f5:76:7b:98:ea:77:f4:ff:33:fc:07:05:ea:
92:03:3d:b2:65:b7:9c:f3:5d:f4:5d:68:72:39:1b:
3b:47:50:2b:3a:d6:c6:3d:7a:c2:f6:bd:93:37:ab:
56:58:a4:4d:a1:26:bc:cf:1e:39:c1:b3:28:53:4a:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CB:C0:83:E7:B2:B5:44:C8:EE:A2:55:34:59:24:28:01:DF:85:06
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2d:41:44:a2:11:0f:0b:0c:cd:a2:a4:24:ca:28:0c:29:b8:
43:59:2e:39:f7:01:a8:8e:f3:7a:ea:0e:a8:77:34:b1:2d:5d:
1c:ac:9c:75:f9:68:2d:3c:51:37:40:0f:34:78:1f:15:f9:54:
37:89:ee:37:e5:fc:c8:d3:43:1d:23:0c:a5:de:00:51:b1:9d:
ce:8b:17:db:f4:d8:33:bb:44:f2:35:9b:9f:a9:cd:1d:4f:6e:
41:a5:5d:e6:d3:e1:ea:d6:1b:11:f4:e5:16:65:c8:6d:6d:88:
fd:34:07:30:94:5f:db:d6:bb:c5:b0:77:74:b1:ef:4b:54:bf:
9c:2a:97:18:53:da:8b:e3:df:88:9e:54:34:6a:81:a0:d4:5c:
df:e3:85:6e:f6:47:62:2c:6b:47:63:90:6c:47:2f:b2:33:50:
d9:ea:86:c3:30:78:c2:2b:a9:7b:b5:f0:f6:4c:66:44:a7:d7:
38:76:51:4d:aa:c9:51:9e:e1:df:51:1d:0c:af:c7:07:82:21:
70:4c:49:ea:ae:df:8a:c6:97:09:e7:2d:fc:5a:48:4e:35:fc:
42:39:73:18:23:1d:ac:c1:34:9a:c3:a6:55:89:86:1b:f8:8b:
4e:ce:2c:83:97:b1:e1:bc:da:ce:15:b8:c9:8a:42:3b:21:06:
4d:5c:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:46 2025 by rpki-client