Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: dedcaSdEH1+SXg4rcEuWMYQy1JocxBXnYTduguR9Rss=
Subject key identifier: 41:FF:EB:DF:A7:14:6A:42:25:F9:E7:C5:C1:3C:C4:09:5F:19:77:B0
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 0197684E1498C52487AD9FD62DA5702933B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 08:00:36 +0000
Manifest this update: Fri 13 Jun 2025 08:00:36 +0000
Manifest next update: Sat 14 Jun 2025 08:00:36 +0000
Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: eoygShBwQy+2BoELw58E4gV/SbYaghYRXq+PBk3TeqM=)
4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:14:98:c5:24:87:ad:9f:d6:2d:a5:70:29:33:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jun 13 08:00:36 2025 GMT
Not After : Jun 14 08:00:36 2025 GMT
Subject: CN=41ffebdfa7146a4225f9e7c5c13cc4095f1977b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:c7:90:9e:58:f0:16:1a:b2:5d:0a:3e:54:
13:ac:49:5e:03:c6:f4:8f:31:eb:9d:d0:60:69:3a:
59:b4:b7:a0:75:05:59:cd:d1:fe:74:1c:df:ab:36:
06:43:0d:13:53:1e:82:60:f0:a2:40:7e:1e:47:fc:
7e:62:da:14:40:c0:3a:42:e1:f2:68:2b:3a:0a:29:
86:fe:6b:24:77:e1:e0:13:46:bb:e0:3b:48:b2:22:
da:e5:62:fa:b4:5b:ea:2c:c5:40:fb:46:a0:f3:07:
1d:42:c4:7a:73:ef:88:c4:ca:3d:87:9d:a3:79:2f:
40:3b:7b:9b:a4:90:44:bf:c0:08:3e:03:8e:10:97:
52:31:b6:76:bd:71:75:37:39:cd:da:48:bb:99:34:
6a:26:f1:fd:08:2b:e5:86:aa:c4:61:af:79:81:43:
85:5e:84:47:f3:e1:f5:da:b8:73:a8:e9:7b:e1:62:
7e:cd:9a:1a:eb:64:16:2b:30:9e:ad:46:1a:d1:27:
e4:6f:20:02:5f:8e:ff:26:03:5b:3d:3d:50:b0:87:
39:1f:9f:80:de:8d:1c:b7:7b:8b:ca:ee:c6:6b:19:
2e:a3:db:ba:52:91:2a:b9:50:2e:e0:71:e9:c1:38:
85:1d:a5:5a:0f:72:a7:40:50:74:2b:8e:f0:d6:f8:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FF:EB:DF:A7:14:6A:42:25:F9:E7:C5:C1:3C:C4:09:5F:19:77:B0
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:76:81:3f:b0:54:f4:cb:56:6a:19:54:31:47:00:87:ae:b9:
ee:a8:9b:7b:07:c1:7a:88:27:c1:b3:1c:2b:ee:ba:74:cc:21:
84:59:22:d3:75:26:06:be:96:5f:09:b7:28:05:51:51:72:1b:
29:a7:84:25:b3:33:ac:b6:1f:74:94:75:c8:1f:a1:22:5c:ad:
aa:9b:ce:96:18:bc:66:ef:8a:8a:75:51:de:05:61:ad:99:7e:
6b:34:21:b4:53:52:c4:16:ee:84:15:e7:0e:d3:e8:f8:92:16:
02:58:35:87:3c:8e:6b:4b:2b:f2:f9:9e:f9:cf:3b:a6:38:a0:
a9:65:5a:d7:5c:c0:0c:33:9d:fb:ed:d3:79:0d:bd:3b:58:f1:
95:f1:7b:9f:1d:ad:21:47:3a:6e:15:5a:ee:01:0f:2b:09:96:
1f:3d:70:dc:c2:19:b3:6c:62:d4:7a:bf:12:fb:ae:c7:3f:40:
d0:f1:73:8a:df:8e:20:21:4c:df:58:38:2a:25:c0:95:84:f4:
e3:0c:c5:17:b0:1b:78:04:2c:0c:d3:c6:5a:ff:d0:65:34:ae:
93:c1:6c:7f:72:be:78:75:b4:24:c1:7d:c3:87:5c:4c:76:7d:
1f:52:dd:bd:e8:8f:fc:c4:83:35:51:a2:46:ce:26:44:37:9c:
78:48:78:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoThSYxSSHrZ/WLaVwKTOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZGRhZWIxNjRlMzk4MjE0YTE3MWEwNDEwZTZiMDIzMmQ2
NDJmNTAwHhcNMjUwNjEzMDgwMDM2WhcNMjUwNjE0MDgwMDM2WjAzMTEwLwYDVQQD
Eyg0MWZmZWJkZmE3MTQ2YTQyMjVmOWU3YzVjMTNjYzQwOTVmMTk3N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzzHkJ5Y8BYasl0KPlQTrEleA8b0
jzHrndBgaTpZtLegdQVZzdH+dBzfqzYGQw0TUx6CYPCiQH4eR/x+YtoUQMA6QuHy
aCs6CimG/mskd+HgE0a74DtIsiLa5WL6tFvqLMVA+0ag8wcdQsR6c++IxMo9h52j
eS9AO3ubpJBEv8AIPgOOEJdSMbZ2vXF1NznN2ki7mTRqJvH9CCvlhqrEYa95gUOF
XoRH8+H12rhzqOl74WJ+zZoa62QWKzCerUYa0SfkbyACX47/JgNbPT1QsIc5H5+A
3o0ct3uLyu7Gaxkuo9u6UpEquVAu4HHpwTiFHaVaD3KnQFB0K47w1vhRNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH/69+nFGpCJfnnxcE8xAlfGXewMB8GA1UdIwQY
MBaAFKLdrrFk45ghShcaBBDmsCMtZC9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzkt
MTEyZTExM2JiN2I3LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzktMTEyZTExM2JiN2I3
LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnaBP7BU
9MtWahlUMUcAh6657qibewfBeognwbMcK+66dMwhhFki03UmBr6WXwm3KAVRUXIb
KaeEJbMzrLYfdJR1yB+hIlytqpvOlhi8Zu+KinVR3gVhrZl+azQhtFNSxBbuhBXn
DtPo+JIWAlg1hzyOa0sr8vme+c87pjigqWVa11zADDOd++3TeQ29O1jxlfF7nx2t
IUc6bhVa7gEPKwmWHz1w3MIZs2xi1Hq/Evuuxz9A0PFzit+OICFM31g4KiXAlYT0
4wzFF7AbeAQsDNPGWv/QZTSuk8Fsf3K+eHW0JMF9w4dcTHZ9H1LdveiP/MSDNVGi
Rs4mRDeceEh4Ug==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:31 2025 by rpki-client