Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: SZ1GxWliaCUU41BwG8r8ibhXIe/wZ80XCAsYRQ3VnKg=
Subject key identifier: 9A:0C:C0:46:EA:3E:40:F0:09:78:EE:A9:EF:E9:61:E6:86:48:A4:06
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019A4FCFFE246206B9BE5066421175467032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 17:00:22 +0000
Manifest this update: Tue 04 Nov 2025 17:00:22 +0000
Manifest next update: Wed 05 Nov 2025 17:00:22 +0000
Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: VXgxuXIBbUvJmzhajiOISCcUdDlQWV0rLL6rF0HeRvc=)
4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:fe:24:62:06:b9:be:50:66:42:11:75:46:70:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Nov 4 17:00:22 2025 GMT
Not After : Nov 5 17:00:22 2025 GMT
Subject: CN=9a0cc046ea3e40f00978eea9efe961e68648a406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:e0:af:b3:d1:50:fb:14:bc:23:8c:fc:96:
8d:55:27:8d:3d:f1:67:ca:d2:20:1d:20:08:b0:09:
b6:ba:e5:e4:ed:52:d6:db:b8:f0:91:66:8e:21:f0:
24:d1:60:0a:66:cf:7a:b2:bc:40:1c:9d:7b:2f:9f:
6e:66:be:57:04:5e:e5:e8:f4:cf:96:5a:6b:d4:0f:
78:bd:82:a8:3c:ac:fa:c5:ed:d9:7d:f2:a0:8c:02:
25:95:42:a0:b1:5c:83:c3:d0:14:18:05:83:6f:1b:
cd:ed:c9:cb:83:24:d7:54:af:d4:d6:77:9b:6e:fb:
7c:cb:e8:c1:42:2f:f8:57:c5:b9:66:e4:4d:85:45:
a4:4d:53:76:e4:54:c8:21:6a:52:94:0e:51:fc:06:
77:ac:2c:81:31:8e:1b:8e:3c:a7:8d:c9:9e:52:33:
24:b1:3f:fe:ef:bb:e4:7e:7a:0d:50:5a:03:c1:9c:
5a:29:6d:ad:af:35:06:03:f2:8e:50:b1:34:7e:93:
8f:54:9d:6b:32:e0:06:96:86:1a:6c:99:38:f5:e9:
40:22:01:00:80:47:14:91:ce:33:00:fe:79:37:3d:
88:94:1d:49:35:51:ff:8e:f5:93:34:ba:d8:20:d2:
97:c4:92:58:a3:14:14:c6:52:3c:86:06:fd:03:7c:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0C:C0:46:EA:3E:40:F0:09:78:EE:A9:EF:E9:61:E6:86:48:A4:06
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:95:41:a8:4b:76:1e:fc:2d:75:3d:8b:83:5c:f2:4d:22:ae:
12:9e:1c:ed:76:f7:f9:f3:3c:06:08:08:4c:1b:68:b5:2d:80:
22:52:a7:9c:0b:80:da:07:db:31:49:d1:29:fe:2b:04:c3:97:
4c:43:22:6e:89:35:e6:ea:30:c4:d0:b9:4f:85:10:fb:48:41:
8e:86:16:8c:94:93:72:65:b8:9e:0d:93:ca:98:a3:b0:c9:c9:
56:5b:29:82:e8:38:0f:42:b1:a3:d0:7c:01:3f:c7:79:54:79:
c7:47:30:50:cb:b7:e1:d1:5a:c8:43:78:35:5f:b9:52:2a:8d:
e3:c7:8b:e8:d8:0a:b2:2a:d0:50:0d:ae:65:4b:0a:b0:27:94:
34:e5:d4:35:37:2a:6a:fb:3a:a4:dc:25:09:8e:6b:e1:5f:c4:
f5:ce:af:a9:7c:f7:09:2f:97:36:07:d4:ed:67:46:7b:b6:ed:
1f:17:c3:73:95:c8:20:67:e3:eb:34:32:60:46:44:01:4f:31:
c0:60:4a:14:40:ce:5e:92:61:2c:c9:01:c7:b0:d7:cd:ba:9e:
f9:74:ad:13:7d:ee:c7:49:eb:0b:63:50:43:6e:3c:1e:a8:06:
54:6a:15:05:76:04:c1:93:90:77:16:5e:44:0b:83:3b:35:d0:
c3:5a:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:31:34 2025 by rpki-client