
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: fEbeA8cJ66Il8cT5ebx3x5x63DQvQcZDMwT6S4hQoB0=
Subject key identifier: 2E:AF:3F:D3:4B:25:A0:85:B5:A0:DF:D2:7E:10:C9:CD:90:BA:FC:39
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019872CF7DEB1869D4A4600A09A8C2F3F5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 02:00:57 +0000
Manifest this update: Mon 04 Aug 2025 02:00:57 +0000
Manifest next update: Tue 05 Aug 2025 02:00:57 +0000
Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: xQlt/ikoIfAUz0WmrhjeOx/8uFrFH7pzwSTYbzpl8pk=)
4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:7d:eb:18:69:d4:a4:60:0a:09:a8:c2:f3:f5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Aug 4 02:00:57 2025 GMT
Not After : Aug 5 02:00:57 2025 GMT
Subject: CN=2eaf3fd34b25a085b5a0dfd27e10c9cd90bafc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:e2:d4:46:be:3e:5b:a3:01:48:ff:b9:0e:
50:d0:69:ca:02:a2:c1:cd:a3:d3:c1:53:03:a4:d5:
7e:3a:f0:fb:fe:51:c3:7c:f3:87:10:0e:6f:c0:19:
ab:96:52:4a:d8:c7:47:21:26:31:81:17:19:ae:02:
c4:d2:12:cb:7a:0f:07:49:20:e1:14:e7:ef:53:b7:
6b:f2:31:a2:1b:dd:9e:3b:8e:19:59:91:fb:4a:93:
68:7a:60:51:36:52:51:b6:ba:7f:e3:f2:70:89:8b:
9f:e4:cd:dc:8c:88:79:52:88:71:39:8f:b3:4f:ff:
0a:9c:b8:ca:dd:d4:82:1b:33:b7:45:0d:58:76:2d:
86:50:cd:2e:ef:34:b4:db:e6:18:fb:b5:a2:82:27:
7b:38:d0:3b:b8:9a:b9:b3:9e:51:bb:65:b3:56:70:
b2:8b:b0:9d:06:75:07:d1:61:b0:c0:30:70:fd:64:
5a:a3:48:1c:15:46:48:9a:25:de:22:76:23:aa:83:
94:15:7f:7a:a7:e2:ff:0c:ad:55:7f:76:c8:c6:b1:
2b:6e:6b:63:85:2b:e0:6b:dc:b5:39:ff:3d:83:29:
9f:13:74:df:ee:6d:22:c5:12:a9:9a:fa:fe:2f:8d:
85:86:18:ce:7c:6c:84:a9:c7:c4:08:51:ef:86:fc:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AF:3F:D3:4B:25:A0:85:B5:A0:DF:D2:7E:10:C9:CD:90:BA:FC:39
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c9:85:dd:2d:a6:0b:00:23:a0:15:2c:0d:25:3c:4f:ce:83:
ac:1d:fd:78:36:31:3e:23:a6:7c:ba:63:38:a3:c6:3d:a5:4a:
20:45:a0:3d:68:5d:dc:37:f0:a9:24:10:6a:39:7b:a1:8b:88:
67:87:c4:e1:d6:36:f3:79:26:2e:a8:a2:c6:38:cc:02:c2:33:
a4:d2:da:f7:9d:54:98:78:59:9e:74:f8:73:bb:ef:d2:ec:9f:
66:15:ae:f1:b7:a2:1f:07:4c:ed:f1:92:8d:85:f5:b3:12:02:
38:01:76:cf:27:5d:83:43:c4:9c:ae:9d:62:d8:8b:c4:c0:41:
bd:20:31:7c:6c:4f:75:8a:ed:c7:ed:0d:a5:bb:fd:4c:aa:11:
8c:b9:4f:48:eb:8a:47:a5:4c:4a:85:47:d0:7a:68:d8:a8:34:
63:67:f8:18:ff:6d:78:e7:b7:0e:08:de:2b:0b:37:7d:9e:ef:
e3:6b:64:13:dd:8e:56:fc:d6:65:3e:ae:4f:9b:8a:05:d6:06:
bf:40:58:d8:f2:08:85:5e:04:02:f7:7d:ba:34:a7:13:e2:83:
c7:0d:fd:d5:0e:10:35:9f:38:c7:47:59:c7:4d:30:ba:30:58:
30:b0:9b:12:18:70:50:d3:06:46:f3:e8:63:27:df:f8:21:85:
7c:bd:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:36 2025 by rpki-client