Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: ujFQIMsoSn3leawEiuK7fBEs6+XXg+Qwewk4tuhEmtg=
Subject key identifier: 45:9A:14:8C:CC:C5:D2:03:E9:B2:49:ED:8E:10:14:55:8B:0A:E1:91
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 0199FDA1D80F38F494FCF1663DA5125D210D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 06A0
Signing time: Sun 19 Oct 2025 18:01:06 +0000
Manifest this update: Sun 19 Oct 2025 18:01:06 +0000
Manifest next update: Mon 20 Oct 2025 18:01:06 +0000
Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: 0Nmnuvj1Uz2UJ93vbHVjeGyGs0gDRN51ovkMq1yhizI=)
2: kqIK4ViX12p6eIuBG0T4dHMIIHI.roa (hash: PaO/dVKACGH2GQrFFW5fxxz+R4Obi2vhR9vhB2cSwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:d8:0f:38:f4:94:fc:f1:66:3d:a5:12:5d:21:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Oct 19 18:01:06 2025 GMT
Not After : Oct 20 18:01:06 2025 GMT
Subject: CN=459a148cccc5d203e9b249ed8e1014558b0ae191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:14:69:d5:26:fa:16:b9:31:6e:52:e1:cf:
bc:4c:ad:b5:6d:d0:a0:b8:09:91:fc:f2:54:0a:70:
63:a2:5a:4c:b0:1f:50:42:ba:46:51:ac:22:84:33:
42:0c:29:3a:4e:43:40:ba:55:2b:7f:d7:a5:44:46:
64:cf:5c:f2:f3:f2:c0:ca:87:c5:05:c2:ee:28:b4:
b9:31:1b:b0:3e:6c:4d:47:46:81:12:d2:5e:58:f6:
29:b2:7c:36:9c:9b:de:a7:f3:28:bd:51:6a:20:bb:
98:ba:da:47:dc:af:97:4d:22:54:6e:9e:1c:56:6d:
14:4a:7a:97:71:8b:7f:6c:ac:49:25:d4:f0:d0:f5:
f5:90:32:c6:a1:27:37:a7:58:a9:97:73:a6:9b:79:
88:a9:a0:3d:3e:13:6f:0c:df:3e:6b:5f:27:94:9c:
25:21:6f:96:c1:7f:47:6f:9a:2c:28:46:65:fd:a1:
76:89:61:5a:44:45:72:13:5e:44:30:4f:8d:ea:51:
98:79:9d:cf:2c:ba:06:86:a2:ea:d7:46:06:2d:80:
7b:59:c2:8f:9d:0c:ac:f1:a3:54:51:8b:02:53:52:
67:6e:66:e7:9f:65:bf:9d:41:57:4d:61:21:64:04:
f7:b2:9b:38:15:49:51:9e:4c:f2:ac:00:cf:ca:44:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:14:8C:CC:C5:D2:03:E9:B2:49:ED:8E:10:14:55:8B:0A:E1:91
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:5f:02:3a:ff:7d:4f:8c:5a:94:7a:90:c9:3e:10:53:82:
f7:12:ba:ef:56:15:b8:ee:e7:84:66:81:7f:c6:32:a5:3f:0f:
ba:50:a3:a6:d2:fa:d3:fd:7c:d7:c0:f0:0a:97:2e:82:75:8a:
31:2c:ae:64:d0:65:88:5d:4b:5d:7c:37:0a:4f:b7:8d:17:fa:
68:a8:bb:a2:dd:83:a5:30:63:57:42:f2:ee:b7:0b:f6:6f:51:
02:26:bc:0a:d9:7d:e3:e0:b7:01:25:8d:47:41:cd:db:28:2f:
ea:bd:6b:0b:d9:ca:2f:72:00:e8:86:91:3f:eb:7e:06:dd:15:
39:bd:2d:b9:ed:67:2c:c5:45:39:31:65:3d:ab:15:ea:39:e4:
dc:2b:90:36:62:ff:7b:52:1b:10:7b:a9:fd:57:96:10:5e:c5:
e0:ef:d6:bc:d8:2b:3a:ef:63:b1:37:23:69:e8:ec:fd:58:b7:
2b:50:dc:48:0b:8c:44:50:a8:2f:ec:70:8b:8b:09:41:2e:e0:
0c:c1:83:20:62:d7:da:e2:79:19:e5:a7:eb:f5:12:ee:06:92:
45:46:42:5a:68:34:6c:69:42:e2:3a:1c:08:87:84:cb:2f:43:
4e:1e:18:8f:72:59:3b:db:4a:2a:fa:6b:7b:6a:fa:2d:6c:8b:
26:80:66:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9odgPOPSU/PFmPaUSXSENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzlmOTJiODI1Y2UxMTA5MDNjMzFkNTIyYjBmNTBjYWZk
NzRhNmYwHhcNMjUxMDE5MTgwMTA2WhcNMjUxMDIwMTgwMTA2WjAzMTEwLwYDVQQD
Eyg0NTlhMTQ4Y2NjYzVkMjAzZTliMjQ5ZWQ4ZTEwMTQ1NThiMGFlMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5sUadUm+ha5MW5S4c+8TK21bdCg
uAmR/PJUCnBjolpMsB9QQrpGUawihDNCDCk6TkNAulUrf9elREZkz1zy8/LAyofF
BcLuKLS5MRuwPmxNR0aBEtJeWPYpsnw2nJvep/MovVFqILuYutpH3K+XTSJUbp4c
Vm0USnqXcYt/bKxJJdTw0PX1kDLGoSc3p1ipl3Omm3mIqaA9PhNvDN8+a18nlJwl
IW+WwX9Hb5osKEZl/aF2iWFaREVyE15EME+N6lGYeZ3PLLoGhqLq10YGLYB7WcKP
nQys8aNUUYsCU1Jnbmbnn2W/nUFXTWEhZAT3sps4FUlRnkzyrADPykRw3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWaFIzMxdID6bJJ7Y4QFFWLCuGRMB8GA1UdIwQY
MBaAFDk5+SuCXOEQkDwx1SKw9Qyv10pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMt
OWZjMzY0MTFhY2NjLzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMtOWZjMzY0MTFhY2Nj
LzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc39fAjr/
fU+MWpR6kMk+EFOC9xK671YVuO7nhGaBf8YypT8PulCjptL60/1818DwCpcugnWK
MSyuZNBliF1LXXw3Ck+3jRf6aKi7ot2DpTBjV0Ly7rcL9m9RAia8Ctl94+C3ASWN
R0HN2ygv6r1rC9nKL3IA6IaRP+t+Bt0VOb0tue1nLMVFOTFlPasV6jnk3CuQNmL/
e1IbEHup/VeWEF7F4O/WvNgrOu9jsTcjaejs/Vi3K1DcSAuMRFCoL+xwi4sJQS7g
DMGDIGLX2uJ5GeWn6/US7gaSRUZCWmg0bGlC4jocCIeEyy9DTh4Yj3JZO9tKKvpr
e2r6LWyLJoBmGQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:23 2025 by rpki-client