Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier: IPQookRi1WciJdrcdWk44RnoJROdumD4wR5F9cRNfqw=
Subject key identifier: 9D:24:22:9D:55:13:82:D2:04:B5:11:3E:6D:51:81:F4:4E:47:D8:B6
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: 0199FB45C70AF7DC68D6D8003F1F442FBF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number: 0DB1
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: sCWb2gSUO3/kAKNUmF8MaegO7RPmmBTQwCbM7lV4CMU=)
2: Cg7qlLFT5Tw2Rj89YI6LNGMAVC8.roa (hash: RUt6pQHc+8RuyWicYb+I1y3SWfel5InfTPhk0ybD+Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c7:0a:f7:dc:68:d6:d8:00:3f:1f:44:2f:bf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=9d24229d551382d204b5113e6d5181f44e47d8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:85:af:84:53:5b:b6:40:85:14:61:86:f9:
bf:38:d6:87:f0:08:b5:e6:2b:22:ca:88:dc:da:d8:
ee:6d:df:ef:d5:42:30:c3:96:e1:07:13:25:06:cb:
16:08:fa:8a:ff:bd:b9:be:e8:c9:04:2e:12:40:1e:
60:e5:07:58:6e:0e:a2:67:34:3b:32:1e:57:af:c4:
5c:e1:7e:71:1a:7b:08:fa:61:2b:cd:9d:65:1f:16:
84:2f:fa:63:62:91:7b:4f:6c:62:f7:cb:e4:03:bf:
fd:ea:96:ca:51:88:d7:60:1f:c5:22:20:80:37:84:
86:e0:ef:d2:5f:21:20:83:72:b4:a7:ec:29:dc:ab:
19:30:8c:e2:17:93:b1:46:64:82:1e:6c:d3:9c:db:
ba:3a:d2:36:32:2b:91:59:47:54:ac:2b:58:a7:7e:
97:e1:33:93:30:71:d9:bf:2d:1f:a9:a6:23:2a:e6:
d9:4f:c1:98:c0:5a:4b:9c:68:0d:39:ee:d4:60:26:
77:11:3c:da:db:54:8d:9f:2e:b0:db:02:92:e4:c1:
3d:2d:aa:af:e5:f3:24:2d:9c:6e:e8:3e:e7:c3:1f:
bb:d5:07:56:84:90:24:f4:58:3b:b2:3c:f4:bc:0f:
e9:fb:62:07:96:c0:07:3a:44:06:97:b7:52:b4:0f:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:24:22:9D:55:13:82:D2:04:B5:11:3E:6D:51:81:F4:4E:47:D8:B6
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:08:2f:9e:98:69:c8:89:03:6c:5e:12:92:46:a4:7a:71:21:
46:e0:28:fa:27:3c:60:98:5c:3a:18:83:99:47:14:49:4a:eb:
65:31:69:a2:54:6c:58:d7:29:de:10:2f:f1:25:50:8d:a8:4a:
ea:55:b2:15:a6:d1:e1:e4:49:91:10:02:b5:bd:7e:c7:02:37:
e3:93:6d:a7:35:65:ed:c0:18:7d:f2:de:a4:f4:9f:41:8c:41:
b4:16:d3:86:46:fb:bc:98:b1:6f:93:dc:0a:da:b1:c8:5b:fd:
d6:6a:7d:10:d2:81:93:4a:ca:4c:ac:8b:05:6e:39:2c:00:d9:
39:8f:09:49:aa:fc:03:7d:71:0f:3e:97:6a:bf:68:60:ad:bf:
ba:68:b0:0a:b5:87:39:9f:74:4b:94:af:71:8b:0f:43:fd:98:
22:2f:d2:b7:9e:60:7a:4b:69:b5:c4:55:65:0c:55:48:66:fb:
78:da:46:d3:cf:1e:25:fe:8c:1f:b6:cf:1a:c2:ee:3d:69:a7:
28:e8:f4:05:ae:88:86:a4:6b:28:93:fb:c4:5b:5e:7d:24:34:
62:24:40:f8:c4:30:a1:58:74:93:a8:b2:df:d4:67:a4:49:42:
57:75:13:91:0d:1f:2f:ae:2a:4f:0e:13:f5:47:89:28:6a:79:
35:29:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:39 2025 by rpki-client