Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
File: otGlH74MLlJmesWiVSySo3nOre4.mft (raw, json)
Hash identifier: wh8pYqF5d/EyNneNUg6tVbf9xrbj6azKaoWPGb6aF8g=
Subject key identifier: E4:75:6C:B3:1F:15:A9:BD:D0:16:BA:E2:49:DD:65:C0:6E:24:15:B9
Authority key identifier: A2:D1:A5:1F:BE:0C:2E:52:66:7A:C5:A2:55:2C:92:A3:79:CE:AD:EE
Certificate issuer: /CN=a2d1a51fbe0c2e52667ac5a2552c92a379ceadee
Certificate serial: 0199FF59C0DE4E3675453B842C4F7DEF9475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
Manifest number: 02BD
Signing time: Mon 20 Oct 2025 02:01:36 +0000
Manifest this update: Mon 20 Oct 2025 02:01:36 +0000
Manifest next update: Tue 21 Oct 2025 02:01:36 +0000
Files and hashes: 1: otGlH74MLlJmesWiVSySo3nOre4.crl (hash: tiKmN37lNTMRp2xOOv+tcQ6lduVtSiULqQ8kRV8m5tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:c0:de:4e:36:75:45:3b:84:2c:4f:7d:ef:94:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d1a51fbe0c2e52667ac5a2552c92a379ceadee
Validity
Not Before: Oct 20 02:01:36 2025 GMT
Not After : Oct 21 02:01:36 2025 GMT
Subject: CN=e4756cb31f15a9bdd016bae249dd65c06e2415b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:53:b5:ca:c2:8a:cb:f8:05:7a:57:85:fe:
21:0c:40:30:29:2f:50:0e:6e:fb:a6:bd:9f:3c:82:
11:5a:c7:9e:47:1d:e3:71:1a:27:22:84:58:2d:d5:
66:5c:9b:0d:6d:b3:a3:fd:73:e1:b9:b0:a4:a0:84:
2c:b7:74:a1:93:b8:ba:30:cd:c8:96:fe:75:db:69:
8b:9e:b8:14:05:47:51:1a:03:d1:c6:5b:5a:bf:0f:
d3:dd:14:69:c8:da:48:b6:e3:49:6a:7f:66:e5:18:
ed:ba:ab:7c:25:b7:2d:30:c5:7d:de:62:1f:92:12:
b5:15:db:6a:1b:78:e6:82:6c:5b:c0:89:72:e7:73:
b6:a1:3d:38:23:88:94:f6:3b:25:15:5d:72:6c:fe:
5e:a1:9e:fc:46:8c:0b:77:9c:7f:92:60:f5:7e:2f:
49:63:8f:db:5f:0f:9f:52:28:26:a6:83:fc:4e:82:
3e:9d:aa:46:9c:70:49:de:c4:15:46:1d:9e:6a:1a:
a7:97:0f:80:0d:e8:27:0f:e9:ce:aa:e8:1e:bc:82:
67:70:b6:40:05:ba:b7:5f:93:c6:56:68:27:17:b1:
2e:9c:c4:35:2a:4c:af:9a:48:3b:99:65:57:f8:04:
d1:29:b8:49:20:87:8f:a8:f5:dd:86:bf:b6:10:9c:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:75:6C:B3:1F:15:A9:BD:D0:16:BA:E2:49:DD:65:C0:6E:24:15:B9
X509v3 Authority Key Identifier:
keyid:A2:D1:A5:1F:BE:0C:2E:52:66:7A:C5:A2:55:2C:92:A3:79:CE:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:72:4f:c0:44:a0:9e:99:61:b2:44:24:99:35:b7:b7:d6:
a9:2a:39:60:2d:36:59:09:d9:5a:56:8f:af:84:75:2c:f8:54:
88:dc:e9:92:39:82:75:48:5f:9c:6e:f3:fc:60:7e:47:3f:e6:
29:93:ce:de:24:bc:91:94:27:34:7b:27:97:de:4e:e0:83:fb:
91:7d:3b:cd:8d:76:7e:ee:17:3c:1c:20:82:47:2d:f7:aa:3a:
17:6d:e8:59:48:ca:08:7e:a9:82:43:44:5b:c0:3d:41:8e:2a:
27:4f:d3:17:66:50:4a:62:10:60:18:df:a9:42:b2:bb:99:22:
1a:ee:fc:a3:6e:b0:29:8e:a2:f0:b0:8a:3d:0a:41:5f:3f:b8:
8e:1f:8a:2d:df:e9:d6:68:f0:50:9f:12:a1:e2:0f:d8:4f:ef:
1e:76:c6:95:b6:af:7f:10:9f:0d:c3:a9:31:86:e9:5f:6d:02:
98:7f:87:5b:b0:f1:c1:f3:45:c4:bc:5c:ca:ce:ec:a9:74:ca:
62:e9:93:24:8c:4c:8d:2b:07:2c:43:7e:6d:98:db:92:4e:db:
fe:25:c6:83:ca:6d:76:0d:7f:91:9c:0e:f0:e7:eb:81:f2:fa:
cf:85:b1:78:b6:de:2d:1d:5b:b8:a6:ba:5c:fe:00:5d:ed:1d:
ef:fb:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:15 2025 by rpki-client