Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: ttMtugElmBF3gNJVOUGIK/Pw2IwkIOrmfWBqTfF6kbY=
Subject key identifier: DE:B8:9B:B9:66:FB:4B:14:72:FA:07:06:20:A5:A3:5B:CB:73:C7:82
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019A0110E426AD8EE1D93EC18409D31E5984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 10:01:15 +0000
Manifest this update: Mon 20 Oct 2025 10:01:15 +0000
Manifest next update: Tue 21 Oct 2025 10:01:15 +0000
Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: g1CgCChJcDC7ySBK2CxqQBtdAs8hfGt5H0V+ADCVsm0=)
2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:e4:26:ad:8e:e1:d9:3e:c1:84:09:d3:1e:59:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Oct 20 10:01:15 2025 GMT
Not After : Oct 21 10:01:15 2025 GMT
Subject: CN=deb89bb966fb4b1472fa070620a5a35bcb73c782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:4e:d1:74:04:17:d2:61:63:ed:87:a4:ab:
38:94:a1:6e:ea:c5:b8:d3:ee:bf:d4:d0:19:0e:5a:
83:a9:99:47:af:4f:af:33:6e:05:72:be:93:71:6a:
19:b3:9c:a7:80:f6:b6:87:ec:ca:17:8a:aa:77:0d:
32:e7:4b:a1:86:59:31:42:55:66:76:c2:5b:94:34:
d3:65:3b:b3:3e:d5:81:8e:61:2d:da:27:01:5b:43:
26:43:30:3a:a2:c9:8a:7e:18:3e:e0:53:d2:c5:0e:
4d:bd:82:32:a6:e2:f1:71:87:25:d3:67:c6:8e:ea:
cb:6d:05:22:83:a0:30:e2:15:23:21:d2:82:27:e6:
29:e4:73:34:f5:8d:2f:2c:44:f5:78:0b:f4:66:2e:
26:f8:74:81:98:69:da:b0:f2:e7:c6:d0:b5:14:a7:
5f:a6:02:7d:25:91:35:43:a4:e8:b6:f2:c4:c6:13:
db:cc:ef:51:ba:91:0d:91:b4:de:1b:f6:de:41:d2:
70:14:20:70:c6:6a:bf:a4:a8:c1:1c:af:f5:27:7e:
f1:b5:6e:27:01:a8:12:43:c6:e0:14:d1:2e:0d:4a:
b9:81:0e:6a:c2:71:2c:b6:65:da:08:d1:f7:d8:04:
67:b3:e1:d9:2d:15:50:7b:48:e5:7e:5b:c0:8f:57:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B8:9B:B9:66:FB:4B:14:72:FA:07:06:20:A5:A3:5B:CB:73:C7:82
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ee:0e:50:f2:1c:c7:35:3c:ce:33:9b:bc:75:af:e2:eb:7a:
b7:58:7c:f3:f7:e3:e9:05:9a:5f:71:ef:2f:dd:cc:86:71:2f:
7e:e4:5c:f6:25:32:28:e0:4b:05:21:5b:81:13:e4:68:51:6c:
88:4f:cf:9f:1e:9c:47:dc:81:a0:41:10:64:95:30:47:e5:aa:
8f:60:d2:41:be:0d:e9:4c:42:c3:f1:89:be:29:51:f1:ea:42:
42:34:60:5b:ee:75:44:4f:9f:79:ac:1a:19:18:f1:f3:a2:cb:
6b:fc:f9:13:17:eb:40:ec:6d:16:4c:54:4f:3c:97:61:3f:05:
5a:1f:49:4b:fd:1a:69:05:8d:cc:1a:40:f2:b8:80:85:71:7b:
7b:a1:86:0d:6c:e2:66:32:91:76:80:5b:d4:20:62:6c:7d:b3:
47:81:41:7f:02:41:a4:ba:d5:c1:14:2d:95:99:ea:e8:fb:b2:
78:4f:75:a8:8b:a0:cd:b7:f0:fa:c2:09:d1:7a:90:df:6c:3c:
8f:d4:d6:d8:ad:51:62:34:e8:a5:24:ac:d9:82:f8:2c:66:ff:
da:5f:09:83:71:9f:d6:03:b7:0d:19:5c:4f:24:8f:81:18:de:
b6:bf:3e:8a:b8:ba:a9:26:c1:e5:cf:3d:1e:4f:ca:22:2e:e7:
49:68:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:45 2025 by rpki-client