Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: f0T9Kpw8FeP5K/3yiBaCzFe3VWp7h3gKw/KRV6a72Cs=
Subject key identifier: C0:FB:00:7D:C8:9B:21:91:F8:8C:32:77:29:7A:6C:CB:44:AA:66:D3
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 0199FB0F115572732E782E48311D557930C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 0F86
Signing time: Sun 19 Oct 2025 06:01:32 +0000
Manifest this update: Sun 19 Oct 2025 06:01:32 +0000
Manifest next update: Mon 20 Oct 2025 06:01:32 +0000
Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: +zVnfPDUzRG8L1U8V9WxouFGI8Euh7X2URHeOSae6i4=)
2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:11:55:72:73:2e:78:2e:48:31:1d:55:79:30:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Oct 19 06:01:32 2025 GMT
Not After : Oct 20 06:01:32 2025 GMT
Subject: CN=c0fb007dc89b2191f88c3277297a6ccb44aa66d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:fd:2b:dd:dd:46:fc:4a:07:15:7b:cb:d6:
41:9c:51:fe:24:3a:be:af:95:91:99:82:36:95:e7:
6c:b3:79:8e:20:c5:30:a3:78:d8:bf:a7:4a:37:6d:
39:6f:59:fd:67:1c:e0:c6:05:28:e1:52:bd:9a:62:
1a:b9:7f:98:d1:19:da:a6:c6:90:90:92:ea:ff:f6:
34:c3:cf:fe:22:da:60:66:e6:1c:07:92:96:37:b4:
23:94:58:b5:33:bd:6c:8d:52:40:4d:43:db:ca:e6:
95:0e:a9:01:02:dc:dd:80:7d:44:d1:e2:f4:b5:1c:
7c:4f:c0:cc:1f:e8:c6:92:39:ce:5d:b3:a6:70:4e:
a1:1c:31:82:c9:71:eb:0e:44:68:b4:1f:f0:5c:ad:
62:ac:40:0e:8f:7c:6c:a5:11:9d:48:dc:9b:14:e5:
ac:07:24:de:2a:f0:1f:22:85:85:5c:a4:1c:b3:f5:
9a:ca:b4:89:72:0a:42:7a:8f:8c:1d:8c:fc:26:d5:
96:28:01:da:51:41:8c:94:24:e5:5b:65:d1:6f:92:
36:5e:76:ea:e7:ce:98:2b:4e:70:2f:35:ba:e5:ec:
cd:f1:21:d9:6c:5c:39:f0:f2:ae:2f:3d:a2:14:47:
08:3d:53:ed:4f:b6:25:1b:79:3c:f3:00:f4:3e:d8:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FB:00:7D:C8:9B:21:91:F8:8C:32:77:29:7A:6C:CB:44:AA:66:D3
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fd:14:56:33:ef:41:30:01:a1:c4:2d:ba:51:9f:1d:f9:f6:
a8:1a:61:ff:39:b6:9b:fb:3a:f2:9c:63:fe:e5:4b:c1:c0:ca:
09:54:db:fc:87:3c:c4:79:87:e7:76:8c:c2:5a:52:88:09:d4:
d7:04:b8:bf:3f:60:aa:83:05:61:b4:31:17:8e:ce:17:f3:48:
43:8e:4e:1e:72:3a:eb:49:85:a2:41:cd:ca:46:02:ea:84:5f:
e5:2b:a1:fa:d1:4f:de:a0:83:2d:92:33:df:5b:15:b4:14:f5:
ea:c5:c7:89:9b:1f:3a:7b:7d:27:d5:0e:fd:f2:30:8f:9e:b9:
ff:81:bc:a4:b5:bb:66:8c:27:aa:8a:fb:19:99:59:83:5a:18:
db:e5:72:2d:5e:fd:2e:e1:3a:16:55:59:0b:90:8c:41:b4:c2:
af:cf:6a:a2:f5:48:cb:41:0e:d7:5b:98:2d:79:47:f0:e7:9c:
71:88:d5:83:af:8c:de:69:ec:0a:13:ca:d5:15:94:cf:64:fb:
5a:b7:e1:e5:d8:48:dd:23:42:34:39:e0:6c:5d:6f:a5:c3:26:
f3:37:a7:32:82:51:79:d0:f2:b6:74:78:c1:13:9f:f1:f3:3c:
a6:21:07:f5:e6:55:fb:23:bc:19:40:21:f9:d5:57:46:df:35:
82:9e:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:31 2025 by rpki-client