Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: qrPJ8CTKOW56ByFM42rFBn1Knlm52rsb8rcXgt0oIVU=
Subject key identifier: C9:1E:D9:4F:D1:54:AF:BA:C1:60:A9:95:C1:ED:02:D2:E0:E2:3A:CB
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 0199FAD846EB2CCD10ACF3BD1130A5111DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 05:01:41 +0000
Manifest this update: Sun 19 Oct 2025 05:01:41 +0000
Manifest next update: Mon 20 Oct 2025 05:01:41 +0000
Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=)
2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=)
3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: AGq5cgT3FtG4OM4oXmLHBKt4udX1RL5QMjViBllPTRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:46:eb:2c:cd:10:ac:f3:bd:11:30:a5:11:1d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Oct 19 05:01:41 2025 GMT
Not After : Oct 20 05:01:41 2025 GMT
Subject: CN=c91ed94fd154afbac160a995c1ed02d2e0e23acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:c7:6b:23:10:a0:65:21:f4:d0:2a:4e:fe:
0d:ee:c8:5d:04:3c:dc:55:a7:1b:ee:ed:0a:04:5c:
0d:2d:5c:27:20:1f:c2:7f:f6:05:81:5f:af:df:40:
16:37:2c:c6:18:09:ff:16:fe:45:00:77:d8:77:69:
f5:68:f2:60:59:59:90:2f:01:bc:35:dc:b1:94:90:
8f:a3:6e:e2:75:b5:05:c6:1e:17:6a:02:ec:1c:41:
9a:24:8b:b7:2c:c6:ab:25:9a:73:86:4d:ed:38:c7:
df:ea:ac:82:f4:3d:c2:1e:8e:dd:98:95:ab:cd:11:
f7:fb:c0:37:53:01:95:9d:69:65:3f:34:62:80:9c:
73:de:75:99:99:ce:eb:ce:36:a8:dd:a5:24:58:76:
21:37:bf:76:59:9b:1c:2d:4e:1c:f7:81:25:e3:fa:
4c:e1:b3:e2:d2:c9:7b:d0:9c:7d:93:76:04:3e:37:
92:96:f0:b1:58:97:63:5e:0e:16:e0:2f:c4:5e:41:
44:46:c5:ee:65:55:0c:3e:89:1f:15:b7:09:52:91:
79:0a:a9:a5:86:95:d1:03:17:73:45:a9:e4:df:73:
a7:fd:43:9f:c8:57:a4:97:ff:9e:4c:5b:71:a4:28:
de:96:c7:71:1c:91:16:d8:6c:a1:b3:4a:27:0d:d2:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1E:D9:4F:D1:54:AF:BA:C1:60:A9:95:C1:ED:02:D2:E0:E2:3A:CB
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:47:f8:e2:fb:4a:4e:6a:01:63:ea:07:ea:c0:a6:54:03:02:
e1:39:5d:a6:3b:dc:d2:d9:10:9d:60:c1:3b:2f:95:ab:df:4d:
b5:6e:c0:13:3d:9d:5e:96:cd:4b:d8:97:02:a7:69:38:28:ec:
ee:4d:a9:52:1e:c9:23:37:07:10:fc:02:a2:fb:3c:6e:9e:b0:
18:13:c0:8b:a2:36:65:de:40:bc:0b:5a:d7:d4:54:5f:1a:5a:
5d:f7:17:54:44:69:60:51:8a:68:71:6b:83:2e:d0:3f:50:5e:
b0:a3:27:ae:05:5a:3a:bb:e2:cf:0c:35:cf:b0:03:1c:b4:b1:
05:af:a5:6e:09:c5:34:fe:d8:1a:2e:4f:26:e2:4e:d6:9b:a4:
81:e8:ff:08:ce:b1:6a:0c:a4:12:77:5b:bd:d5:7e:1f:1e:69:
37:9d:11:dd:50:a2:49:61:83:01:59:bc:39:f7:0f:db:8d:bd:
67:66:5b:bf:56:45:96:35:99:1d:60:fd:b2:38:46:7b:ce:12:
25:88:01:54:9e:d1:63:7c:15:b3:b4:a6:ba:4a:37:18:46:89:
e9:d6:f9:9e:72:c4:8f:5e:3d:e6:23:9d:11:6a:f8:05:49:f1:
c2:a8:d2:d6:8c:8a:f1:e2:44:a8:e0:6d:dd:e6:99:19:ea:7c:
41:78:23:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62EbrLM0QrPO9ETClER3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1
ODEzOTAwHhcNMjUxMDE5MDUwMTQxWhcNMjUxMDIwMDUwMTQxWjAzMTEwLwYDVQQD
EyhjOTFlZDk0ZmQxNTRhZmJhYzE2MGE5OTVjMWVkMDJkMmUwZTIzYWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJbHayMQoGUh9NAqTv4N7shdBDzc
Vacb7u0KBFwNLVwnIB/Cf/YFgV+v30AWNyzGGAn/Fv5FAHfYd2n1aPJgWVmQLwG8
NdyxlJCPo27idbUFxh4XagLsHEGaJIu3LMarJZpzhk3tOMff6qyC9D3CHo7dmJWr
zRH3+8A3UwGVnWllPzRigJxz3nWZmc7rzjao3aUkWHYhN792WZscLU4c94El4/pM
4bPi0sl70Jx9k3YEPjeSlvCxWJdjXg4W4C/EXkFERsXuZVUMPokfFbcJUpF5Cqml
hpXRAxdzRank33On/UOfyFekl/+eTFtxpCjelsdxHJEW2Gyhs0onDdK4NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMke2U/RVK+6wWCplcHtAtLg4jrLMB8GA1UdIwQY
MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt
YTIyZmZlZTRhNTE1LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1
LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvUf44vtK
TmoBY+oH6sCmVAMC4Tldpjvc0tkQnWDBOy+Vq99NtW7AEz2dXpbNS9iXAqdpOCjs
7k2pUh7JIzcHEPwCovs8bp6wGBPAi6I2Zd5AvAta19RUXxpaXfcXVERpYFGKaHFr
gy7QP1BesKMnrgVaOrvizww1z7ADHLSxBa+lbgnFNP7YGi5PJuJO1pukgej/CM6x
agykEndbvdV+Hx5pN50R3VCiSWGDAVm8OfcP2429Z2Zbv1ZFljWZHWD9sjhGe84S
JYgBVJ7RY3wVs7Smuko3GEaJ6db5nnLEj1495iOdEWr4BUnxwqjS1oyK8eJEqOBt
3eaZGep8QXgjNw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:35 2025 by rpki-client