Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: 1cFD7B3PjFsCPpnenyRKNcxnAlMHsjIjILf8lzthUYc=
Subject key identifier: 37:36:79:80:1A:A5:1D:0E:1B:DF:FB:17:15:04:7C:42:60:F8:63:DF
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 0199FC2154116CC8249705302D28F9F3EE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 52
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: eyaYIwboHzBdGRHMfAC59nAG2IRjvjBRaSjKtIDemXE=)
2: wuqKrfx0UPDoVQxdKV8k97AGu4E.roa (hash: QvAJVSN4EtHNESjcwxnKTv7sFwnj2Nb91/xIZcXw158=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:54:11:6c:c8:24:97:05:30:2d:28:f9:f3:ee:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=373679801aa51d0e1bdffb1715047c4260f863df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:3f:a8:13:4c:d3:d3:85:5e:e7:8d:67:91:
a6:49:48:8b:12:9a:27:d8:c2:13:26:59:7b:07:26:
17:1c:56:c9:e7:da:71:9f:b2:5b:4b:62:9e:c3:01:
d2:be:d5:5a:ec:27:3e:42:c3:9d:08:8e:50:10:0b:
1b:54:70:69:0d:80:62:a5:e7:3e:f7:f9:af:0f:1b:
7d:b7:75:4c:4f:13:ce:37:4e:83:cf:d4:99:08:ac:
de:5b:0e:45:b0:eb:c0:d6:81:ec:26:a3:eb:9b:08:
62:33:8e:7b:92:3d:01:10:6d:d6:b3:e2:e6:3b:06:
4e:ea:59:98:a3:13:7c:0c:57:1a:15:cc:f8:fc:01:
0a:77:98:eb:e2:fd:0e:75:9e:81:68:c3:a7:dd:d0:
3c:01:47:7d:5c:f2:cd:e7:e7:7a:0a:e5:43:25:7d:
72:d4:73:f5:2a:23:97:29:d7:0b:c4:e3:14:1c:71:
81:8b:bf:7b:69:3a:a9:8b:b8:7f:bf:92:ac:7d:91:
d4:c5:ea:a0:50:54:ba:e3:75:14:e9:72:b2:d3:80:
6a:d1:d4:56:4a:40:72:63:5e:83:17:1b:96:f8:19:
a6:e9:ea:e1:04:24:05:d7:68:78:c6:4e:de:94:6b:
c3:ed:d9:ae:73:b5:f9:b6:98:58:ea:7d:f8:f1:98:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:36:79:80:1A:A5:1D:0E:1B:DF:FB:17:15:04:7C:42:60:F8:63:DF
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:56:d7:9c:c8:44:7c:c3:dc:40:2d:94:3e:d7:86:04:c9:3e:
95:24:6b:ea:23:ed:7b:4d:0d:07:66:1e:1d:b2:2c:5b:e8:f3:
ef:0a:b2:12:5c:e9:8c:57:b0:44:ed:bb:34:c1:12:7f:81:59:
72:2c:f8:a4:80:91:1c:13:35:b3:83:a4:03:fb:b4:c5:4a:48:
ad:50:32:68:9e:24:7a:89:69:f1:91:43:a6:c0:c3:62:b1:df:
65:d4:2b:4f:12:47:04:90:96:61:82:b1:06:7c:8d:53:35:79:
7b:14:d2:cf:cb:d9:6a:46:bf:f5:cd:86:71:ba:22:92:66:39:
55:93:04:66:f5:00:53:53:61:c5:f1:7e:7f:90:f6:f3:aa:fe:
aa:f5:f9:b5:94:c3:53:0e:a8:0d:71:97:fe:54:43:a4:14:bb:
1e:cf:c7:c0:e9:ea:f5:70:31:d3:59:fa:69:ed:55:74:48:0e:
3c:aa:14:ae:59:1c:20:f2:f7:d4:af:30:52:43:b2:d9:b8:eb:
65:4e:57:e9:83:0e:eb:26:3b:70:ac:f3:89:ed:02:90:c2:97:
22:db:a8:31:52:3b:d7:47:c4:9e:bc:c4:19:eb:5c:46:e2:14:
7c:e2:7c:dd:3f:d3:fd:f7:ca:86:06:80:b8:5c:54:08:f5:65:
f9:73:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:30 2025 by rpki-client