Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: IV7Lc/7ukz2jr7Y5tpqN2VMlMaUWxo7vsTr5Yyv76cI=
Subject key identifier: BE:19:D0:26:82:5D:59:D3:4B:76:71:81:D9:F9:AB:2F:87:47:E9:B4
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 0199FC8FB63BC96F6D2D41AE17748FE8CEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 0524
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (hash: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: e35YdKQqBsmPiKyOHqOwnrMxswTEjoUIqJbICk5eESc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b6:3b:c9:6f:6d:2d:41:ae:17:74:8f:e8:ce:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=be19d026825d59d34b767181d9f9ab2f8747e9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:af:ab:17:0c:4b:d3:8f:b7:1e:e2:66:81:
ff:ba:8b:54:51:0b:68:ef:75:c5:13:26:18:44:ed:
0a:d6:23:4b:b4:26:b2:9d:10:0e:34:58:26:d2:e8:
44:62:7c:25:c4:e1:76:ab:3f:77:f7:04:d9:67:3f:
70:91:6e:cf:e2:24:15:7b:21:2c:ac:f0:0d:87:da:
f7:6c:53:9a:ef:82:80:a3:d0:c0:d6:fc:5f:4d:a6:
58:7f:97:73:65:e5:4c:60:4c:5c:bb:31:f8:64:79:
df:c7:a9:df:95:57:0b:b0:21:47:6e:c6:ab:73:5d:
1e:68:8f:df:22:22:13:a0:01:9a:d5:70:8a:00:83:
08:58:be:31:e0:d1:d2:bf:27:ac:2f:a5:1c:64:d0:
ad:6a:3f:7f:6d:b9:8c:88:33:ab:54:df:c2:24:75:
69:b7:f1:83:fc:0d:2b:ef:3a:d5:74:dd:d2:1f:de:
d5:fd:39:7f:bc:35:7d:64:92:56:9d:41:af:d1:df:
17:45:9d:35:e9:85:61:b7:00:a4:78:e7:c3:46:6f:
4d:0b:c7:73:94:01:c3:d0:1a:21:fd:39:b1:f0:b8:
d7:d7:ef:72:84:62:9e:f4:4f:4f:2b:78:f4:ca:bb:
02:5a:30:93:31:e0:09:6b:bf:6e:8c:23:9f:52:6c:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:19:D0:26:82:5D:59:D3:4B:76:71:81:D9:F9:AB:2F:87:47:E9:B4
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:01:1d:f4:74:f8:2e:b0:52:ef:aa:36:7c:29:89:a8:bb:b3:
8b:a9:73:fb:09:0c:50:ec:63:44:4d:60:5c:a2:ac:5c:b5:66:
11:6a:1b:90:b3:bb:b3:dd:23:04:4d:f5:f8:b3:1f:eb:42:a5:
68:b5:9d:4d:99:fc:ad:51:79:b8:0d:2b:37:af:92:bc:7f:93:
62:cb:d0:ba:b9:e4:50:c1:83:e3:fe:48:45:fd:2e:d9:c8:4b:
4a:10:bf:80:44:24:5f:4e:07:29:3a:99:90:6c:3a:45:15:df:
c5:8e:d2:18:73:1b:a2:e2:a5:1e:99:2a:36:69:a2:4a:9a:70:
bb:57:51:ed:93:4c:fb:f1:29:4e:e0:53:71:81:9b:e5:5f:2a:
a7:a7:c6:e5:26:92:25:ed:b4:8f:58:2c:cf:0c:76:11:62:82:
0c:58:4e:02:f5:3e:cd:c2:f4:6a:b8:69:ae:c9:fd:ad:d0:bc:
b6:8e:34:88:16:81:79:68:ab:c1:0c:28:16:f0:44:5a:11:07:
18:40:e4:d1:59:48:76:17:ac:b8:dc:f6:31:97:86:a1:00:01:
e8:7b:ec:5a:0d:88:e6:3c:d3:e8:57:0e:38:ac:92:64:fc:17:
8a:1e:88:7c:63:32:14:46:41:9c:e5:14:cc:e6:ec:24:e1:0b:
15:02:e0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:39 2025 by rpki-client