Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
File: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft (raw, json)
Hash identifier: 2wi6LdxWrdPgyF8R9zwOYgp5YGJaSZ28aYxjR4wYIw8=
Subject key identifier: 74:07:C6:EA:FF:45:CB:9B:1C:89:26:9C:BC:3F:52:FF:5C:B2:08:95
Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Certificate serial: 0199FCFD294F0FD510F460A3177033B4ED99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:13 +0000
Manifest this update: Sun 19 Oct 2025 15:01:13 +0000
Manifest next update: Mon 20 Oct 2025 15:01:13 +0000
Files and hashes: 1: MChEll1heVmbFidBBJvsHOrl4fE.roa (hash: ARoQGxRNkrRdwVI3hmAp61vYLz+zRk9Xivm5xOWKmgg=)
2: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl (hash: aK4R2/4s8z75SI5dC3XYZv6hoITOWSAELyONkLVk3tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:29:4f:0f:d5:10:f4:60:a3:17:70:33:b4:ed:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Validity
Not Before: Oct 19 15:01:13 2025 GMT
Not After : Oct 20 15:01:13 2025 GMT
Subject: CN=7407c6eaff45cb9b1c89269cbc3f52ff5cb20895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:6a:77:49:64:ba:70:23:d9:fe:6c:8d:03:
65:24:e8:dd:ff:df:dd:b9:53:5b:1d:bd:db:74:54:
c6:fe:62:f9:0b:52:3c:1d:b0:46:a2:b5:4f:8e:15:
dc:89:1e:37:a0:a9:5f:8a:1b:78:bc:65:55:65:18:
ff:08:3c:cf:16:a8:47:ce:5a:32:f0:f3:62:e9:cb:
c9:89:c4:55:37:f9:30:f8:3b:0d:95:12:69:f6:f5:
30:1b:27:66:db:1b:0c:76:f2:09:45:d1:8d:b5:8a:
63:b0:3e:a5:f6:74:6d:47:c5:c0:8e:33:9e:ea:0c:
25:5f:d5:3d:e7:a5:3e:0e:e9:aa:b0:7e:ff:5d:d7:
d4:e7:f6:2b:9e:48:5f:06:91:dc:7a:9e:02:60:7d:
9a:72:63:6a:d0:b8:1b:3a:7e:1c:39:02:ef:3e:33:
e9:27:0b:ec:cf:74:b3:72:9b:c0:00:78:dc:3d:54:
4e:d9:09:e2:63:f1:5d:bc:c5:50:65:a4:53:bc:2d:
91:09:f4:8c:98:80:74:c1:45:c7:3c:e7:fe:0c:ca:
94:a1:d5:33:ce:fa:b1:e3:79:36:7f:83:6c:29:8e:
03:14:8b:45:f3:78:ad:d8:6d:dc:18:46:d3:33:8d:
c8:d2:7d:08:cd:aa:45:66:3a:b8:c6:73:62:86:e7:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:C6:EA:FF:45:CB:9B:1C:89:26:9C:BC:3F:52:FF:5C:B2:08:95
X509v3 Authority Key Identifier:
keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1d:f7:ff:e7:c0:9d:32:56:78:a6:c1:38:d3:3c:de:0c:0e:
a8:c8:22:85:02:e3:3f:ca:40:95:29:91:ec:20:b1:8c:b0:45:
9d:d8:94:3f:9e:a3:a0:bb:86:f3:6b:9b:63:f7:bc:0c:d2:4a:
68:e1:fb:50:11:bc:c3:a9:89:f2:bb:b5:5a:63:3a:33:b6:bf:
6b:73:6a:d4:20:52:d6:d3:ec:52:d6:b0:2b:87:1f:43:2a:50:
55:84:01:17:45:99:e9:9d:9f:8b:23:b7:3b:7a:95:77:be:83:
bd:58:06:42:e2:a7:c7:ca:9e:8e:c2:d7:a8:a3:e7:31:28:56:
52:56:2e:fa:15:f2:17:67:3c:98:f9:a1:49:77:78:e3:9e:10:
28:28:90:a9:df:75:8c:9b:0c:f2:27:6a:43:83:90:be:97:92:
e3:c1:77:5f:96:bb:96:33:8a:50:c2:ee:32:88:7d:97:70:c8:
60:82:63:10:38:d1:89:42:1f:38:39:30:54:74:ba:f2:78:3b:
04:75:df:76:76:31:66:69:68:b3:93:33:d5:9f:85:a8:17:ca:
d1:60:c5:13:c4:64:16:57:c9:64:bf:00:8e:c6:a1:d7:2c:e9:
e3:cb:63:c7:04:62:d9:93:50:ff:55:b1:05:30:7d:96:da:26:
e3:b9:e5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:21 2025 by rpki-client