Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
File: Otu0daQwTIRTQ_2U_ummuIAI44s.mft (raw, json)
Hash identifier: 0E+jaJe38/lIYOAjeW+zW4aaJLIA+TWsGwC/sO2CYdE=
Subject key identifier: 9A:87:3A:14:19:5E:41:8D:6F:B1:86:94:61:F4:96:23:0D:1C:F9:B4
Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
Certificate issuer: /CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Certificate serial: 0198D5160F157C57459800D8485FD3D30600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
Manifest number: 0F
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: 1E5Eo9kn-EIE-H1FRikMkq__s7A.roa (hash: EJU0N8BH2KGMsBgxzG0oyPjH2Y4EH68EjvlKxHcS7T4=)
2: Otu0daQwTIRTQ_2U_ummuIAI44s.crl (hash: V9DQehKUI+so/bSMzY0eDtZttUat7gcJaxrqmE1w0c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0f:15:7c:57:45:98:00:d8:48:5f:d3:d3:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=9a873a14195e418d6fb1869461f496230d1cf9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:67:24:c1:b0:cc:5c:0f:f6:96:7c:09:94:1c:
e2:32:d9:fd:3b:68:ae:10:72:c8:b9:ca:ce:34:e9:
7e:e7:c5:3c:bc:7b:5c:7e:07:6d:70:cc:2e:6c:1d:
81:27:03:c1:a2:3f:03:c9:1a:cb:8c:6f:7e:ce:a2:
f1:ce:e0:f2:e3:bb:d1:83:75:23:41:53:5f:99:0a:
aa:12:8a:7e:6f:3b:4e:e4:34:ef:c6:57:bf:48:44:
ee:71:f2:43:30:e7:03:22:4e:e6:f1:d8:c8:a6:6d:
33:54:52:29:09:b4:01:78:43:f1:2d:6b:14:b9:af:
27:5c:39:15:c8:0f:dd:20:1c:4a:60:1c:c0:f7:fe:
dd:1f:5b:1f:d2:3f:35:94:a4:14:38:d2:90:91:90:
8e:81:73:5e:e9:07:a2:bb:a5:d9:35:90:8e:ff:a5:
e3:be:c2:99:7e:be:1a:20:dc:4c:f0:a9:75:3f:ef:
01:76:8d:f0:43:8c:7e:d7:63:22:4d:1c:01:0c:1c:
fc:70:19:16:cd:45:13:af:a5:c4:f7:a8:2e:9a:8b:
33:4e:32:90:a2:9d:a8:bd:4d:4d:7f:83:85:7f:89:
2b:c1:38:f1:6a:cc:53:14:3b:67:ce:03:2c:b0:1c:
20:21:dd:a7:4a:ff:dd:15:7c:7f:a2:c6:70:64:ea:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:3A:14:19:5E:41:8D:6F:B1:86:94:61:F4:96:23:0D:1C:F9:B4
X509v3 Authority Key Identifier:
keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:db:41:b0:97:39:10:76:af:38:db:8c:2e:38:9f:1d:4b:bb:
69:fe:21:66:84:ed:03:83:df:f9:85:49:4e:31:5f:59:db:b7:
51:a3:18:25:e4:56:87:69:32:9a:49:68:b2:5f:09:64:fe:a4:
18:b7:37:66:5c:6e:6d:99:35:a9:8f:53:1b:59:56:b9:4b:0e:
1b:74:3d:5e:ac:df:20:61:8e:df:24:cb:2d:58:72:b8:4c:86:
94:fa:3e:06:26:ef:29:5b:21:da:69:0b:09:28:2a:8a:f8:e2:
da:4c:e0:fc:73:ec:0b:4b:b0:68:63:8e:ca:b1:79:23:58:13:
d0:55:52:7a:2f:b6:27:61:5d:75:40:f5:e1:e9:14:38:f8:99:
94:51:f9:8d:ed:06:d3:cf:d9:b3:53:60:54:4b:f3:f1:6c:cd:
d4:62:a5:79:53:59:e4:aa:10:bb:06:be:11:23:dc:2f:f0:ec:
18:ce:bf:0b:72:30:6d:b4:a7:fa:e2:f3:3d:ee:44:06:ea:06:
17:16:60:c5:ce:85:2a:13:f7:5d:c6:f0:bc:85:c0:24:86:1b:
bb:79:c6:e4:95:64:43:78:72:70:bf:94:8c:ff:84:6b:59:1c:
5a:39:f1:a5:8f:f4:c6:1d:ff:6a:4a:52:9b:e8:b5:6f:b2:0b:
7b:e1:31:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFg8VfFdFmADYSF/T0wYAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGJiNDc1YTQzMDRjODQ1MzQzZmQ5NGZlZTlhNmI4ODAw
OGUzOGIwHhcNMjUwODIzMDQwMDQ5WhcNMjUwODI0MDQwMDQ5WjAzMTEwLwYDVQQD
Eyg5YTg3M2ExNDE5NWU0MThkNmZiMTg2OTQ2MWY0OTYyMzBkMWNmOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWckwbDMXA/2lnwJlBziMtn9O2iu
EHLIucrONOl+58U8vHtcfgdtcMwubB2BJwPBoj8DyRrLjG9+zqLxzuDy47vRg3Uj
QVNfmQqqEop+bztO5DTvxle/SETucfJDMOcDIk7m8djIpm0zVFIpCbQBeEPxLWsU
ua8nXDkVyA/dIBxKYBzA9/7dH1sf0j81lKQUONKQkZCOgXNe6Qeiu6XZNZCO/6Xj
vsKZfr4aINxM8Kl1P+8Bdo3wQ4x+12MiTRwBDBz8cBkWzUUTr6XE96gumoszTjKQ
op2ovU1Nf4OFf4krwTjxasxTFDtnzgMssBwgId2nSv/dFXx/osZwZOp7gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqHOhQZXkGNb7GGlGH0liMNHPm0MB8GA1UdIwQY
MBaAFDrbtHWkMEyEU0P9lP7ppriACOOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5MjctZDY1Ni00YjkxLWE5OTAt
MGNlMDQ5NmE5OTdiLzEvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMjY5MjctZDY1Ni00YjkxLWE5OTAtMGNlMDQ5NmE5OTdi
LzEvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9tBsJc5
EHavONuMLjifHUu7af4hZoTtA4Pf+YVJTjFfWdu3UaMYJeRWh2kymklosl8JZP6k
GLc3ZlxubZk1qY9TG1lWuUsOG3Q9XqzfIGGO3yTLLVhyuEyGlPo+BibvKVsh2mkL
CSgqivji2kzg/HPsC0uwaGOOyrF5I1gT0FVSei+2J2FddUD14ekUOPiZlFH5je0G
08/Zs1NgVEvz8WzN1GKleVNZ5KoQuwa+ESPcL/DsGM6/C3IwbbSn+uLzPe5EBuoG
FxZgxc6FKhP3XcbwvIXAJIYbu3nG5JVkQ3hycL+UjP+Ea1kcWjnxpY/0xh3/akpS
m+i1b7ILe+ExXQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:43 2025 by rpki-client