Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier: ImzhHlXTuDWpb48E5URKRxJxV1XXIq5ui175E3BPnTQ=
Subject key identifier: 6A:7A:C9:E3:0B:54:DB:8D:65:10:3D:DB:1C:88:68:B0:57:76:B6:25
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial: 0199FC58BADEC953496282626CA7DC069113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: 5xNldAvbKUZoKbFFwimfmzuljvMIXxEskkSVrEAORZ4=)
2: rtw5EuFYH3ySq0jw3-ZmGwFMoqo.roa (hash: Ii5lxajvlSV2gkqSCAYWVLgdyHye7gIbfTFfAGtSUlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ba:de:c9:53:49:62:82:62:6c:a7:dc:06:91:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=6a7ac9e30b54db8d65103ddb1c8868b05776b625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:3a:47:23:92:d6:19:19:2f:05:3a:43:fa:
82:87:a0:b6:79:01:93:02:ac:fa:02:16:c8:68:e2:
51:ae:18:fc:b2:f2:e1:c4:ce:18:bd:d6:64:52:e2:
07:12:70:c5:67:dc:ef:2a:58:80:6d:49:1e:56:55:
f4:53:d0:78:70:41:d8:5c:74:35:55:7b:bf:3a:75:
8a:cc:b0:a3:06:ef:be:4c:74:25:dd:43:75:1b:a9:
bb:eb:a6:11:28:0f:1c:fb:09:80:bb:b5:e6:4e:22:
6b:d1:e5:fa:9a:71:27:fd:f9:9d:4b:5f:68:87:0e:
98:06:52:10:be:b1:5f:7f:cb:6f:30:0e:4c:b5:6f:
46:0e:8e:e3:0f:b4:1b:1b:66:95:20:b4:7c:0c:5e:
a8:5e:dc:0c:a2:f1:44:01:24:67:f5:fd:f8:0f:70:
aa:02:0e:88:a6:2e:0f:7b:02:4a:8e:5d:cd:ef:60:
e9:f1:52:10:77:62:46:c6:37:8f:11:22:34:6e:3e:
9a:95:7a:75:c5:e0:3a:12:5f:82:da:0f:fb:4b:94:
0e:19:4c:fc:15:25:cf:a2:11:e0:24:ca:7f:7f:65:
86:e1:17:30:62:c4:61:e3:b8:95:16:c9:7b:47:95:
b1:9e:88:59:9e:ef:01:27:e4:03:fe:94:6f:35:f1:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:C9:E3:0B:54:DB:8D:65:10:3D:DB:1C:88:68:B0:57:76:B6:25
X509v3 Authority Key Identifier:
keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:27:8c:5c:03:30:5a:1e:af:6a:e5:b3:95:c3:ef:cd:8e:7c:
38:79:70:a7:01:e9:89:32:bc:43:b9:3a:28:d2:7c:66:dc:60:
54:ee:9f:05:dc:42:d6:24:fd:31:c7:6f:f9:f4:86:81:6c:11:
21:22:97:63:9e:ae:72:5f:ae:e2:91:5a:9a:1c:a9:31:ea:d2:
6d:3a:bd:00:97:69:d5:e3:a4:ff:6d:bd:69:22:e9:ce:2b:53:
cf:62:63:e2:4b:ff:f2:0a:14:a0:1c:a4:ce:d1:88:52:67:bf:
10:a6:c4:eb:5b:33:d3:20:0e:5c:85:22:c9:70:2d:a2:0f:4f:
ec:05:75:fa:be:4d:4c:b6:48:8d:44:01:64:f7:50:bf:d7:f5:
1b:1c:44:43:fd:83:b1:a6:c7:9f:ff:8c:a0:3b:0a:70:e0:f0:
6c:aa:a7:2e:62:9e:d1:32:b6:8a:29:9e:4d:69:12:e9:9c:dc:
d2:46:be:96:fe:c3:09:35:de:ce:dc:c7:ce:54:31:4f:e4:09:
f6:74:fc:01:c0:96:9e:f9:97:c7:f4:e9:2d:ae:f8:bb:67:a7:
65:d7:4b:62:45:fe:d4:0e:aa:29:66:2e:b1:80:a5:50:08:99:
31:a3:fc:ab:5f:12:60:99:dd:f9:49:cb:fb:1a:a3:02:60:17:
4c:8d:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:12 2025 by rpki-client