Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
File: Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft (raw, json)
Hash identifier: JBLabLOLMWk5bIXAYWgBp49tSB0M9KSGBbASnQZXpF4=
Subject key identifier: D6:A5:D0:42:9D:78:75:16:B1:6B:15:4B:07:B5:CC:CD:0A:71:CF:F0
Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
Certificate issuer: /CN=3adfd48a97720cd854029ddb266c51f91f07670d
Certificate serial: 0199FFFE788A225618F6EA347E8E2EEFEF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
Manifest number: 0CE4
Signing time: Mon 20 Oct 2025 05:01:30 +0000
Manifest this update: Mon 20 Oct 2025 05:01:30 +0000
Manifest next update: Tue 21 Oct 2025 05:01:30 +0000
Files and hashes: 1: Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl (hash: u+8b2CPylNSF8lGKu4D1EJ3Kek94EZJoU2ZAuY7bA5U=)
2: vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa (hash: lyBGyAokiSjopS7O45WDbuUZk8SIrQSCpnYKsmtEQ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:78:8a:22:56:18:f6:ea:34:7e:8e:2e:ef:ef:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d
Validity
Not Before: Oct 20 05:01:30 2025 GMT
Not After : Oct 21 05:01:30 2025 GMT
Subject: CN=d6a5d0429d787516b16b154b07b5cccd0a71cff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:af:ff:b7:d8:42:1f:f7:bf:79:1b:15:ee:
56:a8:4d:d2:b6:bf:b5:4a:9a:1c:48:17:57:ca:a7:
fc:41:e7:91:ed:d4:9a:29:3b:c9:88:e9:70:83:62:
93:c0:d6:9c:96:c6:82:49:60:53:a2:0c:4f:10:3f:
e2:c4:4f:3d:a8:c6:45:5a:67:6b:63:15:2c:8d:9c:
e6:54:ff:bf:b4:99:77:13:e9:04:13:16:d2:8d:92:
43:78:12:46:5a:14:3d:75:b8:4e:bd:29:76:b3:a9:
48:8f:f9:27:7c:16:a1:bd:c3:4d:70:52:79:2d:51:
1b:95:fe:3e:89:f4:80:af:09:92:95:8c:74:03:d3:
c2:de:1a:39:fd:37:05:14:15:ac:3c:0d:c5:c7:03:
80:44:f9:b7:36:28:f6:f9:c7:7c:2c:81:bc:ef:62:
36:53:66:f4:ba:f2:c4:4f:b3:5f:2d:bc:01:df:70:
71:83:1b:a8:3d:b6:5f:4d:11:ad:a9:a7:4c:df:18:
86:7f:14:9e:38:05:42:c4:63:de:30:7b:9b:66:24:
ee:8b:11:97:fb:ad:11:d4:f3:a7:00:ce:7d:ff:70:
70:f7:45:64:2e:f7:02:22:89:1d:2a:0f:81:a6:8f:
67:6b:d4:34:6c:9f:c7:75:ee:17:98:03:8e:64:b5:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:D0:42:9D:78:75:16:B1:6B:15:4B:07:B5:CC:CD:0A:71:CF:F0
X509v3 Authority Key Identifier:
keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ea:0e:1e:8b:5a:93:86:92:ab:16:b7:ff:a7:a6:f3:cc:bf:
97:d6:96:14:dd:8f:ab:fb:e5:fd:82:62:d5:c2:f0:73:d7:9d:
3c:37:21:c8:d6:c9:9c:c6:48:ac:f8:4f:6d:ae:2a:78:d0:6d:
5b:95:c5:a2:c5:64:95:ee:30:0b:85:e0:32:8a:a3:a7:0a:8b:
8e:1d:ea:f8:8a:63:da:cf:53:da:90:bd:ca:30:47:8e:26:04:
3a:1e:8e:e5:a5:8e:3e:07:10:68:8c:a5:b7:4e:fc:f7:c3:be:
ff:2a:a3:0d:36:14:e4:b2:ce:6b:0a:43:7f:36:ac:2b:26:6b:
ef:66:d3:ef:cc:6e:88:a2:76:3b:5d:c5:b7:15:06:6b:53:19:
1a:7c:3f:b0:6c:3a:37:c6:18:6e:86:2e:5f:3d:d7:20:47:1a:
2b:92:47:8f:45:6e:a1:5a:f5:72:26:46:30:9e:5d:09:93:08:
6b:6d:2b:b7:ab:ac:28:7d:ae:81:cd:fd:cc:90:88:09:81:9b:
32:76:bb:d2:2f:47:3a:99:01:12:13:6d:62:2e:7e:c3:92:6a:
2f:6e:c6:98:c5:d6:40:87:18:b4:25:d8:f2:14:21:d4:87:94:
84:2a:6d:3b:09:4f:77:8d:f4:90:d8:2c:f3:72:e9:80:6a:da:
25:ee:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:56 2025 by rpki-client