Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json)
Hash identifier: ZLViRuL0K5azAzBMTRSO1sH4XTBXqRhj+rcl2G1hFoM=
Subject key identifier: CC:BB:E3:EE:25:8C:21:C7:94:86:DF:C4:34:4D:93:C8:BF:57:44:16
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 0199FDDA5156BF60C8F3593DE2DA9614170B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:47 +0000
Manifest this update: Sun 19 Oct 2025 19:02:47 +0000
Manifest next update: Mon 20 Oct 2025 19:02:47 +0000
Files and hashes: 1: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: PwUiV3ugdNIustFd9kRr34os5xga5VeAYQ1qBki1kTU=)
2: TXoJbYdgwtSRoMICf6BpMrQmJMs.roa (hash: Ede1kltXJewHDWyl80pDm1qv2UWiny8U21Nq2Z6l0i4=)
3: b13GBI_ErPPSKTlVvKejavSpfj0.roa (hash: u2uVD2JvI4OweXpyP69Cm6Idhj79Q0buUgqOXky2Kp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:51:56:bf:60:c8:f3:59:3d:e2:da:96:14:17:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Oct 19 19:02:47 2025 GMT
Not After : Oct 20 19:02:47 2025 GMT
Subject: CN=ccbbe3ee258c21c79486dfc4344d93c8bf574416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:f8:d3:2d:20:e7:a0:40:cd:c0:36:6c:93:
2f:a0:9c:34:f1:cb:81:2b:f7:ff:61:eb:fe:84:e5:
ab:c9:da:cc:50:26:e1:09:77:4f:bd:88:23:f7:cf:
b2:7d:f3:8a:05:b4:e5:81:9f:98:f8:e1:88:1e:66:
99:a9:ab:19:83:14:90:ce:16:44:4e:18:84:31:86:
f5:c7:b5:d0:b3:24:34:44:8f:16:b3:fc:b9:3b:bb:
a8:c5:81:eb:f5:92:52:73:1c:26:0f:ac:30:c1:b3:
d7:a1:86:fa:43:e0:5f:25:0d:a0:91:fe:a4:62:75:
f9:93:a8:48:b6:a7:50:83:e0:7a:f9:45:61:42:ce:
04:46:60:cb:3b:37:92:c1:3e:a8:71:db:a0:00:b0:
a3:a2:32:ea:f3:7e:ee:df:b9:92:02:5a:3d:4c:80:
9c:77:81:bb:3d:29:d8:0f:fb:d2:3b:27:32:31:f1:
61:94:ad:ec:e9:7b:25:ca:4e:58:9f:1e:a0:74:2e:
67:29:8b:79:ac:db:7e:b3:0f:af:11:20:7f:2a:9e:
a9:ed:5c:a4:04:17:f6:72:15:02:8b:34:71:55:9e:
43:f4:52:1c:14:c3:20:e1:5f:0d:d3:aa:5d:cc:d3:
75:57:28:d9:62:c4:6f:6d:cf:00:e8:96:84:b4:7b:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BB:E3:EE:25:8C:21:C7:94:86:DF:C4:34:4D:93:C8:BF:57:44:16
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cc:a3:0f:75:b7:dd:2a:e4:d7:16:82:58:20:15:03:09:cc:
db:b9:7f:9a:ca:2d:76:fa:0f:09:e0:83:d1:f0:d2:0c:a6:36:
e3:3a:d4:57:4b:3d:db:75:f6:24:f6:d4:6e:39:7e:7a:c2:34:
5f:5a:62:51:f2:96:2a:42:62:ac:e6:89:1a:88:56:6c:76:e7:
b2:4e:ee:66:a8:13:46:8f:b0:21:1d:ca:69:63:fa:d0:18:d2:
6a:57:33:cc:80:84:20:0b:53:2c:e6:b4:19:e4:c1:0b:f2:47:
6c:5a:72:66:bf:9e:fa:3a:4b:41:8c:2a:38:d7:c4:c3:f7:61:
0d:d8:47:f9:a1:27:de:78:dd:80:13:04:bd:ec:e7:c8:49:27:
6b:52:51:86:a2:79:f1:2f:cb:77:83:25:2f:95:1e:d5:69:1e:
4f:20:b4:c0:19:28:79:6d:6a:ec:39:05:bb:06:c0:ec:90:af:
1a:08:d2:3b:b0:10:2e:aa:d9:f8:a8:90:b1:50:85:cf:1e:1f:
47:a0:82:01:1f:ff:d1:df:a2:36:d9:a0:fa:15:de:c4:f4:ee:
d7:a2:33:70:52:c2:5c:a2:73:24:64:cb:e6:85:39:d5:f7:68:
72:f2:f5:03:00:5c:df:b7:2a:31:f2:cf:53:b3:a0:0b:41:31:
6c:03:f1:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92lFWv2DI81k94tqWFBcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5M2NjOGI3ZDJkYzcwYTI3ZDQwZmE0NTllNGU1NmMwMDVj
Y2M2M2EwHhcNMjUxMDE5MTkwMjQ3WhcNMjUxMDIwMTkwMjQ3WjAzMTEwLwYDVQQD
EyhjY2JiZTNlZTI1OGMyMWM3OTQ4NmRmYzQzNDRkOTNjOGJmNTc0NDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKD40y0g56BAzcA2bJMvoJw08cuB
K/f/Yev+hOWrydrMUCbhCXdPvYgj98+yffOKBbTlgZ+Y+OGIHmaZqasZgxSQzhZE
ThiEMYb1x7XQsyQ0RI8Ws/y5O7uoxYHr9ZJScxwmD6wwwbPXoYb6Q+BfJQ2gkf6k
YnX5k6hItqdQg+B6+UVhQs4ERmDLOzeSwT6ocdugALCjojLq837u37mSAlo9TICc
d4G7PSnYD/vSOycyMfFhlK3s6Xslyk5Ynx6gdC5nKYt5rNt+sw+vESB/Kp6p7Vyk
BBf2chUCizRxVZ5D9FIcFMMg4V8N06pdzNN1VyjZYsRvbc8A6JaEtHsfDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy74+4ljCHHlIbfxDRNk8i/V0QWMB8GA1UdIwQY
MBaAFDk8yLfS3HCifUD6RZ5OVsAFzMY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzcwMDItZTc1Zi00MjAxLTk5ODgt
OTkxYTFjNzE0Zjk1LzEvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMzcwMDItZTc1Zi00MjAxLTk5ODgtOTkxYTFjNzE0Zjk1
LzEvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsyjD3W3
3Srk1xaCWCAVAwnM27l/msotdvoPCeCD0fDSDKY24zrUV0s923X2JPbUbjl+esI0
X1piUfKWKkJirOaJGohWbHbnsk7uZqgTRo+wIR3KaWP60BjSalczzICEIAtTLOa0
GeTBC/JHbFpyZr+e+jpLQYwqONfEw/dhDdhH+aEn3njdgBMEveznyEkna1JRhqJ5
8S/Ld4MlL5Ue1WkeTyC0wBkoeW1q7DkFuwbA7JCvGgjSO7AQLqrZ+KiQsVCFzx4f
R6CCAR//0d+iNtmg+hXexPTu16IzcFLCXKJzJGTL5oU51fdocvL1AwBc37cqMfLP
U7OgC0ExbAPx8Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:28:00 2025 by rpki-client