Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
File: OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json)
Hash identifier: EmVHFASw6DU++CYc6bqDVimgo29Z8QbQBOa4vMyjinY=
Subject key identifier: 7C:13:5B:9F:0A:60:8E:39:25:FD:DE:45:24:19:1F:F1:1D:73:9F:B0
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial: 0199FCC6764F15651BF71FB98B1C61119F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
Manifest number: 01CA
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: 0pKhUeDAG_MOdW5Y02JeMiWhQ-c.roa (hash: vlnGP89vn7MHQd69bqsZgk5M40XUxWUgsHsylZhCKms=)
2: 3-fP9p4N-Js1uWY2EPsUDn2Ta0Y.roa (hash: 3KgZqAhwrFXDW/vYa1+gIOYPmnsUMBf4mPAqrTO23HI=)
3: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: 0zec+kn8jCyvpb5HT/LA1g/9NAuPkzRmc2JkcAxp3Y4=)
4: mrvN1q3z6mxLj5OwmYo4SI68-6w.roa (hash: FCwb+wuvGG1lKyfztmthIAYgGwpmTKUMJbN1dMopTWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:76:4f:15:65:1b:f7:1f:b9:8b:1c:61:11:9f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=7c135b9f0a608e3925fdde4524191ff11d739fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:71:75:f6:aa:09:1c:ea:47:f0:f4:da:7a:
b4:97:d3:6b:ad:94:04:17:dc:8b:17:50:2c:33:02:
7d:ee:d4:6e:38:2c:fc:b1:73:83:2e:d3:98:35:df:
e3:44:76:de:00:22:90:c2:64:30:6f:40:97:99:1a:
12:96:0e:e8:4f:0c:4d:26:ef:a5:89:18:e3:65:79:
58:3c:23:4f:35:ab:d7:4a:c1:b5:e3:8e:d4:a9:a2:
f1:89:58:9f:72:c4:e2:6e:3c:29:69:ae:33:73:95:
42:f0:cf:e0:f0:e8:e5:c3:fd:a3:c5:18:8a:7a:89:
17:08:a2:fc:c5:4b:7c:d7:11:49:96:44:dd:75:31:
7c:56:43:5a:04:43:06:75:c6:4e:87:60:93:cc:f9:
42:f5:6f:c5:86:32:a1:10:90:8d:be:87:62:b3:99:
9d:8d:18:4f:27:8c:b5:98:45:05:21:c8:92:bd:8b:
e3:da:61:43:70:94:6e:6e:fa:c6:ee:05:55:5c:8d:
af:6b:05:46:2f:3a:b6:25:39:23:24:21:a6:7c:61:
c2:ee:0f:29:f6:75:b6:da:d8:14:9e:f1:24:a3:84:
f1:b6:24:c4:cd:37:a8:39:05:2f:4a:a6:4c:c7:22:
7e:8f:9a:80:a9:37:6a:97:cf:2f:8c:4e:6d:df:8a:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:5B:9F:0A:60:8E:39:25:FD:DE:45:24:19:1F:F1:1D:73:9F:B0
X509v3 Authority Key Identifier:
keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f0:6f:74:fb:1b:a8:ed:5f:53:e9:9b:24:dc:55:25:65:d8:
3f:d2:ea:c2:7b:00:c5:51:00:4b:ea:e9:48:ee:f0:f0:d2:8f:
10:53:b4:6f:6f:cd:0b:57:a2:61:87:fb:6b:24:08:f4:2f:f0:
75:72:a5:8e:e7:c2:db:0b:2c:c4:92:b4:60:71:81:9c:43:a1:
63:a6:4c:9c:6a:0e:58:2e:2f:ff:c8:06:5d:c2:06:d2:d4:6d:
d1:20:58:d7:d2:33:7e:8f:99:11:3f:1f:94:23:5c:a8:59:0b:
65:1b:e1:e2:d1:aa:fe:4d:e2:13:7a:80:ce:35:97:30:97:ae:
1f:45:9c:f0:cf:7d:07:17:fe:33:4a:1c:56:ac:10:c5:07:c2:
18:c8:1e:09:61:8c:b2:b4:62:a7:28:b9:6a:e8:62:12:48:40:
07:56:ad:55:13:38:11:a8:8a:3c:bd:af:15:e4:d9:e8:d0:10:
9a:b8:65:a1:80:97:f0:b6:27:b2:73:6b:be:f3:56:15:c0:e6:
74:8b:ed:b3:ef:68:8c:6a:fc:94:cd:a9:8e:6a:2c:81:0e:50:
ba:91:5c:a6:2c:ff:9d:8e:02:26:66:83:ae:0d:2b:f2:f6:c6:
2d:2a:45:91:56:ef:87:b2:8a:5b:19:bf:cd:18:d2:7c:33:a6:
58:3b:25:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnZPFWUb9x+5ixxhEZ9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGE1YmFhMDU4YzQwOTU2NWZmMmFjODc2YTIyZWU2Mzc3
YjUwM2IwHhcNMjUxMDE5MTQwMTI4WhcNMjUxMDIwMTQwMTI4WjAzMTEwLwYDVQQD
Eyg3YzEzNWI5ZjBhNjA4ZTM5MjVmZGRlNDUyNDE5MWZmMTFkNzM5ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApulxdfaqCRzqR/D02nq0l9NrrZQE
F9yLF1AsMwJ97tRuOCz8sXODLtOYNd/jRHbeACKQwmQwb0CXmRoSlg7oTwxNJu+l
iRjjZXlYPCNPNavXSsG1447UqaLxiVifcsTibjwpaa4zc5VC8M/g8Ojlw/2jxRiK
eokXCKL8xUt81xFJlkTddTF8VkNaBEMGdcZOh2CTzPlC9W/FhjKhEJCNvodis5md
jRhPJ4y1mEUFIciSvYvj2mFDcJRubvrG7gVVXI2vawVGLzq2JTkjJCGmfGHC7g8p
9nW22tgUnvEko4TxtiTEzTeoOQUvSqZMxyJ+j5qAqTdql88vjE5t34p1hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwTW58KYI45Jf3eRSQZH/Edc5+wMB8GA1UdIwQY
MBaAFDraW6oFjECVZf8qyHaiLuY3e1A7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0Yzkt
OWMxYjJhZDU1OWFiLzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0YzktOWMxYjJhZDU1OWFi
LzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPBvdPsb
qO1fU+mbJNxVJWXYP9LqwnsAxVEAS+rpSO7w8NKPEFO0b2/NC1eiYYf7ayQI9C/w
dXKljufC2wssxJK0YHGBnEOhY6ZMnGoOWC4v/8gGXcIG0tRt0SBY19Izfo+ZET8f
lCNcqFkLZRvh4tGq/k3iE3qAzjWXMJeuH0Wc8M99Bxf+M0ocVqwQxQfCGMgeCWGM
srRipyi5auhiEkhAB1atVRM4EaiKPL2vFeTZ6NAQmrhloYCX8LYnsnNrvvNWFcDm
dIvts+9ojGr8lM2pjmosgQ5QupFcpiz/nY4CJmaDrg0r8vbGLSpFkVbvh7KKWxm/
zRjSfDOmWDslAA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:11 2025 by rpki-client