Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: uhPWMIAI7hXKp5i2u0ICaOAKdqw5Yo4JgGl4uLxXezc=
Subject key identifier: 5D:18:68:7C:EC:62:EA:F4:30:28:5C:D6:17:AB:C2:CA:49:FF:A2:91
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 0199FC58DC9A8573ED61B2CC3DE077091F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: yywFcdA14PzSd2/uXK8dTMIpY+cqSfLT1Q6Y6HgHcMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:dc:9a:85:73:ed:61:b2:cc:3d:e0:77:09:1f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=5d18687cec62eaf430285cd617abc2ca49ffa291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:38:6b:e2:24:4f:45:28:21:28:3b:b0:e8:
af:6c:8a:b5:85:24:e8:82:1a:be:aa:b6:c5:a7:95:
80:cf:a1:8b:33:61:2d:a3:36:52:ec:8f:75:08:17:
bc:9e:ab:67:68:81:22:19:4c:1e:9c:4c:5b:23:8c:
ec:55:a6:9a:8d:18:1b:bd:32:44:f5:55:39:7c:ff:
79:de:d7:72:50:ac:49:a0:31:69:38:7a:7e:ed:71:
7e:b4:e2:57:a8:dd:18:0e:de:25:8b:38:b4:9e:6a:
a7:66:05:94:30:5c:67:1c:ef:3e:ad:3d:2e:66:7d:
f3:50:5d:c6:0a:e9:46:4a:09:c0:c4:a7:e6:f6:40:
08:69:e7:bc:12:15:7c:4a:0d:88:bf:0b:60:7b:49:
df:2b:05:87:0a:ba:d8:86:85:2b:50:16:ca:a7:61:
f9:bd:da:8a:32:fc:10:3f:62:5b:b6:eb:6b:3d:e4:
67:98:db:b4:0e:f3:f5:c9:10:8e:12:20:dd:97:7b:
89:b6:b2:f9:95:f2:b9:31:0a:48:5d:aa:a6:d8:64:
a2:f2:12:d8:f3:be:97:41:d8:c4:63:ce:22:4f:27:
59:a3:3c:e7:c4:eb:f5:e0:83:de:ae:2a:7d:0c:bc:
18:bd:ea:ce:4d:ff:f3:75:93:5b:4b:d2:e4:d8:2e:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:18:68:7C:EC:62:EA:F4:30:28:5C:D6:17:AB:C2:CA:49:FF:A2:91
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:07:d7:86:b5:42:5b:66:20:87:4f:56:4e:f5:07:b3:e9:fc:
4d:24:f6:c1:35:36:b1:f4:91:20:77:1a:08:c6:85:61:ec:14:
cc:f2:4c:6d:a8:75:75:32:dc:8c:65:29:07:80:18:e9:45:a1:
c0:f3:9d:25:cd:6e:28:48:18:b2:9e:e4:1c:6a:b3:77:01:c8:
32:a2:32:55:90:f6:fe:6a:10:9a:d0:f5:bd:59:34:a6:bf:fb:
45:af:d0:62:c6:7a:30:bc:11:74:22:55:7c:1f:8c:45:47:2d:
52:da:a4:7f:2b:9a:d4:05:ec:b5:59:3d:7c:84:23:78:cb:d8:
cb:ba:fb:30:a1:db:42:93:e9:7b:55:00:4d:8c:44:ec:95:13:
e6:97:cd:74:7e:6a:fc:0a:0c:3c:0e:f2:62:f0:a1:55:54:46:
04:73:a7:e1:17:7a:c0:4d:3a:91:22:f8:88:9d:7d:76:72:02:
a0:e4:55:4a:3f:42:35:66:37:e4:c8:98:97:05:9b:e3:5c:12:
5b:47:b1:af:14:20:98:a8:df:59:e2:9a:10:6d:7e:51:23:92:
3f:49:3f:b6:07:32:05:ca:81:04:cc:38:b4:bc:e7:3d:76:f6:
fe:14:bb:e6:cf:3b:e9:7c:5d:9c:9e:77:a0:8a:10:19:67:f5:
b4:f9:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:15 2025 by rpki-client