Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: e9gZme6M8TrZ7oVOUlRj4J43iAiKu9wJ83a02yv6Bes=
Subject key identifier: EA:C9:94:5B:C1:53:F5:80:FD:62:B4:49:66:0C:DB:A9:D3:AF:F8:97
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 0199FF22BD122F75228E221C6E6039DA2B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 0541
Signing time: Mon 20 Oct 2025 01:01:30 +0000
Manifest this update: Mon 20 Oct 2025 01:01:30 +0000
Manifest next update: Tue 21 Oct 2025 01:01:30 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: 7oZUUaPMXiTtSiWx5GntckTGWrcUq95f6p+p3L7sKUQ=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:bd:12:2f:75:22:8e:22:1c:6e:60:39:da:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Oct 20 01:01:30 2025 GMT
Not After : Oct 21 01:01:30 2025 GMT
Subject: CN=eac9945bc153f580fd62b449660cdba9d3aff897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:06:1e:cf:f4:aa:f9:80:76:87:ab:36:74:
1e:e5:97:f3:85:e1:d0:60:08:14:53:11:20:b7:a2:
87:91:98:7b:ae:a2:03:11:94:2c:e5:87:92:b2:83:
52:91:4d:d2:a3:6b:58:47:63:28:99:a3:7e:18:a9:
8c:f4:ea:5d:81:ce:74:66:07:3e:b8:3d:87:f2:41:
15:f6:9d:d0:53:cf:f3:39:d3:b2:6b:af:d1:7a:20:
5c:74:b8:c1:44:ff:c7:86:42:ec:c8:27:b3:29:47:
21:2d:16:23:cf:90:10:8b:6f:14:16:79:96:5a:04:
3b:73:ab:2c:b1:12:4d:89:9a:65:2e:47:a7:e8:63:
0f:77:4e:f5:0a:a2:c2:2b:13:c1:c4:cb:5c:30:37:
47:4e:c5:8b:9f:7e:0e:71:d8:07:97:9b:bb:e6:2b:
b2:ee:7d:4e:af:0f:b8:b4:94:83:81:02:d0:0c:dd:
46:a5:1c:e9:04:68:50:62:5b:6b:9c:3d:6e:e1:77:
c2:31:a1:76:20:56:8b:91:35:09:2e:df:8f:44:e1:
d9:f5:3a:f2:9a:1c:64:3d:ce:7d:cf:ce:6a:0f:1a:
da:86:95:b9:d3:55:5a:40:6a:f1:cb:18:b0:6b:83:
f1:3f:03:b5:6d:67:ad:44:59:8e:ad:8d:69:76:54:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C9:94:5B:C1:53:F5:80:FD:62:B4:49:66:0C:DB:A9:D3:AF:F8:97
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b1:30:59:2f:8f:5a:f9:43:92:62:4d:d1:b9:92:51:30:f7:
82:df:4a:45:22:a8:e1:3c:d7:0a:94:25:c1:0f:a3:f9:d3:9e:
de:6e:50:ec:dc:06:bc:80:f0:cd:20:93:d9:07:da:dd:ca:a3:
ac:85:81:13:13:bd:38:69:28:98:5a:11:8f:17:9c:f8:c6:79:
24:39:39:53:d3:00:7d:1b:84:26:4f:1e:c9:0c:7c:1e:f6:2a:
63:97:52:98:5d:21:8b:5a:dc:5d:06:d9:ee:08:b1:b7:c0:a0:
c7:ce:24:0a:6e:c2:bd:f5:7d:1b:17:6f:4d:31:df:98:3f:07:
c5:f6:d3:01:81:4b:8d:16:93:77:b8:f7:1a:3a:7a:66:13:3a:
fb:c6:fa:51:11:e7:72:5d:ba:ae:56:8e:be:82:7b:4f:a0:77:
d5:94:52:bb:a4:51:14:00:ae:86:ee:d6:51:69:91:ee:7d:0f:
74:33:59:cf:cc:58:da:b3:fc:26:56:4a:ff:13:81:9d:15:ae:
fa:af:3f:1e:70:a3:46:b2:fd:97:d7:3a:e8:64:22:3e:3d:b8:
b1:d7:70:e7:4f:69:83:cf:bd:11:49:51:4d:03:39:91:9b:e8:
d6:72:2c:01:5a:9c:ea:0c:de:05:3f:c2:3d:9d:14:29:99:60:
de:3e:c1:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Ir0SL3UijiIcbmA52isaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5
NjRiNDAwHhcNMjUxMDIwMDEwMTMwWhcNMjUxMDIxMDEwMTMwWjAzMTEwLwYDVQQD
EyhlYWM5OTQ1YmMxNTNmNTgwZmQ2MmI0NDk2NjBjZGJhOWQzYWZmODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4QGHs/0qvmAdoerNnQe5ZfzheHQ
YAgUUxEgt6KHkZh7rqIDEZQs5YeSsoNSkU3So2tYR2MomaN+GKmM9Opdgc50Zgc+
uD2H8kEV9p3QU8/zOdOya6/ReiBcdLjBRP/HhkLsyCezKUchLRYjz5AQi28UFnmW
WgQ7c6sssRJNiZplLken6GMPd071CqLCKxPBxMtcMDdHTsWLn34OcdgHl5u75iuy
7n1Orw+4tJSDgQLQDN1GpRzpBGhQYltrnD1u4XfCMaF2IFaLkTUJLt+PROHZ9Try
mhxkPc59z85qDxrahpW501VaQGrxyxiwa4PxPwO1bWetRFmOrY1pdlQDVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrJlFvBU/WA/WK0SWYM26nTr/iXMB8GA1UdIwQY
MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt
ZWMxNjczNWEzMzgyLzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy
LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7EwWS+P
WvlDkmJN0bmSUTD3gt9KRSKo4TzXCpQlwQ+j+dOe3m5Q7NwGvIDwzSCT2Qfa3cqj
rIWBExO9OGkomFoRjxec+MZ5JDk5U9MAfRuEJk8eyQx8HvYqY5dSmF0hi1rcXQbZ
7gixt8Cgx84kCm7CvfV9GxdvTTHfmD8HxfbTAYFLjRaTd7j3Gjp6ZhM6+8b6URHn
cl26rlaOvoJ7T6B31ZRSu6RRFACuhu7WUWmR7n0PdDNZz8xY2rP8JlZK/xOBnRWu
+q8/HnCjRrL9l9c66GQiPj24sddw509pg8+9EUlRTQM5kZvo1nIsAVqc6gzeBT/C
PZ0UKZlg3j7BhA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:35:49 2025 by rpki-client