Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: TGSa00FBJgGeoKkwAteMbicUczrvM1T2SCI0mVParmE=
Subject key identifier: 6E:0E:D4:E8:A6:66:74:AC:3F:69:86:FD:07:60:73:77:4B:21:29:F5
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 0199FC8F3DBA995E80B521C71A62493A95FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: +07QKz69UxJMUZD5GJQ6+PrTyXzVeMAaW/kE5kRfjCw=)
2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3d:ba:99:5e:80:b5:21:c7:1a:62:49:3a:95:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=6e0ed4e8a66674ac3f6986fd076073774b2129f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:fc:18:b9:33:38:55:3b:f3:50:87:c8:e5:
bb:90:5f:88:32:0f:75:4c:76:ce:88:28:8b:d0:33:
57:ea:7d:82:e5:d0:1e:73:d3:1a:50:84:d4:65:e6:
77:ac:ba:98:68:10:13:37:11:3d:b4:4a:0c:8a:e7:
69:08:7d:cd:c9:92:06:93:b1:68:d9:f9:51:d8:66:
ca:60:ff:6d:f0:7e:23:ba:d8:b9:53:5a:75:a5:14:
96:ac:e0:53:08:3e:2e:f6:93:f6:f2:9a:6b:40:2e:
57:58:c1:ba:78:8e:54:17:aa:bf:0c:9b:82:30:fd:
33:ac:6f:b3:39:9e:88:be:a9:20:be:0c:a2:c5:d1:
b4:0e:e1:3c:9c:a6:c8:79:17:e4:80:19:44:0c:31:
36:59:a5:1c:2e:a8:be:81:d2:23:cb:49:30:82:f1:
18:2b:a2:b5:bd:7f:b7:83:4b:ad:66:30:a7:a0:3b:
80:6f:dc:49:51:68:0c:60:d4:ee:07:cf:03:b7:11:
99:ec:1a:d3:ff:ae:2f:fd:c6:f6:54:6f:7e:1e:32:
56:6e:88:f0:a1:92:5a:01:b2:4b:a8:91:be:51:23:
20:ca:f8:48:9a:49:2a:2c:e1:56:69:59:c7:c6:7c:
9b:33:31:e5:32:6f:35:da:6c:c1:8e:5b:31:76:71:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:D4:E8:A6:66:74:AC:3F:69:86:FD:07:60:73:77:4B:21:29:F5
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c4:65:7d:d8:41:d5:0c:a6:74:89:01:0c:6f:3a:a6:7d:74:
32:90:b4:24:0d:9f:09:02:50:37:04:a4:e0:f1:2f:50:5c:e5:
2c:38:ec:50:ab:df:1c:54:41:87:16:76:3d:94:62:d9:78:25:
22:11:7b:b5:12:da:6c:5b:2d:90:06:70:4b:da:32:0a:a5:af:
b1:f9:ea:fd:13:5e:42:78:b2:75:33:a2:aa:4d:f7:a4:a8:7a:
13:29:e2:f2:c1:ed:47:14:40:a6:d0:19:d6:bb:2f:10:78:7d:
b0:ea:1a:8e:b6:dd:0f:22:13:6f:97:b0:41:1d:8b:05:e1:cc:
1c:66:76:08:6a:a8:96:3d:c4:e2:30:27:ce:8d:6b:bd:c9:dc:
bf:31:aa:bc:a3:ef:8f:2a:85:4e:23:c5:4b:38:d4:07:f2:f5:
ed:e5:aa:68:a9:dd:dd:6a:a4:38:e3:e6:77:41:f2:52:59:9d:
ac:ad:42:2e:c8:b6:38:e2:68:94:ac:f4:ab:90:fe:58:5c:7a:
13:76:11:b2:b6:9a:36:b1:5e:16:9e:fe:6c:32:66:b0:01:f7:
9c:ef:ba:76:12:e7:42:d7:cd:17:9c:85:3a:81:5e:ea:6a:61:
26:fb:72:49:c9:17:06:dd:3c:cf:f9:80:6b:dd:ed:ba:ce:89:
f4:a4:99:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jz26mV6AtSHHGmJJOpX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk
YmNiYmMwHhcNMjUxMDE5MTMwMTA5WhcNMjUxMDIwMTMwMTA5WjAzMTEwLwYDVQQD
Eyg2ZTBlZDRlOGE2NjY3NGFjM2Y2OTg2ZmQwNzYwNzM3NzRiMjEyOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQD8GLkzOFU781CHyOW7kF+IMg91
THbOiCiL0DNX6n2C5dAec9MaUITUZeZ3rLqYaBATNxE9tEoMiudpCH3NyZIGk7Fo
2flR2GbKYP9t8H4juti5U1p1pRSWrOBTCD4u9pP28pprQC5XWMG6eI5UF6q/DJuC
MP0zrG+zOZ6IvqkgvgyixdG0DuE8nKbIeRfkgBlEDDE2WaUcLqi+gdIjy0kwgvEY
K6K1vX+3g0utZjCnoDuAb9xJUWgMYNTuB88DtxGZ7BrT/64v/cb2VG9+HjJWbojw
oZJaAbJLqJG+USMgyvhImkkqLOFWaVnHxnybMzHlMm812mzBjlsxdnFEMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4O1OimZnSsP2mG/Qdgc3dLISn1MB8GA1UdIwQY
MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt
ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw
LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcRlfdhB
1QymdIkBDG86pn10MpC0JA2fCQJQNwSk4PEvUFzlLDjsUKvfHFRBhxZ2PZRi2Xgl
IhF7tRLabFstkAZwS9oyCqWvsfnq/RNeQniydTOiqk33pKh6Eyni8sHtRxRAptAZ
1rsvEHh9sOoajrbdDyITb5ewQR2LBeHMHGZ2CGqolj3E4jAnzo1rvcncvzGqvKPv
jyqFTiPFSzjUB/L17eWqaKnd3WqkOOPmd0HyUlmdrK1CLsi2OOJolKz0q5D+WFx6
E3YRsraaNrFeFp7+bDJmsAH3nO+6dhLnQtfNF5yFOoFe6mphJvtySckXBt08z/mA
a93tus6J9KSZaA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:53 2025 by rpki-client