Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: lDfEC0HrY/hhqFI75KVAxEbttO0aVdYeqmuwkWfj+Gw=
Subject key identifier: D2:D6:4B:B5:0A:AB:5B:C9:0F:97:7C:03:C1:1C:04:50:7F:BE:8F:7A
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 0198D516456E7DC34D372051EBA18B660D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 04:01:03 +0000
Manifest this update: Sat 23 Aug 2025 04:01:03 +0000
Manifest next update: Sun 24 Aug 2025 04:01:03 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: I1l/YF/VshUBpNUXo+joXhIN2nMPx5pz37Z+XUuDYRI=)
2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:45:6e:7d:c3:4d:37:20:51:eb:a1:8b:66:0d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Aug 23 04:01:03 2025 GMT
Not After : Aug 24 04:01:03 2025 GMT
Subject: CN=d2d64bb50aab5bc90f977c03c11c04507fbe8f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:6b:52:ba:5e:6d:fb:81:c6:5c:26:81:ee:
4e:6a:fa:e6:9d:74:f3:1e:dd:b8:15:dc:78:52:d3:
50:52:61:85:7b:6f:7d:b3:81:30:dc:d0:ea:57:d0:
a3:5c:35:66:de:96:07:39:0a:23:e7:6f:72:51:34:
1b:6f:01:3c:f6:ec:66:3e:67:ee:aa:1c:e7:ef:67:
b5:2b:00:d4:a9:ac:6c:7d:6b:f2:9e:91:19:ce:04:
ed:ae:d0:54:95:3a:ce:b5:e6:c4:fe:aa:77:cf:10:
3c:07:9d:92:9e:3c:48:05:60:1e:87:4d:e2:da:52:
54:29:af:0f:fa:e1:02:c1:64:0d:48:96:72:ea:d6:
c9:9e:20:e5:79:99:69:1a:bd:d5:e4:3f:64:44:79:
9c:45:e1:98:50:f6:cc:40:72:88:57:00:b1:8a:2c:
3f:1e:47:33:53:c9:fa:bb:ba:01:09:7a:38:cf:a4:
55:d4:f4:79:2c:c1:dd:7c:69:dc:95:43:ed:56:51:
e1:96:db:0c:b6:16:7f:51:55:e4:4e:5b:5d:7e:e2:
c5:79:cc:d6:b4:c5:3c:b4:91:2d:2e:50:bc:68:c9:
57:4b:0a:3a:82:db:ea:e3:dc:e9:e3:03:05:da:1d:
be:0f:fd:82:07:7e:05:3a:ce:da:41:88:c2:4a:c0:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D6:4B:B5:0A:AB:5B:C9:0F:97:7C:03:C1:1C:04:50:7F:BE:8F:7A
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2d:37:a0:c9:b4:9a:ca:d9:98:8d:12:e1:b1:ba:20:09:fd:
98:fd:38:f1:30:21:59:7f:75:97:e6:59:e6:8f:fc:36:ca:27:
e0:45:3a:a2:a0:75:98:03:37:43:45:42:b1:e0:aa:11:44:e3:
80:47:aa:df:40:af:fc:97:a3:d4:c9:de:47:af:66:5f:d0:b1:
32:12:35:ac:cf:5d:7b:74:19:4a:09:97:37:c8:74:3a:9e:b2:
5f:b5:5d:5a:92:ad:b7:48:b5:c0:e8:47:f6:0c:ad:98:ac:bc:
ae:c0:53:d0:1a:50:f4:75:dd:9e:d2:51:9e:57:db:46:5e:56:
2e:c0:c6:0d:7c:ac:20:58:35:01:56:0f:22:24:16:91:b2:9f:
35:c6:f6:e5:da:58:03:96:6c:d6:2e:ab:13:a7:52:07:34:b1:
bf:89:89:aa:e3:ae:ee:d7:0a:af:be:ab:0f:75:43:b7:8e:16:
60:37:ec:c0:32:4c:5b:71:a9:45:17:65:ea:0e:81:c4:38:78:
a1:9b:69:12:67:2a:4b:47:f1:30:87:62:df:a3:f9:98:e3:7e:
ae:67:80:a2:ad:95:ad:53:80:9a:df:04:d1:97:f2:39:13:ca:
44:34:4c:37:81:a5:fd:3d:03:56:93:b1:ac:af:45:ef:06:82:
f6:fa:4d:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFkVufcNNNyBR66GLZg2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk
YmNiYmMwHhcNMjUwODIzMDQwMTAzWhcNMjUwODI0MDQwMTAzWjAzMTEwLwYDVQQD
EyhkMmQ2NGJiNTBhYWI1YmM5MGY5NzdjMDNjMTFjMDQ1MDdmYmU4ZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqlrUrpebfuBxlwmge5OavrmnXTz
Ht24Fdx4UtNQUmGFe299s4Ew3NDqV9CjXDVm3pYHOQoj529yUTQbbwE89uxmPmfu
qhzn72e1KwDUqaxsfWvynpEZzgTtrtBUlTrOtebE/qp3zxA8B52SnjxIBWAeh03i
2lJUKa8P+uECwWQNSJZy6tbJniDleZlpGr3V5D9kRHmcReGYUPbMQHKIVwCxiiw/
HkczU8n6u7oBCXo4z6RV1PR5LMHdfGnclUPtVlHhltsMthZ/UVXkTltdfuLFeczW
tMU8tJEtLlC8aMlXSwo6gtvq49zp4wMF2h2+D/2CB34FOs7aQYjCSsB7FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLWS7UKq1vJD5d8A8EcBFB/vo96MB8GA1UdIwQY
MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt
ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw
LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADi03oMm0
msrZmI0S4bG6IAn9mP048TAhWX91l+ZZ5o/8Nson4EU6oqB1mAM3Q0VCseCqEUTj
gEeq30Cv/Jej1MneR69mX9CxMhI1rM9de3QZSgmXN8h0Op6yX7VdWpKtt0i1wOhH
9gytmKy8rsBT0BpQ9HXdntJRnlfbRl5WLsDGDXysIFg1AVYPIiQWkbKfNcb25dpY
A5Zs1i6rE6dSBzSxv4mJquOu7tcKr76rD3VDt44WYDfswDJMW3GpRRdl6g6BxDh4
oZtpEmcqS0fxMIdi36P5mON+rmeAoq2VrVOAmt8E0ZfyORPKRDRMN4Gl/T0DVpOx
rK9F7waC9vpN7Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:34 2025 by rpki-client