Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: Ur2n/Na8Q8atg1GGYVwaBufJ9HS0+LYEaEQy6p3kyH0=
Subject key identifier: 4D:13:5D:BC:4C:13:D7:9A:BE:19:BC:6C:F6:E4:9C:E3:C3:F0:CB:AD
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 0198D69830FB6AF36D98800EAB0B83705798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 040E
Signing time: Sat 23 Aug 2025 11:02:34 +0000
Manifest this update: Sat 23 Aug 2025 11:02:34 +0000
Manifest next update: Sun 24 Aug 2025 11:02:34 +0000
Files and hashes: 1: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: heicPX4rUHOAXCYaZ8mlmZq6V6EgVHhQ9pkrWR59dY0=)
2: XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa (hash: MHnaHZdpDHAywK5Gif3w+d5y+x0GzsWCN2jIZcL+Afc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:30:fb:6a:f3:6d:98:80:0e:ab:0b:83:70:57:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Aug 23 11:02:34 2025 GMT
Not After : Aug 24 11:02:34 2025 GMT
Subject: CN=4d135dbc4c13d79abe19bc6cf6e49ce3c3f0cbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:2e:d2:4e:af:ab:89:bc:45:16:7a:08:cb:
48:1a:e4:bb:44:b5:bd:06:f3:8a:01:e1:55:67:11:
a3:d8:40:2b:cd:20:f3:66:1b:1d:93:41:f3:51:3f:
5f:33:b7:48:87:2c:6a:6a:61:89:a4:f1:6e:d9:85:
af:14:a6:54:a6:f1:bf:25:96:bd:e1:3a:48:96:f2:
b8:78:8a:e4:5f:61:e9:75:39:75:32:cd:19:18:99:
0d:7a:4a:21:10:47:ef:b0:d5:56:ac:c8:67:fc:87:
4e:5b:d7:3d:f7:18:12:11:1a:7a:a2:1d:92:35:f3:
82:20:09:cf:bb:0a:b8:a9:c6:4e:27:83:e9:e4:14:
c7:28:e5:5d:e4:d6:48:10:bc:08:67:ea:a8:d5:20:
97:3b:41:1c:02:18:07:9f:59:c4:0a:8c:25:9d:1e:
39:ce:04:c7:2b:ca:d0:12:d4:e0:ec:af:c4:00:f1:
fb:8c:53:4d:79:67:1e:e3:dd:f3:6e:3a:34:bd:36:
90:2e:85:ef:5d:db:b9:a8:39:29:46:4f:cd:b6:c4:
9a:41:8d:9e:33:eb:99:a3:45:9b:b6:a7:7d:f5:e6:
22:da:f1:5b:46:66:8e:45:dc:20:2c:8c:c4:c9:84:
a8:f0:b4:2b:35:05:31:e4:1b:26:6c:3b:ee:b4:65:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:5D:BC:4C:13:D7:9A:BE:19:BC:6C:F6:E4:9C:E3:C3:F0:CB:AD
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:31:97:f1:10:42:66:08:ae:99:d5:66:c1:af:25:a3:cd:65:
90:15:46:c3:92:2f:17:60:69:fb:cf:1a:16:c8:e1:76:5e:f0:
2a:98:20:30:ae:96:78:a3:a3:b9:54:d1:c7:c8:bf:75:5f:0e:
4b:5c:5f:e6:7d:b9:9b:47:fa:74:29:42:6c:1e:b7:4c:a8:3a:
aa:ed:ee:a4:a6:5a:1f:c4:d0:6f:ac:9e:17:4e:9b:21:82:09:
6e:45:26:3a:c3:30:fa:f4:5b:e9:ae:d3:7e:f3:03:c5:a7:5d:
28:72:57:f5:31:59:dd:1f:98:a9:43:d5:2e:8b:8b:92:f1:99:
3f:ae:d2:c0:05:e4:13:25:2d:6e:a6:0a:90:a0:e9:a6:ca:7f:
2a:84:39:55:49:77:c7:fc:6c:61:ec:32:43:ed:58:15:24:ee:
5b:c8:87:59:75:92:79:a8:a8:18:15:21:80:d6:e5:66:0c:b0:
a3:94:e3:3c:95:ca:4c:7d:20:73:58:22:d2:0e:07:40:64:0d:
bb:c7:53:49:36:e7:6a:09:e5:e2:0e:8d:63:0f:d0:7b:ed:65:
19:2a:ee:a8:7c:ea:36:0d:4c:8c:ad:d7:fd:06:5d:87:d1:b5:
1a:cc:51:f9:96:b2:d2:0c:7d:de:c8:fb:02:5c:33:5e:9c:cd:
f1:a0:cc:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmDD7avNtmIAOqwuDcFeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzczMDcwMDBiOTMzM2Y4ODAwMGEzNWJmM2I1YjhmZTM4
YzE2ZGUwHhcNMjUwODIzMTEwMjM0WhcNMjUwODI0MTEwMjM0WjAzMTEwLwYDVQQD
Eyg0ZDEzNWRiYzRjMTNkNzlhYmUxOWJjNmNmNmU0OWNlM2MzZjBjYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RYu0k6vq4m8RRZ6CMtIGuS7RLW9
BvOKAeFVZxGj2EArzSDzZhsdk0HzUT9fM7dIhyxqamGJpPFu2YWvFKZUpvG/JZa9
4TpIlvK4eIrkX2HpdTl1Ms0ZGJkNekohEEfvsNVWrMhn/IdOW9c99xgSERp6oh2S
NfOCIAnPuwq4qcZOJ4Pp5BTHKOVd5NZIELwIZ+qo1SCXO0EcAhgHn1nECowlnR45
zgTHK8rQEtTg7K/EAPH7jFNNeWce493zbjo0vTaQLoXvXdu5qDkpRk/NtsSaQY2e
M+uZo0Wbtqd99eYi2vFbRmaORdwgLIzEyYSo8LQrNQUx5BsmbDvutGVHcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0TXbxME9eavhm8bPbknOPD8MutMB8GA1UdIwQY
MBaAFDk3MHAAuTM/iAAKNb87W4/jjBbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1Rjd2NBQzVNei1JQUFvMXZ6dGJqLU9NRnQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mYTJhZjAtYTdlOC00NjEwLTkwN2Mt
YzkzY2M0Nzc1ZDQ2LzEvT1Rjd2NBQzVNei1JQUFvMXZ6dGJqLU9NRnQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mYTJhZjAtYTdlOC00NjEwLTkwN2MtYzkzY2M0Nzc1ZDQ2
LzEvT1Rjd2NBQzVNei1JQUFvMXZ6dGJqLU9NRnQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDGX8RBC
ZgiumdVmwa8lo81lkBVGw5IvF2Bp+88aFsjhdl7wKpggMK6WeKOjuVTRx8i/dV8O
S1xf5n25m0f6dClCbB63TKg6qu3upKZaH8TQb6yeF06bIYIJbkUmOsMw+vRb6a7T
fvMDxaddKHJX9TFZ3R+YqUPVLouLkvGZP67SwAXkEyUtbqYKkKDppsp/KoQ5VUl3
x/xsYewyQ+1YFSTuW8iHWXWSeaioGBUhgNblZgywo5TjPJXKTH0gc1gi0g4HQGQN
u8dTSTbnagnl4g6NYw/Qe+1lGSruqHzqNg1MjK3X/QZdh9G1GsxR+Zay0gx93sj7
AlwzXpzN8aDMsw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:57 2025 by rpki-client