Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: 4lbOxvT74NCiRfAuV944TjoYEpgzHG2D7Xap0Bsx3tY=
Subject key identifier: 06:FD:33:79:1A:79:31:40:BC:6D:2D:C7:7B:48:07:16:1C:05:5A:4B
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 019A4EBD4ADF2F6DC96DBE30C11F157B8A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 06CA
Signing time: Tue 04 Nov 2025 12:00:19 +0000
Manifest this update: Tue 04 Nov 2025 12:00:19 +0000
Manifest next update: Wed 05 Nov 2025 12:00:19 +0000
Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: MnZ0rkB3oeXOZnhtXbpcJeg2whMbpFtivmPLFuDG0X0=)
2: kqIK4ViX12p6eIuBG0T4dHMIIHI.roa (hash: PaO/dVKACGH2GQrFFW5fxxz+R4Obi2vhR9vhB2cSwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4a:df:2f:6d:c9:6d:be:30:c1:1f:15:7b:8a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Nov 4 12:00:19 2025 GMT
Not After : Nov 5 12:00:19 2025 GMT
Subject: CN=06fd33791a793140bc6d2dc77b4807161c055a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:10:9a:8f:0e:a9:6f:3d:de:10:b0:ab:fe:
8d:93:49:d3:0d:a9:a9:29:ab:34:92:b4:c6:c8:7d:
0b:d5:f9:07:b7:f4:f5:f8:cf:e5:71:36:63:a5:47:
5d:9f:8c:25:03:be:fd:8f:c4:a2:00:a5:5a:ce:cf:
eb:e2:9d:34:b3:7d:44:ca:c9:01:6c:ce:f7:0f:d6:
ec:66:42:b5:eb:94:d3:c4:f5:a0:23:1b:58:7e:e2:
16:91:c3:50:bf:54:e3:22:a0:b9:34:9d:1e:54:1c:
05:05:2d:51:96:de:27:da:90:49:c0:a3:3b:0a:22:
c3:f9:c4:86:09:f0:c2:1e:59:3d:49:49:7b:dc:3e:
9b:57:bc:83:ce:97:24:a5:3e:f9:44:1c:71:a4:44:
d1:ea:68:ae:7b:2a:21:23:ed:5e:e1:35:cc:67:53:
29:6c:a8:7e:f6:de:e9:af:a7:26:82:bd:0d:c3:35:
eb:20:6a:1c:4f:fa:de:5d:1c:1f:ca:e7:c1:5d:e8:
86:5f:2a:5d:cc:26:ca:fc:c1:e6:e0:a7:e0:fc:8a:
b0:a1:53:dd:ba:66:d1:65:b9:3f:10:94:2f:21:2f:
39:b8:76:b8:3f:79:d2:c3:3e:ee:bf:f8:ba:51:dd:
78:49:ba:16:9e:ab:ba:f0:7f:24:c4:2c:0f:b0:d6:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:33:79:1A:79:31:40:BC:6D:2D:C7:7B:48:07:16:1C:05:5A:4B
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2e:1b:c8:46:b6:ba:e9:9c:97:14:23:4a:a2:84:14:49:52:
c8:6e:92:c7:a9:b7:55:fd:bc:b0:23:f9:5b:1a:b0:72:f5:e2:
e2:84:6b:e9:ed:7d:6e:78:b2:01:73:46:ae:3c:5f:87:06:4d:
ba:7b:25:8d:71:0c:64:39:f9:ba:f4:59:7c:9e:48:67:9e:9a:
62:3c:f1:5d:76:a4:3b:0c:f2:22:d4:87:35:dc:20:22:a5:71:
19:c5:bd:c0:9b:26:33:d2:21:60:4a:fa:33:40:0b:31:b1:30:
42:bf:f6:ae:83:69:2c:1c:8f:4c:c9:e6:2f:f3:85:3f:e3:2d:
1d:50:fe:b5:2f:45:cd:f7:9f:27:d9:c8:fc:eb:65:02:db:f6:
d1:b5:0f:67:50:ca:65:90:0c:75:65:46:59:cd:68:3a:b0:bb:
4f:7a:16:f7:65:5e:32:64:5e:bf:78:3a:69:f5:29:d2:d0:1c:
e6:91:d2:1f:c1:a3:a9:79:57:fd:47:da:9c:e5:55:fa:b2:d3:
c6:cd:97:5c:3e:45:e9:70:4f:c3:f1:6b:dc:ae:21:2c:e7:d5:
98:06:a6:a1:91:67:2c:71:5d:89:8d:3f:c2:fe:3e:66:cc:b3:
95:25:dd:c1:f7:e1:6c:e3:a3:a8:d8:7e:e9:92:93:59:ff:8c:
2d:f7:7f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvUrfL23Jbb4wwR8Ve4qDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzlmOTJiODI1Y2UxMTA5MDNjMzFkNTIyYjBmNTBjYWZk
NzRhNmYwHhcNMjUxMTA0MTIwMDE5WhcNMjUxMTA1MTIwMDE5WjAzMTEwLwYDVQQD
EygwNmZkMzM3OTFhNzkzMTQwYmM2ZDJkYzc3YjQ4MDcxNjFjMDU1YTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09EQmo8OqW893hCwq/6Nk0nTDamp
Kas0krTGyH0L1fkHt/T1+M/lcTZjpUddn4wlA779j8SiAKVazs/r4p00s31EyskB
bM73D9bsZkK165TTxPWgIxtYfuIWkcNQv1TjIqC5NJ0eVBwFBS1Rlt4n2pBJwKM7
CiLD+cSGCfDCHlk9SUl73D6bV7yDzpckpT75RBxxpETR6miueyohI+1e4TXMZ1Mp
bKh+9t7pr6cmgr0NwzXrIGocT/reXRwfyufBXeiGXypdzCbK/MHm4Kfg/IqwoVPd
umbRZbk/EJQvIS85uHa4P3nSwz7uv/i6Ud14SboWnqu68H8kxCwPsNYhUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb9M3kaeTFAvG0tx3tIBxYcBVpLMB8GA1UdIwQY
MBaAFDk5+SuCXOEQkDwx1SKw9Qyv10pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMt
OWZjMzY0MTFhY2NjLzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMtOWZjMzY0MTFhY2Nj
LzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABi4byEa2
uumclxQjSqKEFElSyG6Sx6m3Vf28sCP5WxqwcvXi4oRr6e19bniyAXNGrjxfhwZN
unsljXEMZDn5uvRZfJ5IZ56aYjzxXXakOwzyItSHNdwgIqVxGcW9wJsmM9IhYEr6
M0ALMbEwQr/2roNpLByPTMnmL/OFP+MtHVD+tS9FzfefJ9nI/OtlAtv20bUPZ1DK
ZZAMdWVGWc1oOrC7T3oW92VeMmRev3g6afUp0tAc5pHSH8GjqXlX/UfanOVV+rLT
xs2XXD5F6XBPw/Fr3K4hLOfVmAamoZFnLHFdiY0/wv4+ZsyzlSXdwffhbOOjqNh+
6ZKTWf+MLfd/JA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:26 2025 by rpki-client