Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: nuhu7bO/PFkB+HWuTZNjqD1W8EWd+Y+sYjCb8TDunrY=
Subject key identifier: 98:63:76:F3:D5:23:D8:2E:89:1F:6B:CD:6F:47:FD:BE:CA:D1:15:C2
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019A522CB037DFB37C15EB79CFB49A9C68F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 04:00:51 +0000
Manifest this update: Wed 05 Nov 2025 04:00:51 +0000
Manifest next update: Thu 06 Nov 2025 04:00:51 +0000
Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: 6arhgvEuTdQYjUJoxTJ4mk4YPywC4gTiJL/wyBxqz38=)
2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:b0:37:df:b3:7c:15:eb:79:cf:b4:9a:9c:68:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Nov 5 04:00:51 2025 GMT
Not After : Nov 6 04:00:51 2025 GMT
Subject: CN=986376f3d523d82e891f6bcd6f47fdbecad115c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:e3:4a:89:6d:85:61:b0:71:40:72:b1:a5:
0c:a4:d2:21:3f:aa:58:33:29:90:ea:fe:83:8a:d0:
b8:cb:b5:ce:e6:fe:8a:1f:a9:b8:4d:6c:e0:6e:6f:
91:0b:92:67:52:bb:b5:18:64:8c:b1:1f:71:e6:74:
dd:69:59:d5:ed:12:88:c5:36:68:ec:48:c0:85:ef:
2d:dd:2c:bd:71:e2:bc:2b:0c:31:d4:40:ae:54:10:
b7:69:a7:9b:24:33:a0:28:90:af:ea:b3:08:89:c1:
79:68:cb:ba:cd:24:5e:ac:e4:bc:e6:78:68:a4:1f:
8f:e0:6a:4f:d8:05:45:08:09:a2:05:b1:7b:67:7b:
c7:1a:db:4a:93:07:f7:b6:8b:5b:d8:6c:4f:6a:e4:
5d:aa:6a:f1:57:9b:46:bd:b2:09:c5:5e:ac:61:69:
81:b6:a4:f6:66:07:c2:f0:25:f0:cc:26:2c:c6:c3:
09:73:2c:de:99:66:65:66:09:1c:42:f1:9e:0d:fe:
b6:aa:c9:70:c2:bd:68:9c:f4:14:ce:51:f5:ae:c9:
1e:a1:a2:a7:50:3f:e4:76:23:e8:ab:08:4f:f7:cf:
f6:93:ef:6b:2c:ca:a9:75:63:c5:f0:17:52:cd:3f:
cc:ee:b4:48:53:51:d4:4a:ff:9f:74:82:b5:6a:c5:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:76:F3:D5:23:D8:2E:89:1F:6B:CD:6F:47:FD:BE:CA:D1:15:C2
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b6:41:89:4c:b7:f5:26:7a:5c:cb:3b:ce:4c:8e:fa:1b:17:
e8:19:e9:50:97:35:5c:42:73:e7:f4:3e:83:cd:b8:d1:10:1e:
48:dd:55:a2:75:c5:82:a2:ee:37:4d:dd:d1:ed:0d:ef:dd:3c:
0c:ba:54:65:5b:1c:a0:21:1d:c2:2a:05:38:4c:3f:f6:cf:33:
7c:46:ca:b6:37:26:34:88:cd:ec:b8:ad:94:f2:d1:2c:3a:a1:
1b:ad:79:03:b0:b7:42:be:59:0b:72:c7:9e:bb:4e:c6:1f:f0:
d0:b3:04:26:3f:13:66:d1:f8:ca:53:57:ba:ac:52:40:53:fc:
b0:77:d0:c5:de:c8:38:72:15:e8:b4:a2:cf:01:52:94:db:58:
b2:ab:9d:0e:ae:12:76:22:d5:f2:75:fd:e1:1e:e1:ee:52:f1:
e8:8c:29:ca:9a:62:08:39:28:51:b8:ea:f6:b1:38:4e:f9:a2:
c9:00:41:9e:55:9c:18:84:72:38:07:c1:a4:d1:69:e6:da:9d:
f3:98:71:eb:5b:7d:33:c7:43:15:91:3e:87:25:6f:26:03:67:
b7:ee:73:01:b2:57:47:5e:a1:0f:71:de:5c:e6:25:a8:b1:03:
a1:9b:f6:bd:a9:80:bc:7f:f7:76:ae:76:30:98:7a:bb:d8:b5:
70:8c:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:10 2025 by rpki-client