Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: +EsFDLjy2OJ15hU2h+PbJgQI/FQnTtThr/x1AqfOO3U=
Subject key identifier: D1:DD:E1:3F:2A:51:0B:6D:24:90:77:66:48:E0:5F:8B:21:14:FE:C6
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 019A4EF49BF46914D7CB9126B4F303794D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0A64
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: +LppQSlylmXvmkqHl/khm/nh36PQAsDWo+jEE6smIhg=)
2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9b:f4:69:14:d7:cb:91:26:b4:f3:03:79:4d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=d1dde13f2a510b6d2490776648e05f8b2114fec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:fb:13:07:3b:41:53:d0:5c:36:c6:91:4d:
ce:ee:f8:71:f9:a1:e6:18:d8:31:e7:11:09:20:46:
85:f8:8d:d2:0a:c9:6c:66:77:95:0f:83:ed:23:c5:
ff:11:ee:57:40:0b:f8:6a:21:1e:7b:fe:cc:3a:f5:
7a:7e:bd:ee:1d:b9:ea:39:78:cb:b0:a6:40:6d:16:
5a:c0:e9:ac:fc:db:16:0c:00:19:c3:16:52:cd:49:
72:30:7a:c7:52:41:50:a7:be:18:28:ca:3b:a8:cc:
c1:a7:75:03:b2:4c:5a:99:fb:90:af:66:5d:31:38:
c8:0f:82:b8:42:34:6e:6c:4f:18:17:6d:7f:63:89:
c6:1d:12:d7:db:7c:bb:64:3d:e3:93:34:eb:e4:f4:
88:9c:6c:ea:65:ed:21:04:5b:77:62:cd:cb:c7:b4:
8c:54:f1:cc:f9:14:77:b8:bf:1d:7f:75:0a:ff:37:
2d:14:e5:7a:e1:67:74:bd:b7:44:5b:11:4f:7e:b7:
ed:00:79:26:2a:f6:04:76:c0:d5:35:f3:d2:03:4a:
23:5b:6d:d5:89:95:b9:1c:3c:64:29:f3:e9:51:54:
94:93:16:32:6e:58:fc:22:db:12:67:49:78:3a:4a:
1e:82:92:20:35:35:48:14:de:41:45:ee:a2:33:a2:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DD:E1:3F:2A:51:0B:6D:24:90:77:66:48:E0:5F:8B:21:14:FE:C6
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:56:14:00:27:da:0d:fe:5e:0d:97:25:4a:b6:dd:6e:b0:
c1:48:5f:e0:5a:08:f0:33:ee:9e:3e:ff:a8:1b:73:e8:62:52:
b5:6a:f1:c3:e2:43:71:79:18:1a:52:b0:dd:6d:d8:ed:f8:1e:
8a:e3:e1:9a:f5:68:95:ce:02:2c:b8:6a:20:08:86:81:a4:47:
a3:27:e4:15:88:ac:0e:ae:a8:61:24:5e:c2:99:37:be:87:1a:
80:84:e4:46:35:e2:c2:dd:7c:18:8b:18:5c:ce:c2:53:b6:95:
72:7d:98:03:96:ac:f7:39:44:25:38:e9:46:cd:81:21:a5:3c:
a4:68:c5:76:f1:9a:2e:c2:9c:dd:1b:71:81:e4:5e:d2:3b:76:
9f:9a:45:66:e7:5a:a6:31:eb:43:87:cf:55:15:23:5d:98:cf:
28:f7:03:52:ff:37:8a:8c:bf:bf:b1:6a:87:c5:45:65:7e:a6:
1c:73:fb:76:39:d7:ba:a0:2f:6e:d7:d2:c1:3a:73:5f:cf:d6:
36:4a:87:b1:25:2f:3f:a3:44:94:16:22:fb:0f:0e:d1:ab:8d:
81:65:b9:f9:87:5b:5f:c6:0e:4f:18:e6:f2:fd:8b:10:d8:e9:
46:5c:de:8b:7f:18:92:6e:07:25:34:27:d3:47:a6:4f:6f:54:
60:06:96:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:26 2025 by rpki-client