Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: NeiNsdyGKbovz4t44bgDj8BSpiiXp1CdR3BEOQAe4KE=
Subject key identifier: D0:AD:2A:9C:77:76:C6:A5:C9:FD:F7:0F:75:30:5A:B2:A7:C6:68:98
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 019A50072975DBE732B4F5FEAC59A7D59B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 0FB2
Signing time: Tue 04 Nov 2025 18:00:37 +0000
Manifest this update: Tue 04 Nov 2025 18:00:37 +0000
Manifest next update: Wed 05 Nov 2025 18:00:37 +0000
Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: Nx9owZeinAvIjO0YRqZD+hTqzPhXGTFDffoJYAGOpjQ=)
2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:29:75:db:e7:32:b4:f5:fe:ac:59:a7:d5:9b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Nov 4 18:00:37 2025 GMT
Not After : Nov 5 18:00:37 2025 GMT
Subject: CN=d0ad2a9c7776c6a5c9fdf70f75305ab2a7c66898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:db:a9:e1:73:5f:2a:0d:48:25:19:7b:18:
31:c1:24:d7:d3:66:e8:df:46:2e:55:64:a6:ad:a5:
a5:a2:de:c7:21:14:9e:39:df:82:ea:2f:a6:17:2c:
0f:23:e5:bc:89:ac:42:3e:b5:37:0e:4b:04:04:6b:
ad:89:d4:ff:32:52:df:2e:6e:23:c7:af:4b:db:c4:
2d:2d:8f:d2:77:81:d4:24:99:bc:2b:9e:c2:4d:e9:
ca:46:bf:6b:82:0f:18:f5:cc:5a:31:fe:59:b3:71:
35:9b:87:62:1c:3b:aa:e3:76:79:b1:88:6d:31:9b:
06:16:5b:05:10:d9:b4:b4:1f:5f:7f:94:04:ee:82:
b5:56:e2:dd:f7:1d:7a:80:02:7a:2d:d6:dd:7d:4a:
8f:24:2a:12:bd:70:74:0c:b5:e6:dd:2d:cd:53:c5:
e2:4e:79:18:4f:3c:3c:b6:5d:68:bc:57:11:f3:cf:
4d:c9:2e:4b:8c:f4:05:57:c3:3b:ee:85:38:f8:87:
4e:99:32:c8:68:c8:f7:74:3d:a9:fb:ac:8a:f0:83:
34:11:2a:48:79:1a:b0:d0:e4:6e:2b:3e:1c:72:19:
06:25:a3:b4:78:83:d3:46:3b:db:8d:45:54:08:22:
52:c0:74:08:e0:33:32:1d:d4:a5:29:c7:a5:5e:03:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AD:2A:9C:77:76:C6:A5:C9:FD:F7:0F:75:30:5A:B2:A7:C6:68:98
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e1:46:75:a0:9b:ad:ff:11:7c:2d:35:c1:1c:da:db:96:39:
ec:6d:35:98:43:30:87:ba:42:06:74:b7:c0:26:27:9a:e6:9d:
b3:4b:a6:13:33:15:36:26:49:38:11:63:53:f4:1e:43:a9:df:
cc:8f:c7:0b:94:2d:4c:28:77:78:67:ef:b2:5a:44:1f:62:86:
de:c3:d9:a2:f4:7c:d2:64:11:6e:b3:b7:c4:81:fe:3a:d0:29:
0d:77:12:0b:d9:8e:74:a4:74:a5:0d:9f:b9:19:ea:da:e8:f3:
30:fb:3a:5a:76:03:12:e1:dc:54:88:85:e2:f3:12:ce:d6:bd:
ed:60:a1:ee:71:4b:d0:60:25:bd:d0:78:f3:0d:17:b5:52:d2:
ac:ee:7c:00:93:0d:3d:b9:9e:9a:18:bf:23:d2:f9:25:66:ca:
18:3f:95:29:62:60:83:1e:d1:a3:12:48:88:97:d6:68:7b:30:
f3:3c:8e:c5:c8:fa:a3:5d:1c:96:47:4e:ff:42:90:e2:59:fa:
2f:61:96:f8:8a:b1:af:9c:f7:0e:08:f7:34:1e:1e:ac:2c:35:
a7:27:52:77:23:c4:1a:aa:ab:b4:ae:ad:48:21:1d:59:a8:aa:
18:e5:0d:e2:49:7d:94:7b:f8:71:dc:10:c0:cb:8d:16:ff:ea:
06:0c:be:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:02 2025 by rpki-client