Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: AHl2h3bD/0zPJvo0M4Udl1NkclDjNLdKQPQoFEhnHCI=
Subject key identifier: 1C:71:73:5C:A8:1E:7E:5E:72:FB:89:2A:B3:95:E4:66:7C:8B:F8:38
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 019A4FD06CA671D46A6913E8A98A8DC19FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 17:00:50 +0000
Manifest this update: Tue 04 Nov 2025 17:00:50 +0000
Manifest next update: Wed 05 Nov 2025 17:00:50 +0000
Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=)
2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=)
3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: QUXzCQTB3pTky1FnXZMm2JaitcsNynHSqxWDmr7gcU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:6c:a6:71:d4:6a:69:13:e8:a9:8a:8d:c1:9f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Nov 4 17:00:50 2025 GMT
Not After : Nov 5 17:00:50 2025 GMT
Subject: CN=1c71735ca81e7e5e72fb892ab395e4667c8bf838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:8f:64:14:64:72:eb:10:ac:17:5c:16:84:
3e:1c:3d:27:c7:7a:db:1a:fe:9c:61:13:bd:c0:f2:
94:12:37:1c:ee:5f:eb:05:b1:78:3f:be:ed:c3:a4:
c7:bf:28:48:2b:42:cc:10:2f:78:7e:e0:f2:33:2f:
f9:c3:8d:44:1f:a7:35:15:3e:05:d1:d0:e9:0a:f9:
3e:5f:ab:97:62:ba:16:93:e8:fb:11:cb:48:0e:d6:
5b:e5:8b:6c:5a:b2:0e:42:27:ed:fb:a9:85:b6:1c:
e7:c9:6c:b7:da:43:5f:71:27:c8:8e:7e:fd:82:8e:
56:ab:a3:02:54:7b:92:8f:28:d6:cf:2e:f2:69:3f:
8e:50:b6:4f:58:9a:5c:e5:cc:88:5d:a9:0c:a1:d3:
33:f6:5c:34:4e:cc:43:0c:a4:3b:54:85:23:99:91:
e3:82:73:f4:cb:33:5d:b7:4f:42:99:a4:14:7d:d4:
77:77:69:28:c3:1d:f1:e1:7b:3b:85:e6:36:9c:66:
7c:33:99:55:b0:0d:53:ad:06:35:2a:b8:6c:6f:f0:
a7:de:1f:c0:53:c9:18:a3:7f:5d:e6:c6:84:84:ab:
b5:fc:d1:46:0c:3e:8d:4f:1d:85:82:59:89:08:59:
da:88:8f:9c:29:b8:a9:bf:69:13:4d:3c:ff:ac:d2:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:71:73:5C:A8:1E:7E:5E:72:FB:89:2A:B3:95:E4:66:7C:8B:F8:38
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:59:38:37:f8:4e:3d:78:ca:53:60:87:79:2e:c5:dc:d8:39:
84:42:e5:39:06:24:3e:fd:31:0b:b5:9f:66:18:f5:56:0f:29:
c7:5a:b5:5d:73:39:63:73:cf:6d:43:4d:bd:16:fb:64:9a:de:
9c:d1:48:14:3c:71:57:da:0a:e2:b4:8e:40:00:0c:25:0d:65:
11:74:4b:d3:f7:e2:0a:54:fb:14:39:89:30:6f:53:7c:3c:3a:
7a:3d:94:5d:fc:34:7f:2b:a9:76:05:32:c7:07:a0:23:6c:8d:
74:73:81:cf:10:6e:28:f3:ba:79:e3:c6:77:28:ab:b8:9c:22:
28:f7:2e:52:0f:d8:ab:b3:fc:9a:ed:2d:c1:f7:87:a0:08:b3:
c6:de:7f:d4:0c:a0:a2:5c:4b:ba:0b:24:f8:09:91:f2:4c:58:
a6:8e:c2:72:e4:7f:d8:e8:43:2c:5d:e2:51:c9:08:3f:78:c7:
55:47:86:c1:ad:d4:61:d0:68:82:97:06:76:83:40:2c:68:86:
eb:e6:89:29:82:ca:78:2e:cf:9a:81:20:1c:1d:a2:3b:6b:f6:
ca:e3:74:12:c4:f8:a8:d1:1d:8d:d9:65:3a:0a:ff:7b:73:0e:
7a:d3:d9:3f:bf:cf:21:ba:1d:ff:c4:0b:d1:4c:67:71:0c:32:
4a:2a:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:11 2025 by rpki-client