Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: x6/Ia1xMVbrqRDK+dY8UmYfE3H0EgIUDYrqQ1ftpM/A=
Subject key identifier: 02:0B:03:82:0D:7C:04:B1:AF:C5:17:45:3B:1D:4F:25:1F:6D:74:B5
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019A4E86AFDD376539296C4BAEBB88578E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 11:00:40 +0000
Manifest this update: Tue 04 Nov 2025 11:00:40 +0000
Manifest next update: Wed 05 Nov 2025 11:00:40 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: vP9nee/8xM4pw685xAibSOljOKlpIRGEKbRTq3hLYZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:af:dd:37:65:39:29:6c:4b:ae:bb:88:57:8e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Nov 4 11:00:40 2025 GMT
Not After : Nov 5 11:00:40 2025 GMT
Subject: CN=020b03820d7c04b1afc517453b1d4f251f6d74b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:56:14:fd:09:1a:2a:65:02:68:1c:6e:04:54:
1a:9a:fd:ed:c0:01:21:01:53:1f:ed:7a:16:ee:f0:
26:c6:32:2b:b6:96:c3:61:cc:6d:60:15:c2:bc:65:
60:f8:8b:af:a1:09:20:3e:6a:9e:ec:0f:5c:c0:a1:
4c:cc:e5:aa:3e:5e:dc:ee:79:23:14:e1:f8:53:05:
52:55:cb:fd:c6:7d:ac:09:a2:a4:2b:28:6a:7f:0a:
21:3d:28:fb:f5:d4:38:80:90:9a:d1:61:95:5f:11:
59:3d:2f:32:f9:37:b1:48:29:59:34:9c:0d:24:47:
5f:72:4d:af:5b:52:d1:68:ea:ec:58:0d:da:4f:50:
a4:d3:c8:6f:37:ed:96:f0:59:ca:3b:da:f9:f3:1d:
51:82:ca:29:ce:d7:65:7d:c7:4a:55:94:8e:f1:5c:
36:7c:cb:56:82:a2:0f:b1:cb:69:78:09:dd:82:8b:
ad:9c:04:21:4f:e1:11:b9:71:f7:06:20:70:2a:bd:
0d:c9:fe:a1:c9:c1:e4:21:13:60:5f:9b:63:d5:35:
ef:dc:13:8b:02:b7:a7:47:f2:7e:c0:77:5a:0a:7d:
e0:b7:2c:bf:b5:9e:3e:d2:f4:0b:fd:e7:1d:81:9f:
24:b6:83:b0:71:6d:5a:2c:1a:88:c4:fc:bc:f7:2f:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0B:03:82:0D:7C:04:B1:AF:C5:17:45:3B:1D:4F:25:1F:6D:74:B5
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a9:be:aa:32:51:7c:e7:95:5e:6f:b5:98:57:90:f2:2f:16:
9f:ff:86:6e:d5:da:3a:36:ec:1d:c2:4f:d2:b9:c2:0e:bc:a5:
c0:3d:08:f9:1f:29:c8:24:26:6b:9e:bb:ad:d2:b2:59:45:b4:
6e:df:85:c2:60:46:ae:a3:1f:da:c1:cf:b1:29:3a:80:fe:e8:
95:64:bc:88:19:45:4f:ce:b6:de:f8:ce:43:15:3d:a2:ac:28:
d2:65:dc:fd:8f:4c:c6:b3:ff:df:df:1b:be:13:7d:1a:06:eb:
8c:0a:24:73:b2:13:1a:20:4b:cb:46:60:f3:17:58:e8:db:bc:
ad:ee:de:c0:d7:e2:eb:76:11:c5:a3:4f:51:c7:b9:c1:cd:b1:
52:8b:ba:fe:cf:ae:7f:74:ca:85:17:e2:4e:62:4a:98:db:9c:
3b:71:2f:53:9b:c1:10:17:ec:94:35:bf:b5:bd:e9:9f:b5:fe:
21:6d:86:35:48:d0:a0:99:71:78:ae:6e:1f:ff:94:ca:8e:e1:
ff:28:68:b4:5d:13:cb:ec:f6:66:f9:5f:f7:af:ef:30:60:98:
08:bd:2b:75:6f:9d:47:a8:ff:ff:6a:16:06:72:6d:f0:18:e5:
0a:d4:c3:20:03:a3:dc:00:b1:a0:b2:4a:70:2b:45:c7:9c:b7:
a9:1c:df:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:23 2025 by rpki-client