Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: rFnH9FCDOnwYGGjHrEHwWMhgaTf+FixQtQMOvxH/mcY=
Subject key identifier: D5:09:5D:5A:5F:E5:5E:CE:F1:0C:8A:C2:7F:67:FA:1D:87:A1:08:AD
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019A5564A0BBE620D87E7116F9D84BD6833F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 0552
Signing time: Wed 05 Nov 2025 19:00:49 +0000
Manifest this update: Wed 05 Nov 2025 19:00:49 +0000
Manifest next update: Thu 06 Nov 2025 19:00:49 +0000
Files and hashes: 1: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (hash: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: ZJlA2hle1ObnUDKaJOzC+mponQIuUBX/9TsJJHdg05g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:a0:bb:e6:20:d8:7e:71:16:f9:d8:4b:d6:83:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Nov 5 19:00:49 2025 GMT
Not After : Nov 6 19:00:49 2025 GMT
Subject: CN=d5095d5a5fe55ecef10c8ac27f67fa1d87a108ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d1:06:5e:d2:d4:d3:4a:8e:bb:3c:69:dd:25:
78:47:4e:38:d2:25:39:ac:eb:32:7e:76:d8:b4:30:
1a:cf:d9:3d:13:ea:7e:ff:3e:fa:8d:a2:3f:5c:31:
f8:df:5f:a0:6e:88:53:b1:7e:58:f5:df:15:f9:7d:
c0:76:6b:b7:9e:a1:f6:d0:ba:f3:c0:4c:41:30:3e:
d5:0a:c9:d2:d1:8f:3b:64:1f:97:8e:79:a9:7d:88:
2c:83:dd:36:94:c4:0b:62:86:c4:30:19:94:7f:b5:
58:81:13:2c:e7:a9:5b:43:f3:85:b7:74:cd:93:c9:
7d:d0:c2:21:f1:69:cf:91:2c:8e:80:23:e4:bd:18:
a7:88:02:0a:8b:f0:db:ea:de:a4:fa:0b:45:e1:32:
37:eb:08:10:51:bd:a4:59:5e:a4:e1:30:52:26:4d:
1d:3a:85:75:25:80:4b:05:9e:f9:dd:70:c7:14:4d:
52:84:43:bb:1f:04:b3:2b:93:38:f6:8d:3a:c9:29:
03:dd:49:32:8a:e9:f7:29:a3:55:1d:5d:78:81:83:
cc:a7:3a:5c:b9:f6:41:8d:e1:9b:9d:f0:09:bd:73:
78:33:7d:61:46:a5:38:cc:51:85:59:fb:36:61:6c:
0a:e4:48:e8:93:1f:ea:de:34:26:0a:59:c7:75:df:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:5D:5A:5F:E5:5E:CE:F1:0C:8A:C2:7F:67:FA:1D:87:A1:08:AD
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3c:cb:bf:ea:ef:92:2f:47:df:a9:94:68:f1:50:47:31:65:
89:8c:f6:db:dc:2f:d0:50:c8:f2:81:e6:eb:32:3d:0c:12:84:
2c:42:c8:01:0b:36:e2:73:f4:ce:14:9a:c4:b2:0f:bf:0d:2c:
27:a1:60:74:dd:70:de:5e:34:f2:5c:c6:57:20:20:9a:33:9a:
de:81:89:76:45:72:17:99:53:52:1a:93:13:05:f0:60:16:02:
51:9f:c6:9a:29:aa:25:0e:46:55:ba:cf:4d:14:7d:38:9c:d5:
36:01:ea:9f:ea:c3:85:80:e5:58:6b:88:3c:45:cf:a6:b3:b6:
0f:53:ae:2e:d2:1c:d7:7a:ad:ba:9c:a0:30:d1:33:8a:7a:2b:
f8:e9:aa:fd:34:43:88:24:0d:61:6c:60:eb:9c:05:2f:b7:4c:
df:e3:8a:59:4c:a1:40:a7:0c:c3:30:54:b7:31:15:bc:23:de:
6d:a4:bb:88:cf:9b:ec:6c:84:fc:fb:0c:2c:e7:07:48:2a:c1:
48:58:21:47:7a:9d:b2:e8:61:8f:c4:69:e3:1b:e2:0d:4d:c5:
c8:e0:e7:aa:bb:9f:e6:64:da:70:2f:4f:85:32:11:de:e0:73:
e2:8b:76:da:4a:2c:5e:f4:de:1e:23:a2:45:1a:e4:a0:03:96:
ae:85:10:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVZKC75iDYfnEW+dhL1oM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDVkN2M3YmU5MTI2NTBkNzE0MjNjZDNjMjUxNmRhOTQw
OWVkYjYwHhcNMjUxMTA1MTkwMDQ5WhcNMjUxMTA2MTkwMDQ5WjAzMTEwLwYDVQQD
EyhkNTA5NWQ1YTVmZTU1ZWNlZjEwYzhhYzI3ZjY3ZmExZDg3YTEwOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79EGXtLU00qOuzxp3SV4R0440iU5
rOsyfnbYtDAaz9k9E+p+/z76jaI/XDH431+gbohTsX5Y9d8V+X3Admu3nqH20Lrz
wExBMD7VCsnS0Y87ZB+XjnmpfYgsg902lMQLYobEMBmUf7VYgRMs56lbQ/OFt3TN
k8l90MIh8WnPkSyOgCPkvRiniAIKi/Db6t6k+gtF4TI36wgQUb2kWV6k4TBSJk0d
OoV1JYBLBZ753XDHFE1ShEO7HwSzK5M49o06ySkD3Ukyiun3KaNVHV14gYPMpzpc
ufZBjeGbnfAJvXN4M31hRqU4zFGFWfs2YWwK5Ejokx/q3jQmClnHdd9y5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUJXVpf5V7O8QyKwn9n+h2HoQitMB8GA1UdIwQY
MBaAFDrV18e+kSZQ1xQjzTwlFtqUCe22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYt
MWM2M2RhY2FiZGU5LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYtMWM2M2RhY2FiZGU5
LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDzLv+rv
ki9H36mUaPFQRzFliYz229wv0FDI8oHm6zI9DBKELELIAQs24nP0zhSaxLIPvw0s
J6FgdN1w3l408lzGVyAgmjOa3oGJdkVyF5lTUhqTEwXwYBYCUZ/GmimqJQ5GVbrP
TRR9OJzVNgHqn+rDhYDlWGuIPEXPprO2D1OuLtIc13qtupygMNEzinor+Omq/TRD
iCQNYWxg65wFL7dM3+OKWUyhQKcMwzBUtzEVvCPebaS7iM+b7GyE/PsMLOcHSCrB
SFghR3qdsuhhj8Rp4xviDU3FyODnqruf5mTacC9PhTIR3uBz4ot22kosXvTeHiOi
RRrkoAOWroUQzw==
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:50:48 2025 by rpki-client