Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
File: Otu0daQwTIRTQ_2U_ummuIAI44s.mft (raw, json)
Hash identifier: CmA+CUrdHOKwvTnQQnC06rQBotExed3DlE3T9KmGYmA=
Subject key identifier: 35:5E:32:54:A5:F7:60:5D:12:0F:02:1B:BD:9B:15:A0:7C:58:E5:E8
Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
Certificate issuer: /CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Certificate serial: 019A522CB68178EE4FA5F8A3DD35455BF01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
Manifest number: D5
Signing time: Wed 05 Nov 2025 04:00:53 +0000
Manifest this update: Wed 05 Nov 2025 04:00:53 +0000
Manifest next update: Thu 06 Nov 2025 04:00:53 +0000
Files and hashes: 1: DVUSZ4Wn0WYyKumEhUgsl46ROFc.roa (hash: XFlMm/wUVW8+vc0BV0GxtZswisL8d+xkAL7tq7JpJlQ=)
2: Otu0daQwTIRTQ_2U_ummuIAI44s.crl (hash: hMctuRbZETX+Xg1fRMmteY+K3mejpImPu0Ru8r987OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:b6:81:78:ee:4f:a5:f8:a3:dd:35:45:5b:f0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Validity
Not Before: Nov 5 04:00:53 2025 GMT
Not After : Nov 6 04:00:53 2025 GMT
Subject: CN=355e3254a5f7605d120f021bbd9b15a07c58e5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:ff:0c:52:57:52:1f:7f:0b:6f:d5:c8:ff:
9a:0a:f2:3e:36:f3:29:89:bb:10:91:6a:b2:fb:75:
c3:3d:b0:39:76:c3:c4:c8:2b:61:65:9c:53:44:90:
67:5f:66:05:fc:fc:7f:fc:81:43:85:0b:cc:ef:46:
be:47:98:6d:07:b9:5d:15:5d:a8:e0:b2:b7:5b:9c:
7a:56:f8:73:7a:c4:8d:78:36:c5:f4:32:7c:3c:2a:
d1:ec:a8:5e:5b:21:90:b0:cf:d8:6a:4c:f0:e9:66:
35:3d:c8:f6:82:8d:5d:fd:1b:78:52:ba:3d:a8:13:
e2:09:e8:b9:ae:09:37:d8:15:b2:06:0b:19:e3:a6:
34:f5:19:56:ec:1b:18:93:b1:78:21:a7:b0:e0:e1:
71:08:04:b6:1a:0f:a0:64:c0:bf:22:ef:60:f9:4d:
00:e4:84:28:93:36:70:ae:c9:8b:f0:dd:ca:de:ca:
78:20:f6:6d:0a:70:70:80:94:5c:35:20:14:3b:93:
08:d7:dd:c0:b1:95:a4:96:d2:78:b2:4a:99:d0:1d:
af:c4:ed:37:a9:55:51:11:6e:60:ce:4e:dd:18:bb:
b2:ed:8e:c6:fd:99:ad:6c:ac:cb:6e:56:48:59:b4:
a5:05:cb:ad:da:56:16:0f:63:63:22:02:fd:c4:0b:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5E:32:54:A5:F7:60:5D:12:0F:02:1B:BD:9B:15:A0:7C:58:E5:E8
X509v3 Authority Key Identifier:
keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5c:cc:63:06:ff:e9:d4:b9:02:c0:10:81:ec:43:b1:4f:24:
fb:87:18:b5:cb:27:4c:03:df:71:60:66:e6:1b:d4:ef:c7:3f:
38:48:da:08:1a:d1:e4:23:f7:70:4f:9c:84:6f:b2:d7:37:18:
2d:fc:92:3b:8c:c9:2a:12:8e:73:93:19:74:41:b4:4e:9c:de:
58:bf:af:25:c7:8d:0b:31:51:0f:32:bb:dd:23:be:8f:fb:00:
8b:1a:b0:51:be:fd:89:cc:66:03:08:77:a6:15:37:23:82:2c:
01:a4:78:15:25:6e:29:2a:a4:f2:a5:2c:e8:56:87:1f:a8:cf:
ea:8d:8f:e2:79:da:19:e6:ec:d9:f7:73:60:2e:d0:a1:5a:37:
d1:15:32:ad:63:b4:b0:50:c3:c7:2b:63:50:1c:bd:d7:a9:5f:
b8:a1:ba:a3:0d:42:bf:d5:a5:aa:17:0a:96:dd:00:93:69:0a:
4c:27:64:06:33:bd:08:ee:e1:05:46:02:63:24:72:bd:74:ed:
94:d7:a2:95:1b:85:65:af:38:68:ed:21:d3:eb:0c:b6:63:55:
e5:6b:33:4f:4a:88:b5:8a:ad:49:be:d6:5c:71:1a:af:cd:5d:
8f:39:a2:50:ec:d8:94:59:6c:2c:34:c9:b6:75:c6:e4:3d:d7:
a9:16:bc:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLLaBeO5Ppfij3TVFW/AaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGJiNDc1YTQzMDRjODQ1MzQzZmQ5NGZlZTlhNmI4ODAw
OGUzOGIwHhcNMjUxMTA1MDQwMDUzWhcNMjUxMTA2MDQwMDUzWjAzMTEwLwYDVQQD
EygzNTVlMzI1NGE1Zjc2MDVkMTIwZjAyMWJiZDliMTVhMDdjNThlNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w7/DFJXUh9/C2/VyP+aCvI+NvMp
ibsQkWqy+3XDPbA5dsPEyCthZZxTRJBnX2YF/Px//IFDhQvM70a+R5htB7ldFV2o
4LK3W5x6VvhzesSNeDbF9DJ8PCrR7KheWyGQsM/Yakzw6WY1Pcj2go1d/Rt4Uro9
qBPiCei5rgk32BWyBgsZ46Y09RlW7BsYk7F4Iaew4OFxCAS2Gg+gZMC/Iu9g+U0A
5IQokzZwrsmL8N3K3sp4IPZtCnBwgJRcNSAUO5MI193AsZWkltJ4skqZ0B2vxO03
qVVREW5gzk7dGLuy7Y7G/ZmtbKzLblZIWbSlBcut2lYWD2NjIgL9xAvw2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVeMlSl92BdEg8CG72bFaB8WOXoMB8GA1UdIwQY
MBaAFDrbtHWkMEyEU0P9lP7ppriACOOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5MjctZDY1Ni00YjkxLWE5OTAt
MGNlMDQ5NmE5OTdiLzEvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMjY5MjctZDY1Ni00YjkxLWE5OTAtMGNlMDQ5NmE5OTdi
LzEvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlzMYwb/
6dS5AsAQgexDsU8k+4cYtcsnTAPfcWBm5hvU78c/OEjaCBrR5CP3cE+chG+y1zcY
LfySO4zJKhKOc5MZdEG0TpzeWL+vJceNCzFRDzK73SO+j/sAixqwUb79icxmAwh3
phU3I4IsAaR4FSVuKSqk8qUs6FaHH6jP6o2P4nnaGebs2fdzYC7QoVo30RUyrWO0
sFDDxytjUBy916lfuKG6ow1Cv9WlqhcKlt0Ak2kKTCdkBjO9CO7hBUYCYyRyvXTt
lNeilRuFZa84aO0h0+sMtmNV5WszT0qItYqtSb7WXHEar81djzmiUOzYlFlsLDTJ
tnXG5D3XqRa8kg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:43 2025 by rpki-client