Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: SH9iCdBEf9xPAgIpXfHviv5ZKn9gABI2DK3eC/86Mms=
Subject key identifier: C4:69:66:AD:AC:EC:B4:59:E8:BF:B9:B1:80:59:0D:84:93:CA:DA:9B
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 019A5375B8FE85662E84227DBA687763891C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 16A3
Signing time: Wed 05 Nov 2025 10:00:15 +0000
Manifest this update: Wed 05 Nov 2025 10:00:15 +0000
Manifest next update: Thu 06 Nov 2025 10:00:15 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: HgBtKmwGPYkXSg38RlGibTPnH+Cu46e4kpx+4Kh+3kw=)
2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:b8:fe:85:66:2e:84:22:7d:ba:68:77:63:89:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Nov 5 10:00:15 2025 GMT
Not After : Nov 6 10:00:15 2025 GMT
Subject: CN=c46966adacecb459e8bfb9b180590d8493cada9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:83:0c:f2:16:f3:64:47:15:8e:8d:14:79:a7:
30:25:e9:56:a7:c5:2b:c4:05:14:09:6d:39:74:db:
dd:df:68:05:71:8d:8f:16:99:83:af:bf:90:8e:6c:
0d:43:57:d1:8b:a6:2a:cc:ac:fe:dd:c7:2a:2d:d0:
20:7b:8b:15:05:c3:75:4f:09:a5:81:97:81:40:75:
ed:e7:d9:1d:f5:c5:6a:cc:ef:8c:d0:23:ec:94:50:
f2:9a:59:9e:4d:e0:74:a7:76:29:bd:8d:20:de:8e:
70:54:89:96:0c:2e:12:ae:9e:71:a4:7d:21:df:1e:
bc:61:4e:32:ff:e6:3d:5c:2e:e3:13:4a:ab:c4:77:
e1:11:d2:03:3b:81:03:9b:40:5c:e9:a2:4b:c5:e6:
05:ed:e0:00:f8:43:e4:da:f6:e2:50:ac:ed:b3:42:
63:45:9b:cc:7d:12:7f:d1:f4:20:e2:8a:1b:60:47:
18:ff:97:3d:ce:63:aa:fb:21:ef:04:d9:1b:05:de:
52:22:ec:ea:4c:14:a3:24:0a:28:22:a3:95:76:ee:
d9:80:48:0e:b8:04:68:f6:c0:24:54:ad:c3:85:59:
6c:b2:3a:1d:97:1a:75:05:1f:e0:b6:1c:44:94:bb:
63:f1:3e:7f:57:de:92:7c:41:41:bf:e3:5a:1c:59:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:69:66:AD:AC:EC:B4:59:E8:BF:B9:B1:80:59:0D:84:93:CA:DA:9B
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2f:c1:d1:a8:1e:0e:09:9d:1f:a9:9f:87:0a:b4:48:3b:3d:
79:98:29:c8:ed:a6:82:96:7e:7c:f4:f1:40:04:02:e0:20:cf:
5f:15:1f:f6:61:9f:15:73:32:10:99:d9:8d:54:ac:a2:7b:37:
da:5f:b3:48:2a:88:44:51:15:09:b0:ea:22:aa:a3:62:c3:d7:
4b:d8:87:fb:7b:2c:29:66:5c:b2:94:23:61:e5:a8:4b:44:d8:
a0:19:c0:66:a9:95:dc:ce:f9:91:7b:81:ef:08:fb:11:0d:24:
a6:a5:6a:e8:76:36:2c:85:5c:ad:ea:4e:8b:b3:35:bb:b0:91:
56:fa:3c:a6:bb:7e:2d:67:45:aa:e6:6d:6c:d1:e4:61:60:a6:
cc:75:ce:fb:e5:88:fc:ef:b7:a7:af:85:61:da:3d:74:1b:46:
f4:b9:f5:ad:4e:bf:ab:49:fe:9c:fd:a3:59:aa:25:81:8b:31:
35:03:0a:08:39:ad:2e:9e:dc:27:7a:8c:2c:3a:7d:27:1a:1b:
ca:07:3a:3d:bd:75:72:37:42:28:a3:c9:b2:ff:b7:97:d8:f3:
7b:2c:2c:a6:40:d5:d4:d8:f4:ea:d5:a1:bd:23:91:18:4f:d9:
bd:8f:79:68:c4:ed:18:ad:23:67:99:75:40:b1:bf:78:5c:75:
ab:74:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:09:59 2025 by rpki-client