Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: lqOq2MgbpJnhy615IRlVEFNLqXT6IdeiHeZPXYZWqfI=
Subject key identifier: 39:B7:0E:AF:92:CC:7E:04:DC:A5:FB:5F:BD:C7:8C:E5:F6:57:37:91
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019A4E4FB3B484666D803437729D3FB323FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:37 +0000
Manifest this update: Tue 04 Nov 2025 10:00:37 +0000
Manifest next update: Wed 05 Nov 2025 10:00:37 +0000
Files and hashes: 1: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: G8sjzvTpNNkYNasD114WarfCpRyUD3FIeuiZXwB57Lc=)
2: t9qHq5xTtnN-jj4rqq-G8Agb4fE.roa (hash: t+hLra7ztXXuOYQYYQngzFN6esJ5Nassa730bMic3dU=)
3: uTGLgPD6QvOCsekDnlHL4ncaOpM.roa (hash: amUxlnkzcEAg12/Le7UVBWilU/CN2faVU7QTKwaX4yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b3:b4:84:66:6d:80:34:37:72:9d:3f:b3:23:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Nov 4 10:00:37 2025 GMT
Not After : Nov 5 10:00:37 2025 GMT
Subject: CN=39b70eaf92cc7e04dca5fb5fbdc78ce5f6573791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:1b:68:67:96:f0:55:64:28:de:09:d6:f4:
ab:7c:b4:0d:27:56:91:70:e3:a7:65:3e:be:80:1c:
ca:66:9d:ea:71:f0:90:51:52:6b:bb:ae:66:8e:7f:
9b:70:5f:91:d6:9a:7c:06:81:d3:1b:f9:53:bd:4d:
7e:02:e2:a1:eb:47:3f:92:f7:78:e8:f5:8b:f0:81:
59:b4:38:8c:92:b1:04:39:96:ef:e2:3b:3e:aa:63:
ad:e0:cd:eb:e9:94:9b:63:42:c4:31:e5:80:33:78:
a9:6f:10:23:e9:8a:de:74:00:62:d5:d9:24:bc:a7:
c6:3d:af:21:aa:ab:6e:4e:ba:1f:17:fb:02:d8:7c:
71:59:e2:a8:89:7d:e7:62:18:39:e2:16:23:2b:8b:
ef:2a:5f:68:ed:11:f5:ff:1b:ef:db:dd:e8:9f:91:
77:01:29:10:12:dc:75:a2:c4:43:aa:06:aa:b8:07:
ff:42:f7:c9:80:71:f4:6b:b0:9d:1b:b0:60:5c:3b:
4f:f6:6a:0b:df:91:0d:a9:18:26:2c:02:da:e0:f1:
fc:4a:7e:a2:97:0c:ee:50:b5:78:d9:f7:e9:89:66:
1f:30:0f:6b:9a:5b:38:3e:3b:0b:79:3c:d8:93:9f:
8d:09:79:c5:74:dd:cf:bc:5b:3c:38:62:14:58:5f:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B7:0E:AF:92:CC:7E:04:DC:A5:FB:5F:BD:C7:8C:E5:F6:57:37:91
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:56:24:f7:39:78:54:65:ff:d0:3a:8e:ec:dc:fe:d5:af:4f:
8c:01:66:58:c7:aa:dd:e9:68:bf:67:53:a1:ce:72:cc:50:bc:
28:ff:73:d9:e9:8f:64:89:31:73:f5:c6:2d:9c:49:ba:d4:86:
b7:1b:d9:86:db:57:d5:c4:f2:5e:1c:29:5c:fd:f8:8b:af:f7:
13:77:2a:a7:8b:5e:f6:34:c1:5d:ed:b4:62:3a:bf:05:2a:99:
31:93:73:d3:36:39:a1:27:81:4c:65:d3:d1:99:67:a2:b3:0e:
39:01:13:e0:6a:a3:72:b6:25:3e:40:f9:fd:ec:48:0a:85:44:
00:01:f4:18:9b:8b:62:42:fe:f8:22:34:89:81:55:5d:2f:10:
20:77:8f:1a:13:cb:66:21:88:3f:f1:62:8f:d9:71:4a:aa:e2:
31:a0:89:c1:45:e9:aa:c0:0e:de:ff:6d:75:33:2a:5a:2e:6a:
68:f2:ec:a7:80:f1:56:86:13:95:9b:06:93:71:3a:c8:d9:3a:
4a:af:fa:66:cc:0d:22:4d:45:25:47:97:c9:d5:ad:12:ac:9f:
0b:4c:07:f6:f4:67:8e:f8:3b:13:a3:c9:1b:fe:34:d5:72:62:
a4:1b:f4:6f:52:d8:96:89:aa:d7:bd:15:c3:a2:f7:f7:6f:b5:
cd:db:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:47 2025 by rpki-client