Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: zkQMHQ9Q04qLmbQN2WNlAe1o1hi165dqe4xqjiM9D/Q=
Subject key identifier: AB:1C:0E:BA:1C:95:22:CF:55:43:28:08:D6:1E:4D:23:DE:98:93:F8
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 019A4D3CE53BC5218F8556EB7EB4FC668D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 04D0
Signing time: Tue 04 Nov 2025 05:00:27 +0000
Manifest this update: Tue 04 Nov 2025 05:00:27 +0000
Manifest next update: Wed 05 Nov 2025 05:00:27 +0000
Files and hashes: 1: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: /xq4EvDQrMPiTQHd7+ReZHIa7Sp/odf198B+tBkTXuY=)
2: XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa (hash: MHnaHZdpDHAywK5Gif3w+d5y+x0GzsWCN2jIZcL+Afc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e5:3b:c5:21:8f:85:56:eb:7e:b4:fc:66:8d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Nov 4 05:00:27 2025 GMT
Not After : Nov 5 05:00:27 2025 GMT
Subject: CN=ab1c0eba1c9522cf55432808d61e4d23de9893f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:19:19:d3:83:b2:4f:6a:cd:47:9f:0a:27:
2a:58:c8:55:54:3f:61:8d:e6:5b:85:4f:e0:e4:72:
44:4e:ba:6c:32:10:cc:ea:fb:0a:10:b2:d2:8c:af:
18:50:7f:43:e3:18:72:46:d5:f2:52:d2:0b:d7:4d:
a9:57:61:31:d3:1e:5c:8b:20:ab:35:d3:1d:e1:37:
eb:51:d2:c9:0e:a6:9e:f9:d0:77:40:3c:d0:db:4a:
d3:39:e1:e5:cb:12:e9:b6:ca:d0:18:79:68:6c:b9:
28:e0:c3:16:56:65:bf:d4:4f:29:1f:a2:3e:9d:a2:
3e:b5:8c:f2:61:47:19:97:fb:88:2a:6a:53:8c:2a:
30:9e:c6:5d:80:01:8a:3c:e5:62:ad:63:a8:61:13:
0f:07:71:8c:7d:65:03:cf:5c:59:fd:1e:0c:a3:ef:
74:a0:10:f9:a0:f5:8a:53:90:24:c3:bc:39:57:84:
2d:22:f4:d0:6c:51:2d:33:39:85:00:67:bf:89:d5:
93:46:d8:08:22:51:7a:02:f3:cf:ae:4a:b6:50:26:
23:4e:47:b7:e7:6d:c2:f4:73:eb:09:2c:a7:0e:1d:
74:11:cf:1b:f0:8a:55:18:34:c1:33:97:b6:05:5d:
77:e7:89:1d:3a:eb:30:83:1d:40:30:db:86:3e:dd:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1C:0E:BA:1C:95:22:CF:55:43:28:08:D6:1E:4D:23:DE:98:93:F8
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6a:a9:02:03:3b:d9:23:29:aa:fa:25:a9:3a:c9:04:61:2c:
c8:21:46:cf:fc:92:1b:9b:6d:47:b7:48:b4:3f:e7:b0:fa:27:
35:9c:f5:7b:68:ce:22:7c:d3:21:5c:8c:ae:5a:e3:7e:b4:7d:
65:dc:d4:f6:53:6e:0c:fb:17:85:93:12:b9:5b:f5:21:6e:7e:
81:b3:e2:e6:05:7b:eb:26:94:e8:c5:7b:f8:78:15:9e:22:f9:
b3:80:dc:bd:db:cf:d8:9f:06:cf:05:36:3a:71:b2:bf:0d:f5:
82:1b:4f:6b:c6:1e:ce:04:41:74:85:0a:c3:3d:08:ef:de:32:
d4:c1:1f:4e:3d:11:1e:c1:8a:29:b3:c8:d4:ed:bf:96:15:cd:
f8:7b:a6:f5:bb:92:5e:a7:f9:76:76:2a:d2:ee:8c:0f:4d:cf:
01:44:cb:cf:25:53:ad:93:34:f2:6a:ef:36:97:a3:b2:27:2d:
0c:20:43:a9:d4:98:64:6f:85:51:8f:1a:8b:3d:1d:8e:3a:65:
25:a6:f9:3d:3d:66:64:2a:cc:79:89:0e:d7:40:ca:f5:3a:dc:
ec:30:1c:37:42:37:87:bb:94:1c:52:68:ce:0f:78:3d:83:39:
fe:c4:23:2e:3f:de:13:99:7f:d4:63:73:83:68:fc:73:68:bd:
71:a5:71:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPOU7xSGPhVbrfrT8Zo2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzczMDcwMDBiOTMzM2Y4ODAwMGEzNWJmM2I1YjhmZTM4
YzE2ZGUwHhcNMjUxMTA0MDUwMDI3WhcNMjUxMTA1MDUwMDI3WjAzMTEwLwYDVQQD
EyhhYjFjMGViYTFjOTUyMmNmNTU0MzI4MDhkNjFlNGQyM2RlOTg5M2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24QZGdODsk9qzUefCicqWMhVVD9h
jeZbhU/g5HJETrpsMhDM6vsKELLSjK8YUH9D4xhyRtXyUtIL102pV2Ex0x5ciyCr
NdMd4TfrUdLJDqae+dB3QDzQ20rTOeHlyxLptsrQGHlobLko4MMWVmW/1E8pH6I+
naI+tYzyYUcZl/uIKmpTjCownsZdgAGKPOVirWOoYRMPB3GMfWUDz1xZ/R4Mo+90
oBD5oPWKU5Akw7w5V4QtIvTQbFEtMzmFAGe/idWTRtgIIlF6AvPPrkq2UCYjTke3
523C9HPrCSynDh10Ec8b8IpVGDTBM5e2BV1354kdOuswgx1AMNuGPt2OGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKscDroclSLPVUMoCNYeTSPemJP4MB8GA1UdIwQY
MBaAFDk3MHAAuTM/iAAKNb87W4/jjBbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1Rjd2NBQzVNei1JQUFvMXZ6dGJqLU9NRnQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mYTJhZjAtYTdlOC00NjEwLTkwN2Mt
YzkzY2M0Nzc1ZDQ2LzEvT1Rjd2NBQzVNei1JQUFvMXZ6dGJqLU9NRnQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mYTJhZjAtYTdlOC00NjEwLTkwN2MtYzkzY2M0Nzc1ZDQ2
LzEvT1Rjd2NBQzVNei1JQUFvMXZ6dGJqLU9NRnQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGqpAgM7
2SMpqvolqTrJBGEsyCFGz/ySG5ttR7dItD/nsPonNZz1e2jOInzTIVyMrlrjfrR9
ZdzU9lNuDPsXhZMSuVv1IW5+gbPi5gV76yaU6MV7+HgVniL5s4DcvdvP2J8GzwU2
OnGyvw31ghtPa8YezgRBdIUKwz0I794y1MEfTj0RHsGKKbPI1O2/lhXN+Hum9buS
Xqf5dnYq0u6MD03PAUTLzyVTrZM08mrvNpejsictDCBDqdSYZG+FUY8aiz0djjpl
Jab5PT1mZCrMeYkO10DK9Trc7DAcN0I3h7uUHFJozg94PYM5/sQjLj/eE5l/1GNz
g2j8c2i9caVxZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:08 2025 by rpki-client