Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: pIGDnGdJl9x8iREStDm96YqD2ritXL6xCT8V84ztDN8=
Subject key identifier: AB:D5:52:8D:0F:45:54:B8:C5:08:70:CD:BE:8B:58:EE:1B:49:CB:56
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 019A71B90D7EDAE0B9B8D1EB5119CC6DFA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 11C1
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: c7xqGqZ0KnoVgSHP1uxqIn-gcow.roa (hash: fgA4jW+G01sd+KIFTnm2o/eJLY8zge2zWEftjWqJRcE=)
2: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: xaiz9dg/CZE2VcC8Zu4m+0WQEcAu7zEWxQDsK+PaLf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0d:7e:da:e0:b9:b8:d1:eb:51:19:cc:6d:fa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=abd5528d0f4554b8c50870cdbe8b58ee1b49cb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:04:a3:e4:e6:17:46:a7:1e:6e:d7:d9:9f:
aa:1e:71:21:99:cd:6a:04:71:bd:6a:06:44:b2:57:
05:d4:c9:c9:49:df:a9:de:fe:d3:fe:40:65:19:f5:
37:8c:18:fe:6b:8f:8b:24:30:26:35:11:d4:79:67:
08:f9:86:70:58:5d:67:50:5a:19:de:14:3d:ee:3c:
f6:e3:ee:89:af:aa:59:e9:8b:f5:4c:91:68:1a:0d:
8b:0f:bb:b4:85:16:6e:c1:d6:0b:b4:6f:28:f8:51:
6f:8e:12:83:bc:90:7e:b6:b8:1e:68:e7:fc:3f:38:
77:50:57:24:48:35:68:c6:28:35:bc:b7:ca:8f:52:
9c:89:68:b2:7b:ed:07:55:93:61:5c:77:93:4b:f6:
59:73:75:3f:4c:29:b2:14:35:88:68:e9:57:a3:f6:
0b:16:14:a9:dd:41:31:6f:75:01:8b:eb:4b:6b:25:
30:12:23:10:8a:b7:66:60:b3:83:4c:43:99:29:3f:
92:54:6c:ed:70:e7:b9:e7:d6:5d:1f:e7:d2:0a:67:
31:a3:bb:ff:90:45:96:d6:4d:f3:b2:14:ce:8e:a9:
1e:49:fa:27:3c:19:d6:11:82:ba:8e:03:28:a4:9a:
5a:ad:1c:f1:a3:b0:37:b1:e4:53:3e:9f:92:0c:b1:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D5:52:8D:0F:45:54:B8:C5:08:70:CD:BE:8B:58:EE:1B:49:CB:56
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:30:ee:f4:1f:e6:74:a1:cc:21:79:42:71:ff:57:7a:8e:dd:
bd:83:72:e4:55:b7:42:15:0d:f9:fd:2a:24:c4:fa:f1:8d:43:
b7:b4:4d:34:11:9f:6b:ad:ed:b4:aa:f8:e8:5d:9f:5c:62:d9:
da:a7:c3:01:41:dc:f1:2c:75:14:5f:b5:98:ad:70:55:23:0a:
30:4a:30:c0:16:48:fc:a3:da:3e:ab:40:af:23:72:29:29:69:
6e:75:8f:aa:a2:98:55:2e:5f:bd:63:56:25:71:56:83:aa:71:
69:d7:41:bc:4c:13:cd:33:a2:2f:ff:e0:b3:6c:12:12:ed:35:
6d:83:55:a3:7b:f0:a1:58:e5:6c:44:86:4b:47:da:39:3d:85:
b4:f9:ad:91:ae:84:b9:c1:15:e4:1b:32:06:70:f0:09:20:91:
1f:e4:7c:bd:a8:17:fe:9e:2c:2e:0c:d2:8f:13:23:a5:16:16:
70:df:a5:c1:b5:07:d7:b4:58:2d:ac:a9:4b:5d:94:cc:15:4a:
03:21:3c:d3:62:98:e7:c1:42:ec:0f:ac:94:9b:f2:43:c0:69:
cc:08:d8:e1:b1:98:4a:af:b8:d4:c1:3a:0f:68:20:70:27:42:
5e:76:33:aa:60:97:6f:47:e0:c5:81:98:44:37:d2:f8:42:9a:
13:86:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:45 2025 by rpki-client