Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: 5y2zKN8qYfZCnZIGSCkQ/7tXJfdVnxM7egS3hFRzH38=
Subject key identifier: B2:C6:A2:F1:76:12:62:46:F8:3B:AF:A2:EF:76:9F:D1:8E:49:CA:FC
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 019A71809D50454240B89721A4262D0DF0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 06DC
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: JAyFEi0BQ4Suki7owM9DMXfdtad2CJ3yjaUpKNlPj+8=)
2: kqIK4ViX12p6eIuBG0T4dHMIIHI.roa (hash: PaO/dVKACGH2GQrFFW5fxxz+R4Obi2vhR9vhB2cSwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9d:50:45:42:40:b8:97:21:a4:26:2d:0d:f0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=b2c6a2f176126246f83bafa2ef769fd18e49cafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:ba:50:cb:b3:a2:84:49:9f:8f:a2:e9:cc:
e6:e0:d1:49:9d:c9:8c:b0:99:42:1e:f6:4c:87:90:
2d:1c:19:aa:40:de:c2:c0:61:5e:48:26:bb:49:fb:
eb:af:7d:85:4c:da:b6:8c:d8:7a:75:d7:bf:f2:4e:
27:6b:db:2e:30:1d:0f:c7:ce:22:06:78:aa:3b:84:
2d:f0:e4:14:8c:2f:39:ab:be:f7:62:33:d0:eb:48:
14:a3:09:6f:43:19:33:b8:59:fb:e3:af:e8:f8:14:
82:e2:95:af:02:b4:9e:4b:cd:17:9d:d5:a3:5a:67:
0d:83:28:8e:7d:bb:e8:6b:94:0d:b3:1d:84:0a:14:
76:c4:fa:b3:9b:27:12:9c:f9:a9:dd:84:c8:3e:54:
15:ac:78:61:99:16:9a:c2:8e:f6:d2:d9:e4:86:66:
12:47:58:7d:b6:d6:b4:ed:d5:87:5a:0b:e6:4b:12:
e5:cc:09:6b:e6:fc:15:61:dc:06:9e:67:49:31:70:
6e:a9:87:aa:21:37:95:b7:18:03:82:fb:34:25:c4:
64:55:40:0d:8d:1e:53:a9:e4:66:fe:04:75:2c:81:
35:02:0b:35:46:f8:b6:93:25:b7:48:77:d2:d0:49:
40:d3:1f:db:3c:ab:04:1d:7c:cf:27:fe:0b:18:a1:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C6:A2:F1:76:12:62:46:F8:3B:AF:A2:EF:76:9F:D1:8E:49:CA:FC
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b8:2d:48:a5:e3:0a:b5:a5:27:db:74:2a:67:ad:3c:99:81:
cb:ef:82:00:30:81:94:61:fd:1c:bc:7b:39:1c:63:a9:46:86:
46:16:94:11:d6:2a:24:90:f4:06:ac:36:f6:17:f3:fa:f3:3f:
b4:ca:b1:bd:34:d1:bc:4c:c0:38:42:83:d6:92:14:03:d4:a2:
eb:5f:82:8c:c3:75:aa:da:4f:ff:19:af:62:44:d6:65:00:46:
3e:9d:a5:58:ab:eb:7f:71:03:d4:f4:e7:42:e6:1f:a2:17:24:
7a:c7:55:ed:8f:aa:e5:64:72:8e:56:c9:43:b0:01:90:dd:d6:
ee:24:2d:a5:ab:06:e8:54:d0:c7:3c:72:51:10:46:50:c2:07:
18:d3:63:27:f7:1f:c0:83:58:ad:1c:48:34:9c:20:8b:2e:91:
f4:72:fa:1d:58:a8:90:a7:35:a8:a9:21:ed:7c:2d:c7:df:38:
0a:38:90:a2:ae:7f:8b:4c:b5:23:bb:fc:ca:88:c2:19:2b:57:
40:84:9e:40:e8:f6:8e:04:f5:97:22:e2:c2:eb:02:89:14:7d:
e3:94:3f:5c:77:a7:60:30:78:5e:33:be:88:d5:7f:17:f1:ff:
a1:c2:9a:be:7a:24:d8:17:bc:37:62:65:00:fe:f3:93:d8:c4:
eb:46:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:49 2025 by rpki-client