Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier: uEaztXgLHYBub9roV4dVTVqOb6jAARJtjAP11K38ie0=
Subject key identifier: 51:A7:C9:08:7E:C3:5B:B5:15:35:D6:F4:4A:9A:B2:34:CE:F6:F9:8F
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: 019A7112FF87C245C3B001A9D3AFCCE65DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number: 0DEE
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: VCfLX7af+5VBNe6fug0s98PZtmWKykEVD0arjUndm58=)
2: Cg7qlLFT5Tw2Rj89YI6LNGMAVC8.roa (hash: RUt6pQHc+8RuyWicYb+I1y3SWfel5InfTPhk0ybD+Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ff:87:c2:45:c3:b0:01:a9:d3:af:cc:e6:5d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=51a7c9087ec35bb51535d6f44a9ab234cef6f98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:ac:fa:52:df:c2:ac:ff:a2:53:73:68:c2:
1d:41:6f:c3:da:05:df:16:4b:1e:2b:2e:4f:5a:71:
5c:fe:1a:c5:c6:5a:35:ed:ef:72:af:78:02:ff:7c:
35:6a:96:49:36:ff:d0:5b:48:a8:40:02:bf:b2:e9:
3f:c9:9d:8f:ae:6c:01:8c:35:7a:b1:52:6f:e7:2c:
5c:b2:c5:e0:a5:19:51:94:3c:10:fb:20:5d:b0:de:
07:9c:8f:d0:97:a5:93:b4:34:13:0a:a8:a1:68:a6:
13:73:6d:42:c5:3b:21:eb:2b:38:1e:ef:d7:37:f8:
8d:1a:f9:00:a3:1d:cd:12:20:f1:e8:ae:67:ef:88:
81:70:fd:fe:fd:53:25:d8:48:1c:f7:2c:7b:2c:6f:
9c:b2:84:10:d3:63:8d:57:30:f0:cb:55:9c:69:bb:
89:40:ab:2d:11:f1:25:7a:75:73:fb:5b:78:10:45:
bc:8d:da:bb:d6:91:c7:9e:74:f4:60:ee:00:1e:f7:
aa:1f:bd:64:8c:68:9a:32:05:1f:0f:38:d1:d2:e3:
7d:58:e7:57:c1:de:40:71:a3:49:e8:3e:86:8b:c0:
30:d7:19:7b:e9:6e:ae:fe:b3:20:0d:e5:94:22:42:
24:c0:8b:f9:b2:2e:96:47:55:58:af:7d:af:ba:7f:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A7:C9:08:7E:C3:5B:B5:15:35:D6:F4:4A:9A:B2:34:CE:F6:F9:8F
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:02:ac:65:fb:d4:12:60:0c:75:2d:ba:dd:a8:3a:2e:25:a6:
42:a9:43:0a:c2:ae:c4:9a:ef:7f:ab:76:df:4f:48:90:63:25:
e3:f5:8b:dd:e9:ce:23:96:2d:b8:d0:75:59:76:ac:c4:47:4f:
b8:ec:80:07:cb:e9:50:fa:37:4b:ad:1d:99:7a:42:0f:c6:45:
3e:1d:a3:4a:95:95:49:05:f8:0c:63:d8:e8:1d:d0:7a:28:cd:
04:05:1d:b2:f2:3b:f7:a6:95:d6:f0:e8:33:91:aa:ce:fa:cd:
52:aa:c9:d8:69:5a:6b:a7:10:48:4d:21:72:2a:3a:9f:1c:42:
a5:b9:ca:b0:58:32:73:65:a5:20:f0:63:28:91:33:64:d3:89:
e4:75:36:1f:91:08:97:fa:78:93:b2:99:bc:6e:2b:ed:4b:70:
46:ea:92:ae:34:a2:1a:8d:2b:1f:9b:cc:f9:45:82:ef:50:66:
16:99:88:d7:74:de:2d:3a:9c:6a:1e:f8:64:4d:7e:78:41:5a:
6b:f0:82:19:fc:62:df:91:e2:73:01:36:7c:54:6c:7c:d5:f8:
70:02:1a:62:de:3b:03:27:b6:41:c9:d4:d8:35:0f:c4:9a:11:
55:e7:82:c5:38:74:df:c8:fb:8e:6c:dc:ed:e1:6d:be:62:f4:
45:7e:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:45 2025 by rpki-client