Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: medJKX2krOuY9rstQVxjkLs3qV/GL91r4rBHcEAEaRU=
Subject key identifier: 44:70:7B:C3:51:67:36:3D:F8:B9:9B:FE:98:86:1A:5E:BE:96:D1:7D
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019A2B8C800052CEBFE798395123E13A4F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 16:00:19 +0000
Manifest this update: Tue 28 Oct 2025 16:00:19 +0000
Manifest next update: Wed 29 Oct 2025 16:00:19 +0000
Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: qstIJDiSTrVh9RNbMBDs9tz9WKyaATdbiKhn8P08KvU=)
2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:80:00:52:ce:bf:e7:98:39:51:23:e1:3a:4f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Oct 28 16:00:19 2025 GMT
Not After : Oct 29 16:00:19 2025 GMT
Subject: CN=44707bc35167363df8b99bfe98861a5ebe96d17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:65:c6:66:90:c8:85:03:a5:37:51:69:41:6b:
13:ed:b1:32:af:af:cd:5c:d5:25:b6:a4:45:13:db:
fa:4d:bc:22:12:77:53:8d:6f:bc:14:7f:6e:68:9e:
a0:fb:e7:dc:b0:ec:cc:47:f8:69:ae:e0:fb:d7:89:
cf:2b:b3:38:f8:2d:3b:1f:09:1d:13:9c:77:57:66:
e0:0c:b7:bc:ed:e8:ec:32:5e:55:95:46:64:b2:7c:
8d:3f:22:c7:4f:5c:b8:f8:f5:18:76:e4:59:20:47:
73:73:5f:7a:2c:57:51:f0:8a:ec:f4:49:76:63:4a:
f5:df:29:d0:c7:0c:33:cc:5f:fa:51:eb:30:e4:29:
dc:9c:c2:69:4d:96:27:6b:9e:05:64:74:37:73:a4:
e7:8e:61:16:3b:37:71:d1:89:2f:c4:81:a2:a5:53:
5e:c4:7e:64:f3:9a:01:06:2e:b0:56:d3:1c:30:a4:
7b:81:d0:55:98:d7:7d:c1:db:ab:bc:0b:6f:4d:08:
a3:06:25:63:f8:0d:69:36:80:a6:cd:6a:a3:bb:43:
db:4b:83:a0:12:29:44:ec:5d:2b:f1:f5:b9:48:88:
6b:fc:84:20:dc:dd:88:f6:6c:b0:f5:3d:44:08:67:
6a:50:a2:4e:9d:9c:0f:5e:59:94:2e:f9:6c:da:33:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:70:7B:C3:51:67:36:3D:F8:B9:9B:FE:98:86:1A:5E:BE:96:D1:7D
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e1:b3:c2:7a:13:55:a2:72:8c:a5:76:af:cf:18:64:8d:20:
e4:c7:67:8c:d3:4d:4b:4d:bc:88:3b:e9:1d:06:ed:dc:99:1d:
1d:2a:ce:5f:cb:a0:b0:3f:41:22:a1:80:02:ae:d4:72:a7:56:
4a:14:56:8d:22:d0:51:be:ce:81:21:68:01:14:c5:d1:87:e5:
d9:0e:db:e5:8f:66:ba:ba:d4:ea:b6:6e:0f:61:79:52:ad:d3:
61:f1:16:ce:df:61:d4:d9:bb:fe:3f:69:00:2e:e5:1d:01:54:
5e:d9:1e:70:20:42:38:e9:69:e2:55:87:16:d0:18:84:d0:54:
01:55:ae:1a:b0:78:93:c0:02:ac:68:2a:c1:d5:e5:0c:30:d7:
bd:b8:ba:48:01:43:b3:f5:f1:d6:3d:16:39:68:96:ea:6a:09:
72:2f:48:e5:c6:a6:0f:a8:f1:09:af:5e:2f:47:6a:f9:4b:c7:
ba:64:2c:b0:fe:4d:7d:0a:a8:69:3e:36:ad:0a:6b:c2:7a:85:
ea:f5:48:bb:db:47:a9:cd:21:d6:6a:22:00:22:b2:d7:71:d0:
63:6d:a1:4d:2d:71:a6:c8:3e:4b:ed:f0:16:6b:9e:7a:b6:27:
d6:7d:69:ee:e1:2f:33:cc:c2:4b:f8:8e:65:48:68:4c:b1:1e:
36:88:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:08:01 2025 by rpki-client