Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: Y4loVtxINdb1IyKn07TasdHsPwyL4VCJATgvdj57gpQ=
Subject key identifier: 4E:74:59:F9:FE:58:ED:12:96:EB:5D:43:BF:7B:DC:0F:AA:50:DA:D1
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019A4DAB26EA33F48341EDE7E3410547BB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 054E
Signing time: Tue 04 Nov 2025 07:00:53 +0000
Manifest this update: Tue 04 Nov 2025 07:00:53 +0000
Manifest next update: Wed 05 Nov 2025 07:00:53 +0000
Files and hashes: 1: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (hash: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: 7qbH6YvxgP3IWlEE1/KF5kAHeGj7nxwjVIOoxy//hE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:26:ea:33:f4:83:41:ed:e7:e3:41:05:47:bb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Nov 4 07:00:53 2025 GMT
Not After : Nov 5 07:00:53 2025 GMT
Subject: CN=4e7459f9fe58ed1296eb5d43bf7bdc0faa50dad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:ac:c3:91:0e:73:64:d3:8b:a5:6a:56:16:
c7:df:1a:2b:f3:54:4e:60:51:a8:24:7d:71:94:90:
9d:03:b4:9d:9c:5e:44:b5:dc:1a:d0:ef:29:17:a1:
88:32:b8:2f:92:f2:eb:50:1b:6c:fe:dd:f3:5c:a1:
6d:e1:02:6e:f8:44:7a:1b:6b:f9:ae:b1:e6:d5:88:
06:fd:26:c9:1e:70:20:f0:8c:ca:04:a9:6a:3a:42:
b6:8c:d6:3a:b7:aa:a9:08:91:e4:cd:e4:5b:f9:65:
7f:2a:d5:eb:21:d6:89:ab:1f:14:be:40:70:8e:67:
0d:17:ca:0d:87:74:98:07:16:14:2d:ae:4d:78:c8:
b7:89:7d:e2:5b:78:c9:21:22:3e:6e:97:74:62:c8:
e9:e5:58:a1:41:16:1d:26:86:90:49:65:0e:de:77:
ca:c3:07:d5:51:6b:b2:dc:f4:d6:6f:ca:37:88:b6:
b5:6a:7c:27:17:00:fe:21:1d:62:9b:56:2d:8e:6f:
45:a1:0e:04:71:ec:1a:78:0d:5a:e4:d9:08:69:61:
01:20:6f:e6:fd:46:42:42:4a:f2:6e:7e:49:33:af:
fa:aa:ab:e4:f5:68:ab:90:5d:a1:3e:cc:f9:5f:46:
5f:1d:71:ae:fd:2a:d3:39:d3:83:28:31:c4:7b:d7:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:59:F9:FE:58:ED:12:96:EB:5D:43:BF:7B:DC:0F:AA:50:DA:D1
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:41:c6:39:cf:d6:56:80:df:59:ca:0b:2d:52:6e:70:f2:62:
f0:de:4c:15:57:c5:91:39:6e:a7:a0:26:80:b7:58:0b:82:81:
7d:b7:7c:30:69:fa:96:96:42:f2:b0:9f:d6:57:3f:d2:ba:d3:
36:0e:88:81:72:d1:b6:27:77:d6:63:5d:da:3a:22:0f:c7:44:
13:a5:48:73:7c:94:e7:79:90:8d:be:75:2e:41:80:c5:20:02:
b8:85:2f:58:a0:47:25:3b:31:9a:d5:93:94:52:4c:f1:11:57:
36:6f:bc:81:48:fe:4f:c8:d4:30:49:58:f4:88:f5:37:f8:f8:
40:fc:cc:16:dd:78:d0:e9:08:22:85:dc:1a:e2:54:c2:a7:b5:
f7:38:47:99:e7:a5:35:b9:9d:67:1e:f8:fb:e0:41:06:a7:9e:
b7:64:39:9f:8e:c0:1c:3d:08:e3:04:f2:06:c7:01:ff:f7:73:
f6:ec:5c:77:8a:b2:d5:0f:20:43:36:54:d7:ef:08:05:2d:06:
32:ef:ae:9f:c4:c9:a8:ab:9c:09:a4:9d:38:cd:11:8e:15:78:
4b:de:ee:1c:9e:34:2d:79:f5:c5:2b:e2:db:85:93:ec:11:3e:
bc:32:67:53:c7:c5:60:c0:1d:7a:4c:a2:ce:d9:df:f0:5d:ef:
4f:50:e2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:09:02 2025 by rpki-client