Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
File: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft (raw, json)
Hash identifier: bC0912J70BStayDpKkjh5FNbPOla6budi1zKyV5ceCw=
Subject key identifier: A5:93:AB:61:0A:BF:25:90:5F:6C:24:AB:F7:FA:B3:8B:64:18:37:88
Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Certificate serial: 019A70DC0B17BA842F3A25EA7232D0DFFA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:01:00 +0000
Manifest this update: Tue 11 Nov 2025 03:01:00 +0000
Manifest next update: Wed 12 Nov 2025 03:01:00 +0000
Files and hashes: 1: MChEll1heVmbFidBBJvsHOrl4fE.roa (hash: ARoQGxRNkrRdwVI3hmAp61vYLz+zRk9Xivm5xOWKmgg=)
2: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl (hash: bJi1w8YmoXCp0/EFeZ7cQsrYYf7ZCW6W8lRNVRjEXXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0b:17:ba:84:2f:3a:25:ea:72:32:d0:df:fa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Validity
Not Before: Nov 11 03:01:00 2025 GMT
Not After : Nov 12 03:01:00 2025 GMT
Subject: CN=a593ab610abf25905f6c24abf7fab38b64183788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:01:d4:f2:51:19:cb:71:eb:8d:1c:e6:d5:
cb:8b:e6:f5:b5:84:94:7a:71:73:50:0a:f5:47:f1:
85:1c:0c:a1:cc:6b:27:29:c4:8b:37:d7:f9:b7:aa:
69:be:de:19:4c:de:c9:80:08:26:d3:67:61:b5:17:
af:e9:ab:4c:17:44:fd:55:21:7c:42:29:28:f6:4a:
be:75:e3:40:3d:15:1c:18:3c:7f:3c:31:9e:63:42:
fb:44:fa:fd:2c:b7:a9:21:c6:41:20:2f:d0:a7:a5:
4c:00:45:3d:dc:07:0a:2c:37:da:a3:2c:0a:f4:fb:
ef:5c:b3:a8:a8:fe:e0:cc:98:cd:b0:6e:38:e5:f9:
a8:d1:54:cd:04:99:e6:f3:75:f7:03:df:d7:0d:2b:
19:03:a5:9c:7a:d2:f8:e0:77:8a:3e:89:29:cd:8a:
ac:c4:9a:12:df:99:eb:64:ab:6d:06:d8:54:73:85:
89:e5:6f:ce:34:9c:bc:7e:03:39:a2:17:66:f5:24:
d3:73:44:66:d4:54:4c:f6:c5:31:77:d1:2f:3d:84:
0f:f2:79:99:5d:b6:10:f4:d1:da:8b:b9:c1:5a:1c:
2e:8f:2d:50:2b:6a:6e:4d:4e:e1:5b:92:ec:0f:99:
f1:69:6e:65:20:51:69:03:20:0f:d6:19:1d:9d:67:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:93:AB:61:0A:BF:25:90:5F:6C:24:AB:F7:FA:B3:8B:64:18:37:88
X509v3 Authority Key Identifier:
keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d5:32:04:88:fa:c4:a7:bf:04:c3:da:94:1d:d7:13:c4:b4:
ac:fc:45:a9:bc:52:3c:d0:d0:47:e4:95:02:34:8b:9c:4a:d6:
db:a4:e5:42:0d:1b:39:00:00:a6:89:03:a1:0e:a8:5c:5a:4f:
d4:0d:eb:cd:59:c3:73:26:9f:8c:d4:f0:ac:ec:4c:21:34:83:
4e:9b:ce:6a:c7:0c:04:42:31:8a:91:13:fc:9e:e4:e8:a5:86:
7d:2b:ba:58:81:17:1f:94:b7:8a:c4:41:bb:2b:35:8b:30:66:
8f:82:a9:d3:7d:1b:6d:f3:47:4b:69:f2:bb:75:f6:7b:85:c5:
1c:77:e7:7d:80:1d:45:70:94:14:da:29:4f:4c:8e:78:e3:0d:
9b:4d:16:a8:87:b8:a7:e1:e8:47:d4:07:fe:47:ca:10:b6:a0:
e6:eb:60:fe:9d:f9:77:90:93:81:d8:88:e0:4e:86:03:64:df:
fd:1f:35:fa:3d:c3:0c:39:58:10:f8:c4:2e:7f:0b:31:90:ea:
74:a7:b2:ba:60:24:25:7a:ca:f7:87:bc:c8:17:a5:6e:57:13:
1c:af:28:cf:7d:5a:d2:5a:a5:a5:e2:03:10:76:91:e1:f6:c2:
b1:42:db:60:d1:dc:7a:46:63:d9:97:d9:4e:45:55:9c:07:27:
dd:10:ba:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3AsXuoQvOiXqcjLQ3/oZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDc3ZmU2OGZhOWRhYjY0NGZkMGEzZGZiM2EwMjU2NmE4
MDk1OTAwHhcNMjUxMTExMDMwMTAwWhcNMjUxMTEyMDMwMTAwWjAzMTEwLwYDVQQD
EyhhNTkzYWI2MTBhYmYyNTkwNWY2YzI0YWJmN2ZhYjM4YjY0MTgzNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc8B1PJRGctx640c5tXLi+b1tYSU
enFzUAr1R/GFHAyhzGsnKcSLN9f5t6ppvt4ZTN7JgAgm02dhtRev6atMF0T9VSF8
Qiko9kq+deNAPRUcGDx/PDGeY0L7RPr9LLepIcZBIC/Qp6VMAEU93AcKLDfaoywK
9PvvXLOoqP7gzJjNsG445fmo0VTNBJnm83X3A9/XDSsZA6WcetL44HeKPokpzYqs
xJoS35nrZKttBthUc4WJ5W/ONJy8fgM5ohdm9STTc0Rm1FRM9sUxd9EvPYQP8nmZ
XbYQ9NHai7nBWhwujy1QK2puTU7hW5LsD5nxaW5lIFFpAyAP1hkdnWepswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWTq2EKvyWQX2wkq/f6s4tkGDeIMB8GA1UdIwQY
MBaAFDrXf+aPqdq2RP0KPfs6AlZqgJWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xMzc0YzAtNGJkNC00MTU2LWE3N2Yt
NjUzYTcwYmYwOTI1LzEvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xMzc0YzAtNGJkNC00MTU2LWE3N2YtNjUzYTcwYmYwOTI1
LzEvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtUyBIj6
xKe/BMPalB3XE8S0rPxFqbxSPNDQR+SVAjSLnErW26TlQg0bOQAApokDoQ6oXFpP
1A3rzVnDcyafjNTwrOxMITSDTpvOascMBEIxipET/J7k6KWGfSu6WIEXH5S3isRB
uys1izBmj4Kp030bbfNHS2nyu3X2e4XFHHfnfYAdRXCUFNopT0yOeOMNm00WqIe4
p+HoR9QH/kfKELag5utg/p35d5CTgdiI4E6GA2Tf/R81+j3DDDlYEPjELn8LMZDq
dKeyumAkJXrK94e8yBelblcTHK8oz31a0lqlpeIDEHaR4fbCsULbYNHcekZj2ZfZ
TkVVnAcn3RC6KQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:44 2025 by rpki-client