Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
File: OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json)
Hash identifier: elS5JqA7Cb4a1VXp0G5SBKu4+GF3xp1vKvTv5kJ/P0E=
Subject key identifier: EE:87:38:93:48:70:72:F9:EA:31:ED:90:9B:BD:E2:09:D6:5D:10:6B
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial: 019A7293E4114BFB75CE6E149EBAFBCBCD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
Manifest number: 0207
Signing time: Tue 11 Nov 2025 11:01:25 +0000
Manifest this update: Tue 11 Nov 2025 11:01:25 +0000
Manifest next update: Wed 12 Nov 2025 11:01:25 +0000
Files and hashes: 1: 0pKhUeDAG_MOdW5Y02JeMiWhQ-c.roa (hash: vlnGP89vn7MHQd69bqsZgk5M40XUxWUgsHsylZhCKms=)
2: 3-fP9p4N-Js1uWY2EPsUDn2Ta0Y.roa (hash: 3KgZqAhwrFXDW/vYa1+gIOYPmnsUMBf4mPAqrTO23HI=)
3: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: +ex9wph7vtYvuhZAdK0HdWDvXVM7wYwVU+7PoBF/eBs=)
4: mrvN1q3z6mxLj5OwmYo4SI68-6w.roa (hash: FCwb+wuvGG1lKyfztmthIAYgGwpmTKUMJbN1dMopTWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e4:11:4b:fb:75:ce:6e:14:9e:ba:fb:cb:cd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Validity
Not Before: Nov 11 11:01:25 2025 GMT
Not After : Nov 12 11:01:25 2025 GMT
Subject: CN=ee873893487072f9ea31ed909bbde209d65d106b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:26:88:b4:22:fb:5a:94:72:1a:2d:ed:db:
1c:d2:c1:a0:18:4f:6a:d7:67:4c:71:3b:ec:a3:ad:
97:1c:e1:39:32:c7:88:36:63:6a:58:3a:e8:8e:5e:
ee:53:92:6f:d0:e2:c3:73:96:ef:29:88:62:af:85:
9c:b0:2c:31:ec:10:c5:b6:ed:76:f2:a2:03:f3:9e:
53:aa:35:ad:99:ef:05:a2:b5:e6:69:6b:05:b2:7b:
33:5a:63:0b:0d:7b:84:7d:86:8c:f8:70:e7:1e:fb:
b0:c4:f9:ff:3d:ec:57:13:f0:f7:e7:ff:b7:a5:cd:
59:ff:44:b0:a7:10:d0:6f:04:75:a5:27:76:b2:66:
10:19:56:cc:e3:b9:59:d0:5d:ad:ab:fe:8f:6b:b8:
98:0a:40:7a:ce:4a:c9:5d:3e:2a:4c:0e:10:11:3b:
fe:2d:ec:d7:9a:16:f8:72:8e:be:90:44:98:b9:ba:
32:03:0f:a9:47:5a:02:91:90:3f:1d:c6:42:c7:3b:
89:39:95:62:f7:bc:ad:4d:f4:01:93:83:5a:d3:d2:
58:af:a8:02:36:73:4c:05:89:18:c0:f8:80:d3:69:
7c:c9:4f:c4:06:57:87:96:fc:18:7b:59:b5:99:18:
95:ae:74:3d:ee:12:fd:53:b0:17:69:92:5e:3b:96:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:87:38:93:48:70:72:F9:EA:31:ED:90:9B:BD:E2:09:D6:5D:10:6B
X509v3 Authority Key Identifier:
keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d7:e5:f6:10:68:df:44:be:f2:4e:20:81:63:c2:ae:d4:31:
89:b5:83:dd:eb:23:e2:07:26:53:be:17:af:bc:23:fa:e4:60:
db:5f:30:ee:08:78:a1:96:ef:b1:e4:8f:50:5f:b2:90:25:00:
a2:7f:dc:f0:b9:35:02:ea:73:ee:19:22:05:48:8f:5e:8d:07:
c7:d7:8c:58:85:e2:c9:fb:87:d2:d7:31:b6:af:37:b5:c5:5b:
05:be:61:b1:23:0d:b8:25:de:78:cb:bd:00:d2:61:58:cf:a7:
4a:5e:37:fa:c5:05:bb:dc:29:5f:b5:9a:b4:52:64:9e:26:1b:
d8:eb:f0:a1:53:ec:d3:34:22:50:8c:b7:7b:a8:87:91:3c:29:
f6:ef:c7:1a:74:60:a6:d5:86:68:3d:d7:ed:06:14:aa:ae:7c:
ee:72:35:e4:29:c7:fc:0f:12:7d:d2:82:aa:bc:7d:af:b2:f5:
60:7d:40:aa:c7:d0:1d:06:f2:5b:b0:74:6f:55:24:da:b1:6c:
21:3a:8f:da:13:dd:c3:c2:e7:e3:00:8d:8b:2d:f3:41:4d:80:
ba:a9:b5:af:92:fd:6f:73:ca:38:db:b7:b5:1f:fd:7e:6a:1f:
e1:35:e6:7b:a6:3a:4a:78:16:77:f4:1a:49:29:e2:88:5f:e5:
7e:b0:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:44 2025 by rpki-client