Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: g18RGisJdwOS5xkIDnN0I+1/DjHK2u1YpNmUXlWWseQ=
Subject key identifier: 70:FE:DD:21:39:ED:A0:BE:12:42:B7:9A:58:48:12:10:10:A9:D4:3D
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 019A71B87715EB2412BD517F0ED5CEFC901E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: wQZK4nJpW4z10AwXw5cEgLu7XeRGcC65tF6fXvnNOoo=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:77:15:eb:24:12:bd:51:7f:0e:d5:ce:fc:90:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=70fedd2139eda0be1242b79a5848121010a9d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:c0:16:1a:6d:08:65:95:b4:93:0c:84:03:
19:6d:8a:80:f6:6e:5b:0d:46:d6:61:72:7b:fb:5e:
fe:36:96:e6:8d:7e:d5:57:5c:b8:d1:a7:3f:02:2f:
12:30:2d:ac:30:64:ef:54:cc:34:2f:f0:8e:93:45:
da:be:28:89:c1:0f:26:f1:ec:2d:e0:08:9a:e2:96:
a2:c2:d0:b2:f3:4c:23:f8:26:c0:6a:1a:46:ef:88:
70:96:61:13:ed:9e:84:d3:17:22:dd:8f:b5:9c:6b:
fe:c3:85:f8:cf:97:c7:a6:e3:39:0e:6a:2b:3b:e9:
52:b5:a9:6c:18:90:7e:ea:a4:4c:98:57:20:6e:81:
c5:bd:49:d4:a7:60:ca:e0:2c:61:3c:a7:36:ba:55:
b0:e1:40:e3:01:08:57:e4:ba:6a:28:6e:1d:1c:8d:
bd:a7:b4:53:19:f6:5d:a7:e6:51:50:3b:d0:f6:11:
54:2e:14:3c:c8:a3:d0:85:10:b8:b9:f2:4e:d2:d3:
a3:86:2e:86:91:7f:93:b5:86:fa:82:02:3a:0e:bf:
96:98:58:d6:7f:22:83:9a:c1:46:32:3f:bd:82:42:
10:8f:4e:79:fe:54:bf:27:6a:50:d4:64:56:ca:df:
c9:52:16:79:2b:ad:81:b5:10:40:9e:c2:fb:dc:ff:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FE:DD:21:39:ED:A0:BE:12:42:B7:9A:58:48:12:10:10:A9:D4:3D
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5c:4c:ea:92:52:1f:1d:2b:47:51:8c:1c:27:aa:c2:ee:15:
21:54:24:ac:86:f7:f4:c1:d8:ed:7c:c3:07:49:50:58:7f:bc:
b1:15:20:3b:be:ea:30:eb:fd:21:17:ce:ad:e7:d7:9d:20:c4:
d1:b9:aa:7b:fa:8e:cb:25:87:7c:9a:aa:28:a5:e4:d5:04:8e:
3c:77:fa:ec:77:99:55:ab:62:d5:f9:00:0a:b7:37:14:a7:f0:
dc:7b:57:44:14:8a:4a:83:14:88:de:89:f7:13:d8:9a:44:fc:
7e:6c:60:d2:10:9a:e9:6f:8b:ff:2a:b4:08:d4:cc:08:02:d1:
4b:34:6e:48:97:54:d2:1d:07:be:75:fa:8a:ce:d4:7c:69:fb:
a6:3e:10:7e:e2:48:94:6d:fe:83:d6:a5:54:a5:cb:c4:33:c2:
56:04:dd:86:ba:7b:87:4f:d9:06:cf:6e:ba:29:85:c0:fa:a6:
1b:ce:f9:39:2c:a2:6d:40:84:39:92:4a:2b:9e:73:2b:a7:5b:
f3:86:f0:d1:e9:aa:46:1e:fe:e6:e6:7c:16:2a:eb:3b:6a:cf:
d3:65:52:4b:3a:51:fd:c4:15:22:22:8d:c4:9f:7d:9c:31:61:
f0:49:63:42:47:ad:52:ab:cc:5b:05:9e:79:a1:66:51:3c:2e:
29:74:58:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHcV6yQSvVF/DtXO/JAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDExZjZjMTc5ZWIzMTQyYTQ4ZWU2NGIyZTk0Y2RlOWRk
MzYxNzMwHhcNMjUxMTExMDcwMTQ1WhcNMjUxMTEyMDcwMTQ1WjAzMTEwLwYDVQQD
Eyg3MGZlZGQyMTM5ZWRhMGJlMTI0MmI3OWE1ODQ4MTIxMDEwYTlkNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e7AFhptCGWVtJMMhAMZbYqA9m5b
DUbWYXJ7+17+NpbmjX7VV1y40ac/Ai8SMC2sMGTvVMw0L/COk0XaviiJwQ8m8ewt
4Aia4paiwtCy80wj+CbAahpG74hwlmET7Z6E0xci3Y+1nGv+w4X4z5fHpuM5Dmor
O+lStalsGJB+6qRMmFcgboHFvUnUp2DK4CxhPKc2ulWw4UDjAQhX5LpqKG4dHI29
p7RTGfZdp+ZRUDvQ9hFULhQ8yKPQhRC4ufJO0tOjhi6GkX+TtYb6ggI6Dr+WmFjW
fyKDmsFGMj+9gkIQj055/lS/J2pQ1GRWyt/JUhZ5K62BtRBAnsL73P/ShQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD+3SE57aC+EkK3mlhIEhAQqdQ9MB8GA1UdIwQY
MBaAFDrRH2wXnrMUKkjuZLLpTN6d02FzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzct
ZWY5MWQ4YjViMDgxLzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzctZWY5MWQ4YjViMDgx
LzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlxM6pJS
Hx0rR1GMHCeqwu4VIVQkrIb39MHY7XzDB0lQWH+8sRUgO77qMOv9IRfOrefXnSDE
0bmqe/qOyyWHfJqqKKXk1QSOPHf67HeZVati1fkACrc3FKfw3HtXRBSKSoMUiN6J
9xPYmkT8fmxg0hCa6W+L/yq0CNTMCALRSzRuSJdU0h0HvnX6is7UfGn7pj4QfuJI
lG3+g9alVKXLxDPCVgTdhrp7h0/ZBs9uuimFwPqmG875OSyibUCEOZJKK55zK6db
84bw0emqRh7+5uZ8FirrO2rP02VSSzpR/cQVIiKNxJ99nDFh8EljQketUqvMWwWe
eaFmUTwuKXRYhg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:55 2025 by rpki-client