Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: Afg61XiG/iYPvnsQFn9c1ynWe6njExliXjbjQT1lQ60=
Subject key identifier: EE:57:06:2B:7C:D5:B5:3B:88:27:9E:B0:79:E9:8F:FF:D2:30:68:FD
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 019A722657CF46C22DB465A024768F4B38ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: HeLvg31GTp7Z97ym3W/jr3ESO1odMFmIOWpwsFiKqak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:57:cf:46:c2:2d:b4:65:a0:24:76:8f:4b:38:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=ee57062b7cd5b53b88279eb079e98fffd23068fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:9b:2f:25:bd:4e:f8:9d:91:ee:43:3d:9f:
a1:ed:69:80:85:1f:05:08:28:47:16:83:74:cb:4a:
8f:52:23:f2:bf:8d:1d:9f:8f:90:e3:82:10:8a:dd:
b7:df:f2:a5:92:6e:b6:9b:af:9d:60:15:bb:6f:1f:
e6:94:fa:49:18:12:02:fe:e3:fc:7d:a2:7c:98:34:
d7:08:70:fc:d6:0c:b5:a3:f5:c5:f5:e7:74:1c:b5:
97:42:61:d7:36:85:ca:2f:1e:a9:15:21:d8:d5:40:
ed:5e:7a:93:01:79:d5:ab:16:2d:44:cd:0a:a5:c9:
42:34:67:59:9d:b9:b6:57:51:02:51:59:00:3d:08:
35:7a:ec:00:f5:40:0d:98:bb:ff:88:4e:4b:06:47:
8a:94:60:5e:c8:a7:04:62:e8:a5:22:58:ad:c0:0c:
94:ff:4d:e5:17:97:b8:a7:38:95:4e:88:2c:4f:d0:
12:a4:a6:3e:6e:45:5b:39:eb:9e:c7:b0:ed:5b:ef:
01:50:23:3c:a7:34:92:63:88:99:8e:08:c0:96:0e:
c6:36:64:bd:07:ee:81:59:22:a6:53:75:6e:0f:49:
f4:c0:46:7b:17:ff:cb:08:11:50:0b:fa:6f:41:22:
35:57:e6:6c:0a:50:c0:fe:92:60:d2:ec:a5:4f:9b:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:06:2B:7C:D5:B5:3B:88:27:9E:B0:79:E9:8F:FF:D2:30:68:FD
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:db:e1:d4:49:cf:d9:92:14:7c:89:4a:fe:81:b8:c2:0f:
fc:3d:30:6b:5c:05:2a:3b:9c:3f:71:7e:4c:61:fe:c2:f8:f2:
72:7c:2a:f6:78:97:ae:f6:a2:9e:05:f1:46:26:48:e3:9e:1a:
33:f3:4e:47:21:38:72:17:98:2b:84:44:2d:22:1c:22:6f:68:
3c:68:2a:16:ee:eb:4e:56:78:37:13:8e:ad:63:a3:30:25:7d:
d1:28:ae:4e:49:f0:cf:91:0a:e3:79:f0:3e:0c:fa:18:f6:0a:
70:fd:29:c1:1d:f0:3a:09:f7:de:81:6f:7c:fe:04:e7:1a:41:
f6:25:4f:61:78:3d:ab:94:b2:e8:86:dd:2b:b1:d2:bc:42:b3:
65:06:84:db:1c:a3:3a:49:76:f2:84:5a:5e:91:35:72:9a:87:
d1:d4:ef:a7:44:2e:14:ba:9b:22:8e:b5:ad:a2:01:0a:6b:e6:
35:60:5d:6b:60:1c:81:74:3b:fb:53:32:c1:01:b6:19:e2:7a:
55:32:16:0c:f5:9a:ae:a9:62:48:53:8b:28:7e:3e:65:b5:7c:
1f:1b:19:c6:4e:b5:a4:62:d3:1c:00:f1:84:d6:34:88:d3:f8:
20:93:32:18:a0:7f:24:c9:b4:cf:54:3d:1d:65:bd:71:c2:37:
9d:ef:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:45 2025 by rpki-client