Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: Ygw7XXa5dspMkpCqJ3NxAx2x3aLC8a+CdhgPjt2ELpk=
Subject key identifier: F9:78:28:CC:06:5E:E7:BC:98:2D:0E:27:E6:CF:F8:97:D8:46:3C:A4
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 0199221F5379838C5B6F78DD0068C7919907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:01:42 +0000
Manifest this update: Sun 07 Sep 2025 03:01:42 +0000
Manifest next update: Mon 08 Sep 2025 03:01:42 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: zaprdobVQ3xA1Un4IHiU4VdCnvkeX06S5uauVqt99hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:53:79:83:8c:5b:6f:78:dd:00:68:c7:91:99:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Sep 7 03:01:42 2025 GMT
Not After : Sep 8 03:01:42 2025 GMT
Subject: CN=f97828cc065ee7bc982d0e27e6cff897d8463ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:15:ee:a5:ce:12:93:ec:53:32:bb:2d:e9:
8f:89:15:36:dc:46:c8:4f:9c:b4:c5:8e:23:f8:d5:
0e:db:8a:0c:1f:d7:66:cd:ba:be:ac:5a:79:40:dd:
28:73:23:7a:b0:79:39:37:9e:40:ea:45:44:94:19:
09:13:b7:f4:9d:62:47:63:a2:89:1e:d7:d9:61:70:
b2:9f:06:28:17:00:c9:01:04:60:e9:d0:79:cf:44:
f5:9f:f4:6c:0e:f1:e4:24:c6:1f:76:fd:d3:bf:d3:
8d:42:d3:1a:b9:fb:40:21:fa:48:6a:36:eb:0b:7e:
85:b3:eb:7f:e5:de:93:d0:b6:4c:ab:0b:d0:15:d1:
f3:55:be:21:4b:ab:05:68:b6:21:c3:8d:84:af:2b:
b3:db:fe:ad:95:ab:09:97:e5:8b:24:91:62:55:56:
50:48:ad:e8:cd:a0:3a:f7:3a:e3:d4:fb:f6:0c:32:
3e:e8:a4:d7:b9:44:5e:a6:3c:de:36:37:ad:cb:08:
b7:31:7a:72:e0:c0:c0:8a:7b:85:ae:ce:11:37:94:
08:f2:ef:0b:68:d6:92:19:5d:6e:39:93:3f:f0:94:
12:35:d6:41:92:5f:18:53:c8:be:7f:8a:66:42:2a:
04:90:05:63:08:f3:0a:8e:97:a1:0d:98:53:0e:92:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:78:28:CC:06:5E:E7:BC:98:2D:0E:27:E6:CF:F8:97:D8:46:3C:A4
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:03:34:e9:b0:ba:7e:73:06:05:9b:46:3b:f3:ca:42:ff:fa:
fe:ca:34:5a:87:b7:3d:69:6d:b7:2b:d5:0a:50:28:1e:8b:10:
f7:78:69:54:b4:85:4f:14:f4:a7:33:3e:1f:5d:54:0d:ce:ce:
d6:39:2a:34:d1:21:19:85:f6:20:38:2d:7f:b9:08:c2:3c:2b:
4b:71:d5:ab:67:11:cb:29:a2:5a:70:24:ae:91:0f:7a:3b:7c:
26:84:8e:02:5b:b5:24:16:e7:1b:64:d1:be:12:ea:63:22:e8:
4a:36:76:b3:1b:23:af:a4:f0:44:64:ab:0e:e0:f9:4e:09:31:
43:d7:36:b4:ee:38:43:49:8f:7a:2f:c9:4a:ad:4d:3f:71:b6:
88:07:eb:5e:fa:e5:46:33:75:5f:f9:fd:84:64:26:5d:c8:dd:
fc:bd:5a:f5:56:a4:5c:70:88:6d:d4:a7:1c:21:eb:65:87:14:
51:cc:82:dc:c2:5c:82:16:81:24:ac:81:43:07:61:d9:65:d4:
f8:c7:d9:a6:24:60:a6:25:11:6f:32:6f:e1:a1:ab:5e:8c:cc:
fb:2d:85:53:7f:12:fa:55:a2:00:ae:51:af:f4:8e:0d:6d:67:
be:dd:88:75:8b:4d:e6:87:fa:80:71:64:bb:70:18:ed:ae:af:
9e:ca:3f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiH1N5g4xbb3jdAGjHkZkHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGM4ZWEyZDFlNWJmOWU0NWYwNWQ5NTQwNTZmOGM5MDQ3
YTM2MDUwHhcNMjUwOTA3MDMwMTQyWhcNMjUwOTA4MDMwMTQyWjAzMTEwLwYDVQQD
EyhmOTc4MjhjYzA2NWVlN2JjOTgyZDBlMjdlNmNmZjg5N2Q4NDYzY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQgV7qXOEpPsUzK7LemPiRU23EbI
T5y0xY4j+NUO24oMH9dmzbq+rFp5QN0ocyN6sHk5N55A6kVElBkJE7f0nWJHY6KJ
HtfZYXCynwYoFwDJAQRg6dB5z0T1n/RsDvHkJMYfdv3Tv9ONQtMauftAIfpIajbr
C36Fs+t/5d6T0LZMqwvQFdHzVb4hS6sFaLYhw42Eryuz2/6tlasJl+WLJJFiVVZQ
SK3ozaA69zrj1Pv2DDI+6KTXuURepjzeNjetywi3MXpy4MDAinuFrs4RN5QI8u8L
aNaSGV1uOZM/8JQSNdZBkl8YU8i+f4pmQioEkAVjCPMKjpehDZhTDpLz2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPl4KMwGXue8mC0OJ+bP+JfYRjykMB8GA1UdIwQY
MBaAFDrcjqLR5b+eRfBdlUBW+MkEejYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3R5T290SGx2NTVGOEYyVlFGYjR5UVI2TmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yNzJkNDYtMDgyMS00YzkzLWEzZDMt
NGFkYzBhNjc5Zjg0LzEvT3R5T290SGx2NTVGOEYyVlFGYjR5UVI2TmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yNzJkNDYtMDgyMS00YzkzLWEzZDMtNGFkYzBhNjc5Zjg0
LzEvT3R5T290SGx2NTVGOEYyVlFGYjR5UVI2TmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwM06bC6
fnMGBZtGO/PKQv/6/so0Woe3PWlttyvVClAoHosQ93hpVLSFTxT0pzM+H11UDc7O
1jkqNNEhGYX2IDgtf7kIwjwrS3HVq2cRyymiWnAkrpEPejt8JoSOAlu1JBbnG2TR
vhLqYyLoSjZ2sxsjr6TwRGSrDuD5TgkxQ9c2tO44Q0mPei/JSq1NP3G2iAfrXvrl
RjN1X/n9hGQmXcjd/L1a9VakXHCIbdSnHCHrZYcUUcyC3MJcghaBJKyBQwdh2WXU
+MfZpiRgpiURbzJv4aGrXozM+y2FU38S+lWiAK5Rr/SODW1nvt2IdYtN5of6gHFk
u3AY7a6vnso/ig==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:37 2025 by rpki-client