Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: 3G0y1EKoI0mI6RZcW8fsZaW5jlHWqGXhrc48b7SpEQg=
Subject key identifier: A6:73:E7:5E:E7:60:24:21:2F:B6:22:9F:70:A0:AC:9C:75:F1:AC:41
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 019A1C19B642F4989211BA229BEF81DC6897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 0550
Signing time: Sat 25 Oct 2025 16:00:38 +0000
Manifest this update: Sat 25 Oct 2025 16:00:38 +0000
Manifest next update: Sun 26 Oct 2025 16:00:38 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: MDsYq3V5utNT1K5WJFuEzH4lXC8IqAr6dtNrMTRgdNk=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:b6:42:f4:98:92:11:ba:22:9b:ef:81:dc:68:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Oct 25 16:00:38 2025 GMT
Not After : Oct 26 16:00:38 2025 GMT
Subject: CN=a673e75ee76024212fb6229f70a0ac9c75f1ac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:8c:e2:ff:39:7b:89:35:4e:36:71:ad:fd:
99:b4:70:31:25:4e:10:09:ab:8e:8a:ce:b5:87:d4:
bf:25:29:1c:fd:76:60:99:15:ad:a0:28:dd:38:10:
b2:06:7b:69:04:ac:17:dc:1d:70:26:8b:33:21:ec:
06:73:3f:4a:27:b2:27:ff:8d:ba:89:39:47:43:d3:
df:f1:a3:de:f0:0c:80:2f:4a:98:5d:45:41:cc:66:
57:02:e5:ad:92:de:b6:1d:c1:d4:d7:ca:62:ee:93:
2c:b3:20:1e:19:3b:3b:be:fc:04:35:c6:14:46:a4:
60:9b:bb:87:94:2b:f2:d6:ee:7b:68:95:ed:47:54:
78:14:f0:41:02:bb:f0:7c:24:6a:c9:c2:1c:2f:53:
50:f0:76:60:90:59:d8:84:9f:a5:fd:a3:14:0a:19:
f4:02:a3:be:04:17:c2:03:d0:1d:8d:eb:3c:20:75:
0e:5c:24:d7:fe:7b:3a:ae:60:f4:eb:fe:2f:4d:51:
c5:ae:2c:c4:08:9e:7e:8f:62:42:af:fb:76:dd:40:
03:71:17:5a:49:e7:fc:2a:78:04:d4:d9:62:c7:c0:
8f:b2:a0:88:76:0b:45:64:03:9d:cf:73:5b:54:d2:
8e:58:44:4b:fb:ad:4e:61:3f:6a:c9:f8:4a:ad:f3:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:73:E7:5E:E7:60:24:21:2F:B6:22:9F:70:A0:AC:9C:75:F1:AC:41
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:21:40:e8:ba:61:e6:61:fb:86:b8:1f:42:ef:70:54:21:33:
1e:c6:e3:2d:13:b2:03:81:c9:85:4d:92:37:e9:05:f7:b4:0f:
ba:55:c1:72:12:90:44:d3:87:95:7b:dc:d3:d8:35:74:9f:86:
4f:d5:25:32:d9:18:b7:6d:fc:34:52:e4:d2:40:e3:86:74:57:
3c:a6:47:dd:f0:ac:2f:0b:e6:48:32:3a:0c:79:d2:37:23:71:
6b:90:1a:3e:95:b2:43:aa:7b:b9:ac:cc:59:94:e7:4e:4d:90:
16:bf:09:83:20:2b:fa:32:9e:3d:2c:d4:ea:ea:e3:74:42:a5:
05:fb:82:51:49:0d:53:ad:63:19:66:ca:4b:86:6d:d3:13:5b:
1c:ee:fe:2a:b3:1e:c3:15:af:09:43:61:19:11:99:e5:e4:f4:
6b:bd:25:51:fd:47:2f:f6:de:c3:c1:2d:62:8d:14:c6:e7:c2:
1c:58:45:10:01:93:41:a1:3a:3a:7e:75:95:41:11:cc:dd:b8:
2c:14:69:13:97:d6:48:4a:9c:7e:a8:83:66:15:79:fc:2c:87:
dc:79:ec:de:b0:01:32:74:da:c9:ef:dc:95:63:92:71:63:8d:
c2:0e:7b:84:18:04:b1:34:41:00:da:d7:f8:18:38:cb:e3:94:
6f:98:6f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:19:09 2025 by rpki-client