Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: zXq4swqQHdt90wA01nui7vXwOB9t63tEcFPz+HckkZQ=
Subject key identifier: BF:B8:6D:09:DA:A9:39:FC:1F:B4:03:1B:02:6E:6E:A8:16:4C:A4:F1
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 019A4DE170164982EABD8719B34157DA264B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 0D49
Signing time: Tue 04 Nov 2025 08:00:11 +0000
Manifest this update: Tue 04 Nov 2025 08:00:11 +0000
Manifest next update: Wed 05 Nov 2025 08:00:11 +0000
Files and hashes: 1: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: EyA5TibahAfWjRSpS3nFi5OLcKkgV6t3fj4+WNdmWoA=)
2: akjM-xe6r7wN8q85qvVsiC6HFoc.roa (hash: DJGYhYAc1tW0r6f5bvOKTaPIoda2gTETmwDHHbAC3Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:70:16:49:82:ea:bd:87:19:b3:41:57:da:26:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Nov 4 08:00:11 2025 GMT
Not After : Nov 5 08:00:11 2025 GMT
Subject: CN=bfb86d09daa939fc1fb4031b026e6ea8164ca4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:21:6c:43:e8:42:07:58:29:29:c5:77:4b:
c5:ce:3c:2a:ec:40:18:b6:2d:8f:de:5c:fd:bf:8f:
77:7d:63:38:30:bd:ac:c3:7a:f4:15:78:8d:a8:dc:
d5:d7:53:c5:38:d7:13:fc:36:e8:38:1c:52:0d:c5:
ef:36:53:dd:88:05:6c:e5:47:e5:8e:68:ca:39:80:
39:33:c8:aa:6f:68:c6:d0:a2:19:d8:47:d4:00:95:
0a:c9:3c:86:17:fd:0b:37:0c:f8:f7:bf:9b:c2:aa:
80:22:38:aa:64:cd:2b:7d:85:b4:3a:79:61:2b:92:
d7:ca:e8:51:4c:21:14:37:83:a7:b3:3f:85:43:9c:
2f:e7:25:f4:75:01:a0:7e:53:aa:38:c5:d5:a4:15:
e7:c6:5e:2f:1e:b8:2e:fb:bb:76:02:2c:2f:15:20:
d1:2f:b6:98:97:c6:85:a3:f8:55:28:26:6f:f4:7e:
a6:59:73:cb:68:ac:83:54:9b:44:c8:6a:87:53:ea:
4b:92:b4:46:56:76:da:ba:b5:d3:1d:b6:c8:61:02:
50:7e:c0:e8:1b:76:fe:c4:e5:78:3b:7f:22:e4:7d:
9b:3a:a7:7d:73:d7:96:c8:92:dd:48:bb:5b:07:00:
04:98:46:05:2e:3f:1e:67:a6:9b:ca:50:d9:45:1e:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:6D:09:DA:A9:39:FC:1F:B4:03:1B:02:6E:6E:A8:16:4C:A4:F1
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:21:94:d3:d0:0f:a1:62:30:f6:7e:9a:b4:01:e3:21:b0:74:
aa:0c:df:70:77:8d:76:84:51:38:e2:d4:ba:79:6b:b1:da:61:
04:f7:ab:9c:be:2c:0c:76:83:47:2b:5e:74:4f:55:8f:dc:96:
e2:ea:5d:7f:a7:9e:5f:5d:cf:1e:15:86:cd:a0:98:31:25:24:
de:5f:c7:88:b1:b7:3b:28:03:fb:3a:40:ed:e3:77:0b:51:d0:
81:98:a5:e0:4b:13:49:fe:32:8c:8b:0e:08:41:5b:a8:c0:c9:
7b:30:7c:7d:d8:c3:c2:14:e4:e9:e2:a3:66:b5:fc:6e:73:e6:
c0:36:82:67:3b:4d:82:b7:71:e2:8c:b1:dd:ff:f3:09:75:8d:
51:a8:c8:8e:6f:a4:98:16:28:55:7d:e8:ce:c3:df:8b:6a:69:
15:b9:a5:37:74:f4:83:c2:a5:1f:79:24:63:4f:13:94:f9:a1:
63:88:aa:90:fd:ce:cf:08:0b:f0:21:7b:24:f5:36:0d:8e:2c:
3a:16:8d:e1:d5:7f:71:8c:aa:11:3a:29:6f:43:da:90:c8:e3:
8b:8a:04:54:f8:81:4c:bb:75:b5:77:58:32:a2:11:94:89:1b:
66:a2:56:30:3b:3d:86:ca:44:5b:68:12:1a:b1:65:95:55:01:
b7:e3:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:07:21 2025 by rpki-client