Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: 2QmN8tDpBl+spVVvuG2S18NWj5iXTIgrd84pXYwbdvc=
Subject key identifier: 79:FD:0D:2A:20:01:C6:05:24:18:8B:06:C6:45:7F:1B:19:9A:AF:C6
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 019A4E868541D84786BF42B6F0D5D52F6F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 11:00:29 +0000
Manifest this update: Tue 04 Nov 2025 11:00:29 +0000
Manifest next update: Wed 05 Nov 2025 11:00:29 +0000
Files and hashes: 1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=)
2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: UuIciQ9e0g9+SIhj0ZHUD01Y3BkEfpUdEByPgIp6X8Q=)
3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=)
4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:85:41:d8:47:86:bf:42:b6:f0:d5:d5:2f:6f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Nov 4 11:00:29 2025 GMT
Not After : Nov 5 11:00:29 2025 GMT
Subject: CN=79fd0d2a2001c60524188b06c6457f1b199aafc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:e0:b2:1c:d7:76:67:03:4c:0c:25:27:62:
56:b6:18:af:1d:86:3c:90:ca:07:56:9e:2a:d5:08:
9f:8b:73:77:22:ae:15:28:1b:73:cd:4a:7a:ba:6e:
79:c2:78:64:c9:0c:a4:c7:c0:50:6f:d1:4e:45:f6:
97:94:ed:7a:cb:e8:b3:39:ad:ac:90:c6:3c:df:f6:
d9:11:5e:17:c8:25:4c:fa:e1:35:0a:1f:b9:11:0c:
da:d9:10:f4:2a:e6:6f:dd:41:47:61:a9:d0:89:f8:
95:85:6f:f9:2d:c6:a8:86:2a:76:d8:d2:fa:cc:06:
2b:f1:7a:48:e9:fe:91:60:df:4a:da:96:b4:97:b8:
33:c0:37:af:08:ef:9e:6d:84:e5:7a:69:75:32:ff:
12:2c:d9:66:10:ce:36:5f:21:b9:a9:14:2e:d1:b7:
70:a9:d9:08:d6:ee:86:3d:0a:31:02:40:eb:9a:9a:
e4:b1:4e:54:0d:85:f4:43:d7:30:3a:73:23:16:9f:
b3:2d:02:ba:b7:e2:c7:af:34:f4:67:ec:5a:f2:94:
90:83:a1:ad:31:94:80:aa:37:00:05:18:5b:c2:d0:
75:8d:65:35:d9:a2:50:3b:17:eb:78:85:d5:df:61:
df:c9:bc:28:f7:57:2e:d9:5c:f9:fc:f8:1c:09:b0:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FD:0D:2A:20:01:C6:05:24:18:8B:06:C6:45:7F:1B:19:9A:AF:C6
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3f:23:8a:60:93:2d:bf:2a:77:1b:ac:31:3c:b5:3a:99:e9:
14:e0:fc:e4:33:1d:6f:9b:3a:bf:02:9a:07:fe:e0:8c:21:15:
bb:61:6f:0c:c0:e2:eb:8b:9b:dc:5b:34:62:6e:4a:c0:42:df:
2f:6a:82:24:db:45:a7:9d:a8:08:6e:07:16:3e:d9:43:02:b7:
d8:e8:7f:d5:f5:40:3e:cf:95:35:e3:af:d5:61:bd:59:86:df:
d7:96:69:3d:a6:dc:0a:8f:fb:7f:86:63:77:c1:15:ff:51:17:
e9:55:7b:25:09:d7:8d:21:23:0b:33:73:3b:e5:92:0c:47:46:
21:67:0f:1d:37:1b:09:3b:4a:07:18:b2:67:a6:4b:fd:b5:41:
0a:31:3e:e6:b0:20:a3:ab:79:37:59:1b:e2:97:df:6d:4e:dc:
c7:a2:75:a1:81:f7:4f:83:37:5a:46:8b:6b:7a:f2:f7:24:ec:
04:f7:43:ae:fd:4f:d5:28:9a:07:5e:8f:37:49:b4:b2:f4:64:
90:6a:29:ec:9b:fa:81:88:d6:b0:7f:49:45:c7:3f:6f:0e:71:
7e:d6:c3:1a:8f:50:dd:3d:9c:51:bc:76:2f:74:49:89:4d:a2:
f5:56:75:ef:c8:f4:8d:35:1c:e1:7f:5e:ae:e4:74:be:ef:52:
dd:6c:f1:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhoVB2EeGv0K28NXVL2+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi
YjZkODAwHhcNMjUxMTA0MTEwMDI5WhcNMjUxMTA1MTEwMDI5WjAzMTEwLwYDVQQD
Eyg3OWZkMGQyYTIwMDFjNjA1MjQxODhiMDZjNjQ1N2YxYjE5OWFhZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXfgshzXdmcDTAwlJ2JWthivHYY8
kMoHVp4q1Qifi3N3Iq4VKBtzzUp6um55wnhkyQykx8BQb9FORfaXlO16y+izOa2s
kMY83/bZEV4XyCVM+uE1Ch+5EQza2RD0KuZv3UFHYanQifiVhW/5Lcaohip22NL6
zAYr8XpI6f6RYN9K2pa0l7gzwDevCO+ebYTleml1Mv8SLNlmEM42XyG5qRQu0bdw
qdkI1u6GPQoxAkDrmprksU5UDYX0Q9cwOnMjFp+zLQK6t+LHrzT0Z+xa8pSQg6Gt
MZSAqjcABRhbwtB1jWU12aJQOxfreIXV32Hfybwo91cu2Vz5/PgcCbA4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHn9DSogAcYFJBiLBsZFfxsZmq/GMB8GA1UdIwQY
MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt
N2EwZjcyY2JiMmQ1LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1
LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaT8jimCT
Lb8qdxusMTy1OpnpFOD85DMdb5s6vwKaB/7gjCEVu2FvDMDi64ub3Fs0Ym5KwELf
L2qCJNtFp52oCG4HFj7ZQwK32Oh/1fVAPs+VNeOv1WG9WYbf15ZpPabcCo/7f4Zj
d8EV/1EX6VV7JQnXjSEjCzNzO+WSDEdGIWcPHTcbCTtKBxiyZ6ZL/bVBCjE+5rAg
o6t5N1kb4pffbU7cx6J1oYH3T4M3WkaLa3ry9yTsBPdDrv1P1SiaB16PN0m0svRk
kGop7Jv6gYjWsH9JRcc/bw5xftbDGo9Q3T2cUbx2L3RJiU2i9VZ178j0jTUc4X9e
ruR0vu9S3Wzx0w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:46 2025 by rpki-client