Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: dWdHMqBJftdhJ1thXxjwDMZvjFSu20ZXnhjy+puHU4o=
Subject key identifier: 7A:88:39:7D:F8:BC:05:8F:E0:9B:8D:33:40:92:D0:D2:50:BA:37:8D
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 019A4EF5808CCA0263DD26DFF925F1463081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0C30
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: f+gG+jD6QYj4Er/TgwSjIWA2Xw1XcMOIG1MtQYccaaI=)
2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:80:8c:ca:02:63:dd:26:df:f9:25:f1:46:30:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=7a88397df8bc058fe09b8d334092d0d250ba378d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:a5:5e:b8:97:89:46:46:4b:bc:ad:47:d9:
21:3a:17:71:06:27:19:ea:e3:d5:ea:33:a5:e2:6d:
95:32:7f:df:f0:5b:2a:a7:3b:d9:62:9f:32:16:0d:
51:9b:3c:54:59:73:cd:d9:39:21:88:fe:4a:99:dd:
e9:bc:33:e3:79:16:73:c5:49:b2:b9:b0:9b:02:7f:
26:1e:a4:9f:03:06:d5:d9:1a:d4:c4:f5:f3:fb:75:
eb:81:34:c4:d7:03:76:94:57:80:25:40:53:c2:79:
fd:a9:86:48:0d:a6:53:80:dd:42:93:d3:dd:3d:33:
41:47:1b:19:b1:01:57:1d:41:41:d5:9b:9d:f6:51:
cf:3e:2d:31:1e:44:59:ec:09:00:3b:e9:be:ba:01:
45:24:6d:88:a5:85:eb:91:5f:17:83:bc:b1:53:30:
b9:b0:d0:94:06:a6:a9:33:1a:93:7f:7b:be:f3:af:
63:3d:2e:25:ad:62:7a:f8:42:18:32:39:d9:21:b2:
2b:8f:96:70:64:b6:ac:83:54:fc:e2:56:8b:3f:89:
4a:ee:9d:ff:50:40:23:a1:46:80:96:78:64:23:0d:
1b:81:6c:73:ee:ca:fe:1f:b8:c1:82:28:a5:78:de:
85:6d:c7:c3:98:e8:bf:7e:bc:f3:8a:91:a4:52:f8:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:88:39:7D:F8:BC:05:8F:E0:9B:8D:33:40:92:D0:D2:50:BA:37:8D
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:52:e4:8e:d2:be:f2:fc:e3:ec:11:e5:05:2e:52:87:08:1f:
99:78:e8:51:d7:02:0e:bd:93:6c:52:4c:f5:10:1e:d6:8c:87:
90:1d:d7:7f:98:44:34:a3:f5:79:02:e8:d4:4e:1c:75:1a:a1:
27:e2:af:83:41:91:c1:0b:59:d7:59:dc:33:93:be:18:c8:e3:
7b:a8:32:75:11:52:a1:5c:62:a4:1e:b8:31:34:6d:37:ba:7b:
cd:de:a2:1e:f5:e9:a1:19:e7:24:a8:c2:82:2a:2b:0b:ed:f8:
14:d4:90:0b:78:3d:cb:4e:4a:58:12:86:1e:16:69:f5:f1:6e:
4a:6f:ea:03:35:65:1c:37:74:d6:c5:e7:d8:ed:1c:9e:33:c6:
17:8b:d2:4e:64:87:22:8f:6b:18:45:17:7c:d4:30:a1:16:f6:
d2:a9:c8:7e:55:7f:2f:f9:cf:93:ed:c9:bf:0b:0a:99:20:be:
9f:e1:6f:c3:be:23:9e:d1:a2:61:84:d8:70:27:6a:2c:4c:0a:
c3:9d:a3:ac:e4:7f:c1:7f:e7:3f:2e:e6:89:37:4a:9a:f0:43:
67:ee:3c:28:53:d5:ab:7a:02:24:13:d8:a8:93:eb:bf:63:bc:
ec:80:ab:f8:86:3f:2f:00:84:ac:37:2a:16:a2:71:d3:a9:5d:
ca:c1:62:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:21 2025 by rpki-client