Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json)
Hash identifier: jOouYUztpJ6C/RjBh9R6o+JjRpllD8Zhiv8uuP+I1FA=
Subject key identifier: C2:B4:73:4C:42:60:FD:61:7A:BC:F0:F1:E2:4C:84:F1:DE:7D:35:5F
Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Certificate serial: 019A4EF46B3453DD614DDA6C0D31EF80F0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:32 +0000
Manifest this update: Tue 04 Nov 2025 13:00:32 +0000
Manifest next update: Wed 05 Nov 2025 13:00:32 +0000
Files and hashes: 1: 6kCBLIZL1Utyl61fy1p6EW7akTU.roa (hash: NMn7Jz/myMcH5rlH91oLz3Top7oHGVHXBAR/Jc98yhE=)
2: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: 5XsTX9QIwGmj0QAEwmeyx37vlTHJeQKyWfm7xmNfz3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6b:34:53:dd:61:4d:da:6c:0d:31:ef:80:f0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Validity
Not Before: Nov 4 13:00:32 2025 GMT
Not After : Nov 5 13:00:32 2025 GMT
Subject: CN=c2b4734c4260fd617abcf0f1e24c84f1de7d355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:81:15:a5:1f:4f:10:3c:aa:c2:8d:03:66:
d1:3b:7e:2b:a3:05:63:d3:12:e3:05:cf:d7:3a:9c:
f0:a9:a9:54:33:1c:92:29:fa:e6:bd:f5:2d:0a:8b:
21:71:54:3b:a2:d8:26:9d:e3:63:b9:87:9b:f9:f5:
c8:bf:79:fa:1f:4b:60:10:d5:00:84:dc:26:2c:94:
71:bc:14:79:8a:c5:f0:22:dc:1a:7e:49:0d:83:9c:
73:b8:c6:05:51:b3:90:e5:69:6f:05:ac:97:0c:47:
30:fb:cb:11:db:2d:3b:52:c8:73:ca:b4:49:9d:75:
0d:30:aa:0a:8a:32:83:8e:08:d3:d2:30:ff:30:10:
50:f9:43:6d:8a:39:85:28:8e:02:49:1c:6b:fd:21:
51:68:10:9d:02:e4:b2:e4:a0:a6:25:0d:08:50:36:
0d:1a:9f:8f:92:0f:9f:cd:ad:a6:60:59:39:e8:fa:
db:90:2d:4d:d7:6c:e6:05:48:83:b2:0a:e0:86:c0:
01:a7:ac:cd:6c:ca:1d:f7:8a:db:a7:5e:23:b1:41:
2e:be:0d:0e:38:6c:7c:e0:5d:cc:aa:e1:e7:ed:62:
30:8f:05:1b:b4:ed:35:2a:38:f2:d9:f4:9c:f0:43:
83:3e:7f:6a:e3:fe:e2:bb:dc:37:75:1b:72:e9:78:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:73:4C:42:60:FD:61:7A:BC:F0:F1:E2:4C:84:F1:DE:7D:35:5F
X509v3 Authority Key Identifier:
keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a0:d4:49:b0:5d:c2:86:18:f5:5c:d8:83:25:22:3c:4f:c0:
13:f9:c7:ce:43:ab:24:7a:fb:b3:d7:a9:5f:d9:93:73:95:34:
18:dd:2e:e0:3b:3a:ab:41:81:e3:82:84:68:78:10:86:9d:e3:
64:88:73:77:30:6d:85:0e:d5:96:52:16:a5:cf:2a:1f:47:c7:
16:07:35:bd:eb:13:d2:9e:2a:76:91:5c:96:e1:6a:5f:01:8c:
56:ea:68:f9:0e:a2:f5:fd:7f:4a:92:b9:1d:57:1b:70:56:fb:
6c:05:8a:31:8c:c4:dd:77:97:1b:8f:87:68:93:0b:7d:c8:c9:
0c:7a:5c:1e:30:a7:32:b7:7c:22:b8:03:65:9c:5c:85:20:03:
a1:9b:94:a9:65:56:28:d1:5d:ae:5b:d2:b9:17:eb:1e:c9:62:
bd:a8:90:c3:96:75:6d:40:3e:7d:cb:8b:ef:71:33:e0:e5:29:
e3:f4:d7:72:75:d2:1f:b8:f9:24:a7:c7:74:be:c5:97:0f:92:
54:ff:b6:ec:bb:ff:29:2d:b3:8e:44:81:b2:02:d4:5a:f6:21:
6b:77:ab:ab:7d:ec:b3:b7:3e:9f:79:8e:0f:3a:9e:e9:47:cf:
59:fd:52:a1:e3:ac:4e:f8:80:d1:c8:41:a9:e4:19:ef:a0:b1:
f1:ca:a4:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Gs0U91hTdpsDTHvgPD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjViZDM5Yjc0ZjIzZDc2ODNkMTIzOGVhOWFjYTNjNjZh
NjMxYTMwHhcNMjUxMTA0MTMwMDMyWhcNMjUxMTA1MTMwMDMyWjAzMTEwLwYDVQQD
EyhjMmI0NzM0YzQyNjBmZDYxN2FiY2YwZjFlMjRjODRmMWRlN2QzNTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz+BFaUfTxA8qsKNA2bRO34rowVj
0xLjBc/XOpzwqalUMxySKfrmvfUtCoshcVQ7otgmneNjuYeb+fXIv3n6H0tgENUA
hNwmLJRxvBR5isXwItwafkkNg5xzuMYFUbOQ5WlvBayXDEcw+8sR2y07UshzyrRJ
nXUNMKoKijKDjgjT0jD/MBBQ+UNtijmFKI4CSRxr/SFRaBCdAuSy5KCmJQ0IUDYN
Gp+Pkg+fza2mYFk56PrbkC1N12zmBUiDsgrghsABp6zNbMod94rbp14jsUEuvg0O
OGx84F3MquHn7WIwjwUbtO01Kjjy2fSc8EODPn9q4/7iu9w3dRty6XjnBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK0c0xCYP1herzw8eJMhPHefTVfMB8GA1UdIwQY
MBaAFDi1vTm3TyPXaD0SOOqayjxmpjGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDct
ZTNjZmU2Y2VjMGFjLzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDctZTNjZmU2Y2VjMGFj
LzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaDUSbBd
woYY9VzYgyUiPE/AE/nHzkOrJHr7s9epX9mTc5U0GN0u4Ds6q0GB44KEaHgQhp3j
ZIhzdzBthQ7VllIWpc8qH0fHFgc1vesT0p4qdpFcluFqXwGMVupo+Q6i9f1/SpK5
HVcbcFb7bAWKMYzE3XeXG4+HaJMLfcjJDHpcHjCnMrd8IrgDZZxchSADoZuUqWVW
KNFdrlvSuRfrHslivaiQw5Z1bUA+fcuL73Ez4OUp4/TXcnXSH7j5JKfHdL7Flw+S
VP+27Lv/KS2zjkSBsgLUWvYha3erq33ss7c+n3mODzqe6UfPWf1SoeOsTviA0chB
qeQZ76Cx8cqkdA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:12 2025 by rpki-client