Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: Rc/ye0JFiuBqRqtSG6s13951ftvk/rTeqnqzFOXZPeQ=
Subject key identifier: E4:9C:13:98:25:41:6A:F1:09:F5:2D:A7:70:C9:0C:54:55:AB:00:22
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 019A503E3EE4FE6DE7D7CA8A619051D30C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0DC3
Signing time: Tue 04 Nov 2025 19:00:47 +0000
Manifest this update: Tue 04 Nov 2025 19:00:47 +0000
Manifest next update: Wed 05 Nov 2025 19:00:47 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: 1cFZISjB2GYGZA0qEYZN8nIBlZiRYAzgJm8FaRz3mqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:3e:e4:fe:6d:e7:d7:ca:8a:61:90:51:d3:0c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: Nov 4 19:00:47 2025 GMT
Not After : Nov 5 19:00:47 2025 GMT
Subject: CN=e49c139825416af109f52da770c90c5455ab0022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:4a:ee:58:19:67:b1:64:1c:8e:7b:5c:c6:
4d:72:f7:10:e8:6b:74:35:d7:c4:de:9f:24:fb:a6:
52:de:6e:07:bb:31:d4:fb:c7:7b:7a:a4:9f:19:d8:
a3:88:50:29:61:20:d7:08:53:74:9b:59:e8:d2:f5:
3a:89:6c:d1:51:5a:0e:ed:d8:83:60:a9:9f:d7:6e:
0a:f0:fb:ba:2b:3f:5a:8a:66:c6:9f:09:59:6c:cb:
61:c2:85:54:e1:bf:37:3c:2c:12:74:16:99:a2:b6:
ea:85:ff:42:57:4c:bc:42:11:3b:a0:41:a2:10:77:
b8:b8:a0:25:85:d6:b2:b4:9b:07:db:42:8c:e2:ca:
ad:ba:57:28:4b:19:b7:05:24:15:ab:ec:b1:7e:4b:
21:72:06:60:36:d2:e6:e3:41:4a:c7:fc:23:b8:2a:
c3:8c:f3:04:8e:1f:4f:6c:24:2a:a8:06:72:81:28:
e1:88:33:6b:a0:a8:07:f0:b4:70:d2:5b:44:ed:cf:
05:94:8c:c8:92:e9:3a:92:d4:c0:97:32:22:7b:00:
56:8d:af:f2:f4:4d:42:5a:fc:8c:28:1f:ae:60:01:
aa:e9:25:be:73:73:8d:60:0d:87:3f:86:ec:18:ae:
dd:33:4a:55:8d:6d:ea:42:2a:1d:8e:a8:4f:1a:58:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9C:13:98:25:41:6A:F1:09:F5:2D:A7:70:C9:0C:54:55:AB:00:22
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:32:89:37:37:3d:56:96:ce:80:1f:e5:b3:5a:3d:78:ee:9d:
5a:41:6d:10:9c:0b:46:e0:5e:ec:d8:2f:d0:76:a2:55:a2:c1:
a1:9a:b1:7e:34:2f:28:5c:38:18:cf:34:72:0c:9e:f3:cd:f2:
13:f4:4b:cf:30:32:4a:1d:4a:63:88:92:cc:aa:64:c8:53:87:
fa:92:86:58:c8:30:a7:2f:92:f5:93:23:a7:43:34:1b:21:d4:
20:5d:58:5d:ac:04:59:75:ed:3a:ef:56:8b:31:36:d1:c7:da:
d8:f3:0e:e1:e5:ce:f0:25:7e:41:d4:77:60:77:4a:1b:48:06:
b7:fe:a0:55:bd:5b:7d:39:8b:0c:ce:e5:e1:12:98:e8:05:3d:
03:54:83:60:e7:f5:46:18:e1:97:a2:ad:ca:3c:82:98:3e:fd:
fb:af:18:75:a8:12:d5:f3:4a:24:4f:dc:1a:7a:1f:0d:16:89:
b8:b0:7b:95:3d:38:b1:b2:7b:6f:51:16:68:ad:f5:cc:6b:ed:
9d:3d:5b:2f:50:db:8b:b4:05:fc:ab:27:07:ae:02:29:44:08:
6b:69:35:3e:5a:3d:66:d2:27:a7:63:5e:52:59:b5:2d:89:df:
29:fe:72:c7:b1:88:f6:cb:ab:23:8b:fa:09:a6:2f:3e:52:f5:
2b:ab:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:51:23 2025 by rpki-client