Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: lvpiPS5K6oAmffYge5Y+Q24STBri70+GUnrk1miO594=
Subject key identifier: C8:D3:E5:02:2B:49:63:48:F3:3E:88:AF:F7:6A:97:A9:40:91:81:DE
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 019A4EF5AC0DC7D612E3FFC6CCFD70EB07DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0D10
Signing time: Tue 04 Nov 2025 13:01:54 +0000
Manifest this update: Tue 04 Nov 2025 13:01:54 +0000
Manifest next update: Wed 05 Nov 2025 13:01:54 +0000
Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: 3a82w06P/o08dqZbVWUd3j60nJMX6tlAapSyuvjqIBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ac:0d:c7:d6:12:e3:ff:c6:cc:fd:70:eb:07:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Nov 4 13:01:54 2025 GMT
Not After : Nov 5 13:01:54 2025 GMT
Subject: CN=c8d3e5022b496348f33e88aff76a97a9409181de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:34:f0:c1:57:f5:19:0a:54:59:97:87:90:
73:b3:5f:55:c3:9c:5b:0e:de:f7:63:48:aa:54:87:
f6:f8:f0:0e:5e:bd:11:ad:14:d2:73:b3:f4:60:bd:
70:e8:20:01:70:ad:14:ae:55:f1:6c:16:81:70:06:
15:73:8c:ed:25:de:00:a6:6a:e9:ad:e6:82:9c:8e:
43:cc:08:49:26:04:36:60:e2:ab:72:62:74:59:62:
01:14:a1:0c:d2:c8:30:e3:3e:62:ff:e8:fd:85:8c:
ed:76:d8:0e:3e:bf:7a:08:c6:ec:ec:3d:9c:01:82:
28:72:80:b5:76:56:d5:5a:c5:89:94:23:bf:d8:0f:
f2:31:60:8f:23:b2:cb:ac:78:1c:1a:60:eb:63:3e:
07:64:8b:f8:7d:94:ee:3e:7c:86:c0:0d:82:b7:1c:
1c:c7:54:e1:b5:29:67:df:0c:0a:45:50:da:17:1c:
cd:fd:20:f3:73:49:ef:2a:60:8f:81:33:1f:67:e7:
e4:ec:6e:47:73:00:d3:8a:5e:0e:f0:55:2e:7c:81:
5e:c2:c1:d0:93:e8:c3:16:bb:42:98:25:1a:7f:04:
22:ac:a0:70:df:fa:69:e2:4f:fa:26:8e:a5:e3:bc:
bf:63:de:92:5b:1f:e9:56:04:b2:04:95:f7:69:13:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:E5:02:2B:49:63:48:F3:3E:88:AF:F7:6A:97:A9:40:91:81:DE
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3d:41:ed:90:0a:d7:48:d1:b6:3a:fb:09:ab:d9:b9:ba:d8:
5a:3d:14:5a:5b:c6:63:ad:23:db:af:e2:5d:d5:b0:96:55:2e:
4a:ac:0b:ed:cd:43:92:36:1a:91:64:d0:df:39:ff:1c:16:84:
42:72:af:43:b3:0b:7a:b5:a2:53:9e:9d:3f:c7:98:2b:e2:1c:
13:89:1d:78:2f:ef:a5:e1:2c:8a:8f:d0:d3:3f:7c:97:e2:f7:
d4:39:e1:34:b1:c5:d9:ee:ca:0f:c5:07:cd:93:52:40:68:a3:
cf:02:08:df:3a:1b:5d:c0:f3:ab:eb:e5:17:25:1e:db:82:51:
8a:11:01:7e:95:18:68:bf:ac:c5:47:1e:91:e5:96:dc:21:f6:
fb:2b:8f:cd:99:6e:d4:54:79:61:87:56:72:b0:ff:9f:fd:c3:
8d:69:78:7f:d0:74:b3:52:41:85:20:ee:97:64:a8:73:e3:70:
88:e9:7b:03:20:63:b0:89:27:8a:0d:a7:ce:0d:35:87:b3:02:
e8:ff:0a:e5:57:f6:bc:20:5e:9b:f5:c4:9a:29:3c:b6:52:d6:
7c:d0:f4:25:40:7b:a7:be:e6:13:f1:88:84:87:49:ab:e4:05:
ae:92:d2:cb:4a:5c:4e:35:46:b4:bb:1d:fa:ae:03:d9:23:0f:
f3:b3:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:20 2025 by rpki-client