Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: J+wCFQG5TDlXlnZ1I2iNKnQjYQV2NXvf0jZ5oFXhrnM=
Subject key identifier: 2B:6E:81:02:0C:49:91:31:04:C0:AC:4D:02:50:FE:DA:2E:09:6E:BE
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 019A033573BF5D783FC537D02239F0E20F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 16EB
Signing time: Mon 20 Oct 2025 20:00:25 +0000
Manifest this update: Mon 20 Oct 2025 20:00:25 +0000
Manifest next update: Tue 21 Oct 2025 20:00:25 +0000
Files and hashes: 1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=)
2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: Z0d8s1fi5qf4Thkv7SrIgykcpQ8mP90GMmcLCKK1fBk=)
3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=)
4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:73:bf:5d:78:3f:c5:37:d0:22:39:f0:e2:0f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Oct 20 20:00:25 2025 GMT
Not After : Oct 21 20:00:25 2025 GMT
Subject: CN=2b6e81020c49913104c0ac4d0250feda2e096ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:61:4f:26:60:69:4b:e1:59:fe:6c:be:62:
bb:58:9e:53:ad:63:8f:07:11:39:51:ca:3c:b7:0a:
fb:8c:27:a9:22:a4:35:b2:a9:a3:79:45:8e:08:1d:
15:28:f1:c4:05:26:d2:00:35:71:5c:ca:0b:11:cd:
26:96:da:7a:0e:2c:8e:5b:77:9c:68:4a:4e:a6:5c:
3a:b5:df:f6:f6:cb:7d:0a:17:3d:46:92:7b:90:f0:
8d:6a:4a:3a:9e:e3:e6:cf:4b:9d:55:e6:35:b6:10:
86:33:54:41:4c:f6:25:ea:28:9e:3a:21:57:a7:27:
43:54:bb:27:e4:20:1c:16:df:59:50:39:74:0f:9c:
8d:5e:e6:ca:c7:1d:2b:e2:be:be:4d:8a:39:f6:da:
34:91:0e:08:df:a0:38:2f:3b:e0:52:85:11:74:17:
c7:3c:1d:3b:00:ec:19:c5:46:98:9c:96:34:95:96:
a4:42:4e:22:bc:cb:79:10:c1:36:d5:55:ca:c2:7e:
19:cc:10:72:80:9b:ac:fa:70:7b:6e:d7:63:8e:4b:
76:c4:50:3f:13:5d:8c:28:03:b7:b7:3d:09:5b:90:
6f:e9:1c:6f:3e:d9:4b:9b:c1:1e:77:fe:48:05:9a:
ec:6a:3f:c2:98:3e:e1:1f:7d:a7:5a:63:e6:35:a8:
b7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:81:02:0C:49:91:31:04:C0:AC:4D:02:50:FE:DA:2E:09:6E:BE
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5b:4e:d2:ce:5f:51:ec:93:c6:e5:37:84:4f:54:15:b9:c5:
30:c9:b5:1f:93:ed:7d:58:a3:7b:c3:df:f9:b8:43:16:49:0a:
3f:73:22:2f:89:13:00:fb:61:fd:a0:bc:06:ea:8d:07:c0:1f:
ac:85:0e:e3:86:c6:ec:00:74:53:c5:d3:af:8d:e3:7e:eb:78:
6f:56:3b:a8:54:42:ca:f0:af:0b:fd:6f:10:05:35:d6:ba:d9:
68:71:51:81:30:ce:a3:31:9b:0e:ba:be:94:a8:e2:10:4f:d8:
79:8b:fa:30:7e:9b:7e:28:84:28:65:5a:80:c6:84:e0:cb:5f:
f5:74:f4:5c:e2:de:c8:df:2a:82:66:02:8b:64:99:e0:6f:85:
80:9f:a3:a0:1c:b2:06:a0:54:ef:fc:f5:c5:3a:dc:15:6c:d0:
2d:0b:65:9a:3c:c8:cb:20:63:11:3f:05:b6:5e:b1:76:b9:ae:
fe:bc:cd:34:6e:9c:59:8b:af:1d:6b:e1:f4:de:a2:12:55:b7:
51:b6:16:10:60:11:a7:d4:a8:29:01:9e:9b:6f:1d:08:f4:fb:
a6:82:01:1b:b9:57:ec:a0:17:33:b8:71:e5:99:db:ab:a8:50:
1c:7a:87:7d:b5:80:f1:6d:89:cd:04:fe:22:34:01:a5:de:51:
30:d2:e1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:10:29 2025 by rpki-client