Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: heZsncJmRHKeNfmM2tTpEcwF/hqAKsbTNqv6a2JswnQ=
Subject key identifier: 3A:94:C5:E0:54:EA:01:A2:AA:2B:39:B0:9D:32:4D:70:B6:7D:FC:9B
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 019A01482B1ECE21297DB4E59E2BF10069CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 11:01:38 +0000
Manifest this update: Mon 20 Oct 2025 11:01:38 +0000
Manifest next update: Tue 21 Oct 2025 11:01:38 +0000
Files and hashes: 1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=)
2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: q6P/aERuOy/KEnqE0JioPCV2NXpT6OHONHt6OikSdqc=)
3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=)
4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:2b:1e:ce:21:29:7d:b4:e5:9e:2b:f1:00:69:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Oct 20 11:01:38 2025 GMT
Not After : Oct 21 11:01:38 2025 GMT
Subject: CN=3a94c5e054ea01a2aa2b39b09d324d70b67dfc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:b8:41:23:50:cf:1d:51:dd:cc:48:a9:de:
95:c9:ed:84:79:51:2c:d9:90:9e:b4:31:79:aa:16:
74:e6:00:e0:8d:9f:78:fa:ae:90:20:61:85:14:4e:
f7:45:1b:e0:62:ff:08:ec:f9:10:00:00:32:39:e1:
55:c6:01:61:ed:74:b4:3f:70:a8:2c:ef:34:d7:9d:
56:9a:ef:92:7c:78:e6:df:fe:2a:5d:f1:76:ac:8e:
39:41:6f:19:4b:37:87:2b:e1:a1:29:7f:22:16:0c:
27:65:c0:80:81:09:5c:18:5d:5a:0a:60:65:a9:60:
b4:eb:71:3f:80:9f:5e:83:12:7a:b9:ad:8a:14:2d:
c0:31:63:05:3d:df:7b:03:68:2a:01:de:ee:fe:91:
d3:33:d8:4a:75:b3:85:02:e4:4d:61:3c:f9:ff:5e:
de:21:7b:92:ef:a9:a8:19:be:c0:ce:5a:28:fb:df:
2f:c2:19:33:76:2d:d4:35:79:39:37:7b:71:e6:b6:
d3:5b:e5:7b:ce:00:58:ab:31:1a:1c:1a:76:16:fd:
b0:9e:51:91:b4:45:90:5c:c2:f4:23:3b:0a:83:41:
cb:25:9b:60:ae:81:bc:9e:8e:e4:bd:cb:c2:42:43:
21:a9:af:5b:4e:ae:47:7a:6d:08:a4:e4:15:b2:64:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:94:C5:E0:54:EA:01:A2:AA:2B:39:B0:9D:32:4D:70:B6:7D:FC:9B
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:aa:b7:7c:d6:5e:ff:b0:19:f8:0b:0f:31:9f:83:dc:25:c2:
87:04:e5:91:97:72:a4:1b:8c:88:ca:c5:6c:fe:0c:7a:33:f4:
fe:b9:61:da:6d:74:79:24:3b:a7:55:0b:18:d1:65:80:3d:84:
c1:98:59:70:27:8f:77:fe:14:bc:2c:92:78:1b:f9:18:10:bc:
6d:11:a9:4c:78:a4:52:2d:7d:fa:96:a3:42:ea:fb:6f:93:8c:
f7:6f:17:e6:4e:8e:1e:91:ca:2b:a0:5d:4d:59:fc:63:52:cb:
be:20:cc:69:d6:fc:e4:df:bd:90:e9:16:a8:3f:75:7c:cc:e5:
c4:f1:09:d7:a2:49:07:40:78:63:a3:b7:9f:40:5f:e5:37:7b:
ab:8c:01:a3:1a:be:71:1c:89:39:92:76:91:98:41:74:e0:26:
32:1b:07:af:ec:a0:ed:23:5f:dd:60:a4:7f:4a:c3:83:7c:4c:
70:2c:ad:eb:d0:0c:45:33:e5:a8:17:e1:73:d6:9a:0c:f8:20:
5f:f1:fe:d7:5d:56:5c:10:c6:cb:04:56:64:94:8f:b3:a9:49:
48:f3:1e:39:09:20:0a:49:ce:1b:2f:c4:e2:8e:bf:a2:a7:3e:
90:b3:1b:78:2a:03:63:9f:0e:1d:0e:df:e6:ec:10:59:ba:7b:
89:4d:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:16 2025 by rpki-client