Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
File: OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft (raw, json)
Hash identifier: FmkMRhSnqdqlU/sjWS2L711JoaL/bOb1Ju7bkyFY86A=
Subject key identifier: 67:0F:F6:47:75:5D:EE:3B:1D:FF:9C:E7:17:EA:D4:E2:F5:B1:8E:6B
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 0199FD347B26134ABF8CCCD3B05E7F9D866B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 16:01:39 +0000
Manifest this update: Sun 19 Oct 2025 16:01:39 +0000
Manifest next update: Mon 20 Oct 2025 16:01:39 +0000
Files and hashes: 1: OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl (hash: U+Kr9XfYpgr6zEob6dbxukEqg1eohGg/UA/WBuH6SXU=)
2: Vpoq5ZpSGDP-ZXCmZlKnhArAK_Q.roa (hash: 38YyvusiUhw1DBRUCOnZouY1Y0JBlQCEkMbtx6PZeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:7b:26:13:4a:bf:8c:cc:d3:b0:5e:7f:9d:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: Oct 19 16:01:39 2025 GMT
Not After : Oct 20 16:01:39 2025 GMT
Subject: CN=670ff647755dee3b1dff9ce717ead4e2f5b18e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:c0:14:97:48:5c:3a:7a:d1:88:ff:a1:b4:
f5:c7:e8:a3:df:42:ce:78:8f:ee:07:3b:61:53:4b:
ba:94:34:c9:61:e6:51:d2:a3:5d:7f:36:7c:d9:b9:
56:a1:29:41:59:11:55:fc:b5:7e:0f:a9:d2:6a:0c:
86:c8:f2:95:e5:bb:4c:c1:06:d9:21:dd:fe:e5:d5:
1d:25:2e:8e:21:5c:6e:43:03:cc:72:cc:83:2a:fe:
62:43:fa:a0:7f:e5:31:9e:70:ec:df:a2:61:41:5a:
3f:cf:07:84:4e:c6:b5:11:f3:db:ab:59:36:2b:73:
8e:1a:46:5c:be:24:c1:27:d0:d5:26:fd:45:ca:3e:
9e:80:73:b9:56:49:8b:16:d4:a9:0a:e6:e2:83:b6:
e7:0d:64:df:2b:a6:a9:95:30:71:18:29:77:12:3c:
d3:90:64:56:d9:7e:79:cb:fa:fe:b8:c4:88:ac:97:
cb:02:74:30:35:88:b2:9a:79:08:71:e9:50:12:b5:
97:6d:a7:0c:25:9c:b5:e9:19:c6:a5:d0:8a:39:d5:
8b:38:bb:f1:d0:30:d1:bf:41:ec:c6:d8:7d:04:07:
26:b3:bf:a1:9c:bf:f0:54:77:64:9a:ce:29:23:d6:
6f:50:dc:03:94:df:e7:2e:4b:f6:f4:fd:6e:57:fb:
ea:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0F:F6:47:75:5D:EE:3B:1D:FF:9C:E7:17:EA:D4:E2:F5:B1:8E:6B
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7d:96:9a:13:54:64:16:8a:21:2a:17:c7:e8:02:c5:54:29:
64:4c:ab:18:d2:d6:42:30:0f:ef:9d:84:4a:bb:d4:6c:d4:42:
74:1a:5f:21:0d:41:26:81:47:ca:67:1b:72:ca:26:e8:58:8c:
86:fa:91:b7:8a:64:b6:43:fe:b9:e2:1c:a5:7f:80:36:63:22:
cb:08:f9:0f:65:c3:45:51:7e:74:c0:64:5f:a0:48:82:be:03:
84:e1:89:f0:04:53:e2:40:11:00:27:75:2b:f3:03:d7:47:da:
0e:b5:e2:16:d9:43:48:91:b0:3d:d5:05:f2:f3:52:4e:e3:18:
c9:90:c1:81:0e:2c:55:9f:fa:6c:27:59:f0:51:5f:4d:f6:c8:
d6:aa:36:2d:ea:48:e2:5c:5a:65:60:17:c0:82:a2:f3:ab:00:
d9:68:8a:40:9c:eb:0c:02:4f:00:0f:d5:4f:08:1f:98:dd:db:
56:28:2d:e2:7b:c5:68:45:2f:f4:d6:70:ea:1b:11:9a:b6:de:
e7:41:83:5b:8c:d8:0d:c6:03:d0:ea:f5:84:3e:c9:0b:47:2f:
7a:36:ba:4e:01:1c:18:07:d5:7e:a7:26:46:0a:37:80:06:fb:
de:a3:cd:46:51:0a:e6:d8:1c:36:82:97:0a:1b:99:30:cf:4f:
b7:84:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:20 2025 by rpki-client