Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: h8ARYdCXKnZDNZd4wqjsUROly9TYhlSVYMwsq5kmMvY=
Subject key identifier: 87:F6:78:04:02:02:7D:FA:EB:EE:AD:B9:D7:69:66:6E:0A:C4:3E:5B
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 019A02FE808ADDC26519AB6B15761DA4F469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 1382
Signing time: Mon 20 Oct 2025 19:00:24 +0000
Manifest this update: Mon 20 Oct 2025 19:00:24 +0000
Manifest next update: Tue 21 Oct 2025 19:00:24 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: ia+T+x5q546oAPp1Rbep9rHfONS/nGfeJwE+cwVBl7s=)
2: PQhWLSkGUa_VMVGVuYBQSUZ_P_A.roa (hash: 3kRwsyvbLLbFqSNU/EJCsmBYkp3oO56TR7kGsRhAuv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:80:8a:dd:c2:65:19:ab:6b:15:76:1d:a4:f4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: Oct 20 19:00:24 2025 GMT
Not After : Oct 21 19:00:24 2025 GMT
Subject: CN=87f6780402027dfaebeeadb9d769666e0ac43e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:c9:96:cb:b5:b5:86:6e:ee:8d:20:82:d4:
3e:68:21:ca:35:41:df:b6:8f:0e:40:42:98:29:e0:
af:ff:f7:7b:78:7c:77:a2:9f:b8:18:67:28:ad:e8:
d8:a3:35:ab:6f:ca:62:d3:10:f9:da:a3:56:eb:ac:
4c:d5:0e:e3:1d:8d:bd:c4:a6:74:1a:55:b9:c5:c5:
ae:3f:be:99:c8:a0:5e:76:4d:4c:fc:38:fd:00:62:
4a:4e:19:86:a0:a3:07:cc:73:5f:e3:0f:83:f6:78:
80:0a:94:8f:38:07:18:91:92:12:4f:50:55:01:42:
f7:44:fd:f2:e3:93:bc:f5:32:c7:a1:7a:6a:e1:be:
62:c2:36:99:5f:bc:e4:49:9f:e9:01:f0:03:8c:af:
bc:27:1b:a2:bb:81:45:89:e9:0b:d1:7d:d1:71:2b:
7c:58:70:a0:ec:d8:d7:3d:76:00:34:09:d8:9c:10:
5f:e7:bd:93:09:5a:55:08:5a:15:fe:32:3e:9e:f2:
7a:be:58:39:0e:cc:70:a4:ad:82:a6:89:5a:69:e9:
c5:0a:21:6a:64:0c:b8:d9:0c:01:8d:96:5c:72:f9:
be:b7:8b:16:a8:43:f4:ee:aa:a6:ff:05:90:76:3a:
a3:d8:ca:26:3a:bc:60:71:bb:a0:be:fd:28:78:2b:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:78:04:02:02:7D:FA:EB:EE:AD:B9:D7:69:66:6E:0A:C4:3E:5B
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:54:fd:9b:8a:68:19:c0:1e:70:3c:8c:c4:68:6e:4e:07:28:
2b:7d:a9:67:01:5e:fd:82:ec:26:5c:1a:5c:2a:b5:b6:b9:6e:
f8:49:3f:32:0f:fa:72:1b:5e:f9:ab:91:2a:82:f7:4f:d6:d5:
40:7d:89:1f:8a:6b:28:87:5f:3b:ca:47:f2:7c:be:61:dc:a5:
1e:42:29:62:25:4a:fa:24:7b:c8:03:55:79:1b:a5:38:83:56:
4c:d9:0e:ac:87:88:44:97:95:86:54:71:02:da:0b:86:d9:50:
9e:2f:2c:04:7c:06:55:90:11:fd:b4:9b:cc:bd:c2:21:2d:32:
62:3a:9e:03:c6:85:7a:7c:0e:0a:b8:9e:b4:ed:e5:e7:23:d8:
a5:dc:78:5b:84:50:ce:37:f3:66:f1:bc:04:42:58:10:f7:7f:
24:d5:ad:c6:5e:39:a9:73:f2:f3:49:b6:8b:2b:1f:73:92:cc:
48:0b:33:6e:99:2b:bf:e6:2c:67:ca:03:94:5c:5e:4b:de:f6:
6b:c0:77:e5:4e:9f:b6:4b:a3:06:91:14:e7:79:e9:6f:f6:85:
9b:81:59:d0:15:9e:5a:a9:96:37:b6:6d:2a:01:7b:dc:1d:1d:
85:35:50:40:e8:62:44:f6:70:e9:a7:28:a6:83:9e:c2:1b:52:
c6:a1:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:24 2025 by rpki-client