Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: C6C5fXXO+UYl4Sl4GXAKGYUE+KNVUo23xAl/wtumdAw=
Subject key identifier: 2E:B1:CB:24:42:53:8B:5C:0A:B0:A3:E0:2D:DA:F0:53:21:18:77:E3
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 0199FCFD9E2FBF842CC8B5F52EF66CD7C4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: NJaotZFnvbCZC6dKCr_vEzEYn6M.roa (hash: dqeYK6phWm8PSJhw0mmBUevUz1KleMZYBxhoQuo4/mw=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: l1GIh38P10Nnw/GGn/Ecn6RL0H8D4H52xKJsGJ97ymA=)
3: abyvfDmy4Q3zVDJIfxfSkrtZdLo.roa (hash: IZm94vPLNr133XeI56Dl5DQUBKwgG1pbFRgf8ws+6Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9e:2f:bf:84:2c:c8:b5:f5:2e:f6:6c:d7:c4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=2eb1cb2442538b5c0ab0a3e02ddaf053211877e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:0c:dc:30:ab:07:8f:57:71:7e:5c:4c:8d:
3f:fe:cf:fe:65:6f:2b:36:0c:d3:04:0d:2a:a4:66:
56:61:6c:98:aa:8b:8e:0c:c4:41:7f:c5:4f:5d:ca:
59:a5:1e:09:a4:71:ed:65:c6:12:2e:96:bc:44:a6:
b0:4d:e1:00:1b:a2:ff:c8:3e:22:42:ec:9f:b5:08:
43:61:96:45:68:30:e3:8d:20:b9:0a:02:3d:97:a6:
0b:59:8d:c6:bf:b2:cf:a4:88:f0:c4:1a:e9:c8:ae:
a6:b0:e2:de:6b:1e:ca:de:c8:9b:25:10:e0:01:66:
26:ef:09:d4:1b:5b:30:2b:6c:8b:a6:da:7b:92:c5:
52:a2:4a:0b:ad:72:80:fc:1a:c2:d0:fb:58:39:f7:
e2:65:3d:ae:e9:42:07:fb:a1:6f:5f:4b:73:ad:1c:
53:2f:65:5f:5a:41:b2:76:68:aa:ad:9a:92:fd:6a:
0e:86:2a:ad:7c:ab:87:32:08:39:b4:f9:1e:ed:03:
81:7f:0c:5b:f7:da:18:03:90:48:1d:f2:7e:61:b2:
8d:5b:23:ef:09:df:21:9f:a3:0e:d7:cc:76:f6:4c:
eb:84:5c:bb:30:c9:61:69:60:08:e9:71:38:15:30:
b6:5d:ee:bc:83:1c:42:92:6a:70:fc:5e:df:f2:69:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:CB:24:42:53:8B:5C:0A:B0:A3:E0:2D:DA:F0:53:21:18:77:E3
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:65:f9:c1:5b:28:be:f6:bd:0a:ba:5d:4c:80:5e:43:43:6f:
94:c4:8e:73:77:e0:d0:c4:76:fb:ba:f7:76:ac:59:d6:31:c5:
87:4e:cc:29:9f:f9:dc:89:fa:84:35:9f:1a:61:8c:ca:17:6c:
48:1c:6a:87:eb:46:c8:49:35:30:81:33:a9:7e:29:13:a1:ab:
93:8d:c5:ec:8d:87:a8:fa:27:95:31:3d:ec:dd:2d:24:9a:42:
67:db:e6:19:2c:0d:df:8f:e2:a1:13:1a:1a:8b:e2:31:5b:d3:
2a:82:3a:ab:35:2b:c2:82:4d:1f:58:aa:3b:93:54:d0:fb:ef:
43:e8:af:96:75:ca:6d:22:41:f3:05:e7:52:5a:18:1e:5d:a2:
c9:72:db:41:39:b8:ab:a4:e1:28:e7:75:6d:31:ce:39:57:b4:
9d:95:fc:e3:f0:3c:10:d6:e8:63:2c:3a:84:26:23:e6:da:b4:
97:14:c4:a0:28:40:4b:0a:23:c0:14:18:43:6f:68:0c:c7:05:
0d:7d:80:30:e8:f1:61:b5:83:35:d6:b4:e6:30:5d:56:a7:67:
4b:5b:b2:90:e8:73:06:89:b4:e3:9c:9e:af:c9:a1:1e:aa:a9:
71:d9:7f:71:0d:79:2c:e3:c2:e4:56:6c:59:d7:9a:71:85:33:
e7:25:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:01 2025 by rpki-client