Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: LNgodC7+KO1KkgcOAH93YDJ+MMyJySZKXGcsc28rsgc=
Subject key identifier: FE:76:81:F7:9E:56:FA:23:BF:A7:B9:6E:9D:34:EF:F1:3C:1A:0B:EE
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 0199FBEBC361190016B7A89AAFB14BD4B714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0A39
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: T8mtS+NvduwFNcQF90Z6/3X5CHuriMcCnAPWYpOGhvg=)
2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c3:61:19:00:16:b7:a8:9a:af:b1:4b:d4:b7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=fe7681f79e56fa23bfa7b96e9d34eff13c1a0bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:48:ff:c5:73:f2:14:2b:be:35:5e:84:8f:
be:dd:70:c8:60:65:40:da:fa:bb:34:74:b2:43:35:
52:5c:78:26:e0:01:73:28:01:1f:c0:ec:a4:e0:5c:
c1:e2:fd:b8:6f:b3:91:8c:bc:94:4f:e6:19:40:34:
89:df:94:70:62:10:2a:f3:11:ea:7b:fb:b4:dd:a9:
10:ec:43:3b:d0:b7:f2:80:a0:ef:92:3b:eb:50:35:
c3:a9:fe:94:33:e1:bf:df:f2:76:ee:ad:ac:e4:a3:
18:38:f4:2a:54:ad:39:83:b9:64:4f:3a:b2:00:e5:
39:26:76:c4:e5:0e:41:ef:51:d2:47:ac:75:71:92:
92:3c:04:2f:57:76:73:86:a2:99:81:d8:70:6f:59:
1f:35:f5:7b:a0:e1:49:7d:0b:e9:6d:ad:f1:d6:3b:
d8:2c:28:e1:20:c8:82:c2:dd:3e:18:64:28:4e:7c:
7c:62:fc:03:3d:ec:6d:ab:38:bc:7a:41:96:8e:ac:
cd:98:97:08:4d:1e:8f:77:60:c6:d2:5e:b7:dd:c1:
0d:fb:23:e8:73:33:1c:e1:9f:c2:f4:c6:69:15:9c:
5e:20:70:ea:5e:8f:ed:0d:43:a0:37:d3:b3:48:ae:
70:54:55:e3:f0:eb:d6:a2:5f:53:aa:2a:b4:48:1e:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:76:81:F7:9E:56:FA:23:BF:A7:B9:6E:9D:34:EF:F1:3C:1A:0B:EE
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:22:85:19:fb:0d:79:e2:90:d8:c2:4a:7a:61:75:54:eb:f4:
48:62:23:65:c2:11:51:65:65:a4:6d:b8:9f:5a:d4:46:d0:a1:
1a:34:e0:32:ea:21:f8:bf:51:1d:dc:12:5c:d3:1f:46:2c:e9:
a5:a7:a5:20:47:55:a8:17:a8:39:19:85:68:39:68:47:f4:88:
60:a1:c7:c3:1b:5c:9d:6e:8f:04:33:c9:e4:ed:08:35:42:cc:
20:53:de:8c:b0:fe:b9:6f:4e:02:53:91:67:80:86:32:9d:1c:
ab:e1:8f:32:89:05:56:d5:b1:a5:49:2b:2e:64:a8:3f:17:e5:
66:bd:26:8f:f5:a0:9a:e1:85:57:a5:80:36:42:25:7f:0d:f6:
ce:8d:a5:fd:7b:0d:fb:00:ef:09:7d:4f:33:04:20:05:8f:d7:
51:fb:6f:4a:09:f0:95:0b:ac:d9:68:96:1e:5e:37:84:d4:2e:
61:d6:f8:3c:f6:8c:19:26:05:30:03:80:fb:65:0f:89:55:65:
17:a8:65:b9:97:1e:9a:25:57:01:2f:a4:ce:72:f3:b0:2c:05:
a2:1a:dc:25:dd:96:89:5b:d0:83:3d:9e:2c:da:db:be:89:8d:
23:31:28:6b:89:e1:2b:23:6e:89:d0:61:fb:aa:e1:ab:92:a7:
2b:5c:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:27 2025 by rpki-client