Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File: OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier: YM24WQvD273Gb+gqYf+B4KiN5TRytxSvs/TKVgMS1Ao=
Subject key identifier: 31:B1:86:F9:51:26:0D:38:5B:30:1E:72:21:38:E2:2B:31:07:0A:1A
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial: 0199FCFD1BEC09B38D021A83C6B1B973F324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number: 13A4
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa (hash: FOOM9kMpwPkSzslFZMnKyIoaQBQCR3WyFVCTjxN9D/4=)
2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: HhztQFLPzspUCXxn5RHqn1P7prUs5NMEwP514MOLIUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1b:ec:09:b3:8d:02:1a:83:c6:b1:b9:73:f3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=31b186f951260d385b301e722138e22b31070a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:53:9c:18:f5:2a:61:2f:37:7e:2a:22:9d:
94:31:08:00:6e:81:5e:81:a6:ed:47:76:30:95:19:
5b:ae:90:e5:16:f2:aa:ee:10:cb:65:cc:df:7d:3f:
de:ea:bb:58:0a:7a:88:d9:86:32:61:79:e5:82:8d:
c8:6f:e5:f4:ca:c9:c3:bd:50:59:9e:35:a7:ce:6a:
a1:82:17:f1:00:94:be:dd:0c:bc:9a:d6:57:32:7c:
dc:5a:f7:dd:cc:0f:12:25:fa:e8:71:d4:5b:41:8d:
82:02:21:f0:95:96:d0:a1:77:3a:b2:40:93:d7:d3:
cd:ed:61:2f:ff:31:95:7a:fa:36:c9:37:54:5e:a9:
55:e3:cb:7d:32:19:3d:5f:df:73:20:ee:b3:cd:fd:
58:59:c8:d8:b2:e8:8e:4a:4b:83:1c:62:cc:50:2a:
fe:58:fb:17:53:b3:b6:04:54:e3:f3:d1:b5:04:2a:
42:9b:d3:e1:e1:57:b2:f8:8e:5e:c1:31:f4:40:67:
2c:09:37:5b:61:fb:cf:4e:97:0e:43:2a:ae:22:ad:
5d:15:8a:ac:49:f8:ac:a7:7b:55:84:a1:e2:e4:79:
d6:8a:4e:c4:ba:bc:cc:1a:9b:ea:7e:76:22:3b:44:
d2:1f:1c:9a:a9:6e:28:f3:5c:6d:29:01:52:33:12:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:86:F9:51:26:0D:38:5B:30:1E:72:21:38:E2:2B:31:07:0A:1A
X509v3 Authority Key Identifier:
keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bf:de:64:c4:58:b2:eb:8b:73:8d:67:68:d3:56:e6:fd:e3:
3b:b5:bd:b3:de:7c:1c:c7:53:af:07:e6:23:83:be:be:97:3f:
4a:fa:7b:72:54:28:31:0f:6b:bb:4b:41:63:fc:f4:96:12:47:
95:c2:80:3c:21:c8:63:d6:b6:7d:cf:41:a5:de:1a:5f:b9:12:
09:d8:13:68:30:0d:11:72:82:f9:74:38:e2:f4:1e:ea:a9:43:
a0:57:dc:ba:37:e3:8f:e7:6c:89:58:60:8b:d5:41:9c:3d:a5:
8c:da:63:bf:08:87:63:a2:d2:8a:f9:88:ea:fc:5c:a2:79:f3:
65:f8:46:22:9f:bd:89:e8:7e:0c:2d:72:27:ac:da:0b:73:36:
13:b6:85:bd:c2:30:37:50:c7:65:fb:26:02:08:b1:cb:35:a7:
f4:1b:a5:da:52:c2:ba:67:74:cd:80:6e:e7:95:10:8a:9d:7c:
e7:e1:64:f1:c2:2f:e8:62:5f:f1:41:11:d0:1c:92:70:e0:4a:
4f:d3:36:56:bf:28:57:e9:b4:6a:5a:fa:82:90:52:cb:88:70:
34:b6:4b:95:0d:ea:72:15:29:2d:67:ab:9d:31:5e:1f:9d:73:
18:0d:b7:32:89:e4:a1:19:a4:5a:3e:a8:74:81:2d:e1:a2:39:
f9:29:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:52 2025 by rpki-client