Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: UxlyLU/HXunax/U0Lg9mLckXmy4a+St4LgupL8A9rBo=
Subject key identifier: A5:7D:5B:C3:93:2C:D2:7B:86:EE:22:0F:E5:60:E4:D3:85:45:30:CF
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 0199FCFD6A359D2A995A35E51D238FD9CB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 15D7
Signing time: Sun 19 Oct 2025 15:01:30 +0000
Manifest this update: Sun 19 Oct 2025 15:01:30 +0000
Manifest next update: Mon 20 Oct 2025 15:01:30 +0000
Files and hashes: 1: 8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa (hash: 6ZZJ4QGkpbcq3hIOVhgvm79JeONPbl5ojVu1zQKUgnU=)
2: LiZI8DHKt2cl3ZGAwMQs7hzSWLY.roa (hash: YZv7B4YQ18wMpKvjotc88oKaw7AFVr3K3Ln8F9meSnc=)
3: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: jewogO52w4eTlfzKCrrscMakok5+nWbSj/uq05XFTyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6a:35:9d:2a:99:5a:35:e5:1d:23:8f:d9:cb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Oct 19 15:01:30 2025 GMT
Not After : Oct 20 15:01:30 2025 GMT
Subject: CN=a57d5bc3932cd27b86ee220fe560e4d3854530cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:db:93:9b:a3:11:2b:72:fe:18:8c:9e:d9:
0c:4c:e4:65:d3:a7:a8:b3:af:80:fe:f8:54:53:38:
77:e6:c3:a4:a5:85:7e:92:5f:27:71:05:e4:f8:18:
07:42:5f:f6:54:b5:18:77:79:2a:dd:bf:be:a3:55:
eb:63:aa:31:a3:25:71:cc:04:42:e8:3c:d7:55:72:
ee:04:4b:f4:8c:80:f1:e1:69:08:54:b6:e1:00:06:
08:23:71:34:00:77:e1:2e:4f:a4:16:f0:54:5e:38:
ef:02:f5:f7:2e:de:ec:1f:5c:55:ce:c5:e5:c9:6d:
b8:94:fa:a6:28:ef:54:1e:a4:01:25:13:7d:d6:39:
ae:38:69:f1:cf:fb:34:f7:56:16:f3:4d:19:f0:90:
b8:9e:00:7c:6c:02:b8:0b:ad:dd:d1:ac:cc:a3:b6:
8a:51:ab:b2:e9:bd:9f:49:f7:b4:40:99:32:59:c6:
69:e6:ba:68:29:70:4d:e4:a0:57:28:8a:da:5b:99:
a7:1c:13:38:4c:06:70:36:3e:58:a3:ac:a4:61:f7:
a9:93:63:cd:27:75:7a:82:67:2b:73:3a:c5:8b:23:
77:da:08:ad:8c:41:7c:a5:ad:72:27:51:23:8e:2b:
b0:c6:62:50:10:ae:af:ce:7b:aa:5a:5e:de:02:da:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:5B:C3:93:2C:D2:7B:86:EE:22:0F:E5:60:E4:D3:85:45:30:CF
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e6:fa:43:1c:01:76:a0:78:e0:9b:a8:ed:a4:93:a4:a6:d4:
94:58:5b:52:cc:88:f2:2e:40:75:a4:d4:37:30:57:f3:b0:ce:
4d:41:e7:52:df:17:b2:b2:a0:27:39:52:74:02:4e:e8:f4:3e:
a5:aa:7b:ee:18:d5:cb:e5:e4:96:f5:5e:8d:84:68:34:73:ea:
e7:f0:81:d2:fd:0f:21:69:ac:31:aa:e7:1b:46:0c:cd:b9:7f:
00:77:c5:b1:01:51:0f:e9:ed:0f:01:5b:e9:a9:22:c7:fb:39:
7d:f0:8c:4f:52:ee:94:0f:22:2b:aa:eb:0a:9f:fd:a7:53:fe:
b9:05:5a:7e:09:d3:5e:67:5f:1c:a8:ff:e0:ff:fd:00:a4:8c:
e7:3f:47:14:9c:25:a6:c7:f4:df:a0:9c:c4:dd:ab:67:01:46:
f7:6c:1e:ce:3e:50:2f:7d:8f:cb:55:e8:37:92:30:7e:03:43:
da:33:9c:85:a3:20:c6:50:19:4d:da:81:78:35:50:25:01:44:
6d:fa:33:91:e3:a9:59:d1:b6:30:ee:b3:4b:71:b6:b8:51:9f:
9e:cf:12:80:7a:73:ec:d7:8b:63:3a:0d:55:e4:41:74:12:3c:
c5:48:ad:10:dd:bc:27:14:6d:e6:0a:9b:61:ba:e0:11:14:55:
75:1c:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:48 2025 by rpki-client