Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier: xlMt4oUKIUHexdyf3XlyytR/o7wHAI3dUTVzKkCndtI=
Subject key identifier: A2:19:C8:CD:69:90:F3:46:9A:1C:77:59:20:DD:A4:04:93:01:4D:FB
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial: 0199FCFDA6230E3102D84E8232921775B954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number: 0647
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: 3cwqzSzQtVTcdDPc+ws9GFrd+zebVMW2rf8lEXSDR/k=)
2: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (hash: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a6:23:0e:31:02:d8:4e:82:32:92:17:75:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=a219c8cd6990f3469a1c775920dda40493014dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:71:01:ce:91:6d:c6:bb:69:79:5c:68:cc:
87:30:32:2a:0f:f5:3b:82:91:81:93:93:16:92:f8:
eb:87:d1:95:6a:c9:ca:4b:9e:bc:af:ca:41:a0:03:
9d:a3:fd:16:b7:7b:51:1a:3b:de:bf:7a:6d:07:08:
8d:f4:39:a2:82:76:00:ce:01:14:46:79:3a:e4:57:
d0:6a:eb:63:bb:bb:56:e5:42:dd:1f:a3:ee:d4:d7:
25:eb:53:3e:1b:25:ea:cc:88:90:d2:61:08:d6:96:
e4:a7:c0:d7:fd:89:f4:9f:71:bc:dc:36:e5:4d:93:
97:79:c9:43:3c:04:f1:24:33:88:a5:33:1f:4a:33:
86:df:58:3a:c7:65:63:dc:29:43:1c:e5:4f:b8:6a:
02:60:33:22:a7:2e:e4:99:f1:4c:f8:67:77:f4:ea:
8e:8e:79:2a:f3:ac:fa:20:b5:87:72:ee:56:a5:bf:
e1:23:24:a1:80:9d:42:f1:0f:4b:fb:fd:3c:7e:5d:
d1:63:58:77:50:89:7d:55:8d:9d:98:56:b7:c5:f2:
1e:ab:b8:49:00:8b:a3:c4:a3:8e:b2:e3:f1:51:b8:
68:b1:7b:18:37:14:0f:05:e8:3d:6b:9b:92:4a:c6:
06:46:cf:9f:81:1b:89:07:8c:7c:34:5d:d3:2a:90:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:C8:CD:69:90:F3:46:9A:1C:77:59:20:DD:A4:04:93:01:4D:FB
X509v3 Authority Key Identifier:
keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ea:3b:44:ca:6a:b6:f4:72:79:6c:c1:20:b0:06:e9:9a:6e:
dd:f8:f8:e2:ac:8f:2d:7a:1c:5d:6b:4c:f4:e2:8c:f7:72:63:
8a:dc:3e:00:b3:bb:7d:2b:8a:a1:49:db:b8:fb:c3:e8:3d:09:
65:c9:1f:93:e6:72:b3:fe:cc:2a:4a:4b:78:26:c9:f2:80:b3:
94:60:88:df:21:78:b4:30:2c:d0:77:cb:3e:e0:44:4d:3a:7d:
a2:5a:8c:fd:b5:57:ea:e9:ab:88:d9:2e:d5:d9:3d:76:06:06:
1d:9c:09:79:b5:5e:55:c0:16:37:7b:c5:2c:2c:14:ba:db:cc:
6f:08:8c:76:d4:85:26:80:4e:90:79:b1:0c:1f:60:a2:3b:20:
d6:cc:43:df:0a:ef:13:05:48:4b:77:48:d3:73:f6:ed:de:19:
f5:25:ba:e6:9c:48:e2:a6:b8:af:ac:1f:fc:21:76:0d:82:e2:
1a:0e:f8:05:f7:64:65:7a:77:36:0c:c6:d3:7b:e0:7a:73:7e:
ed:73:21:ac:f7:ff:48:57:14:33:5a:61:c9:0a:b2:5c:9f:85:
7b:89:16:1f:0e:63:9b:ea:95:29:f0:73:22:9d:3e:40:83:3c:
f4:db:72:65:92:4d:3a:72:87:68:f9:87:05:86:f9:03:e2:4b:
7a:a1:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:45 2025 by rpki-client