Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
File: OVUKm3Usc5f29p6qaoDwm6f32Co.mft (raw, json)
Hash identifier: 5Wp/CNhKywGdms8ab8+g0RYZAuIwBPi6GZeMANOIgzM=
Subject key identifier: 46:57:4A:EA:D8:2E:A8:4E:17:51:46:D1:30:F3:CE:8F:14:94:E6:59
Authority key identifier: 39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
Certificate issuer: /CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Certificate serial: 0199FB0F1308505E87B7527688CA0BCB6D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
Manifest number: DE
Signing time: Sun 19 Oct 2025 06:01:32 +0000
Manifest this update: Sun 19 Oct 2025 06:01:32 +0000
Manifest next update: Mon 20 Oct 2025 06:01:32 +0000
Files and hashes: 1: OVUKm3Usc5f29p6qaoDwm6f32Co.crl (hash: S7KbUH2BXYolfVXwRud8WdW5wTsfTmcmmgVqn2RfQyg=)
2: ylMtZ7R7fkeUU1B9KHOMXQfIdGs.roa (hash: DSXOCCTFabtrlzKxDb8ds7fUzGa0VH3hHQbIA5SQrgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:13:08:50:5e:87:b7:52:76:88:ca:0b:cb:6d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Validity
Not Before: Oct 19 06:01:32 2025 GMT
Not After : Oct 20 06:01:32 2025 GMT
Subject: CN=46574aead82ea84e175146d130f3ce8f1494e659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:f5:b0:cc:cf:89:4f:09:56:59:b9:69:7e:
e6:00:e9:70:5c:bc:b5:1e:1e:a5:06:ee:0f:e2:6a:
9b:fb:59:d6:7a:db:fe:be:8f:24:da:bb:68:5a:7b:
1d:6e:df:98:0d:00:cc:df:31:a5:c6:b7:9f:56:64:
4c:ff:ed:99:dd:db:10:1a:06:a6:7e:31:69:27:dd:
a5:5b:91:68:39:d5:65:86:e4:a4:23:4f:1a:6f:b2:
a5:a4:81:98:6c:a3:65:f7:d9:e0:02:98:b8:45:dc:
7f:9c:58:48:8a:b6:d7:4b:56:04:a7:73:24:e3:cc:
00:f1:86:f7:63:e1:5d:03:23:66:68:d8:a8:f3:64:
ab:df:c9:35:52:06:a0:41:20:3a:0b:03:85:bf:50:
50:62:8b:f9:ae:d6:45:ef:e7:29:bb:6d:19:77:52:
9f:96:ac:7a:13:61:bc:12:f0:4d:f4:f8:05:f8:9d:
c6:c1:d6:ff:e4:e2:ea:52:23:1a:80:49:97:67:7d:
1a:ea:ea:7a:98:96:ea:f7:de:6c:b9:7a:51:65:60:
bd:1d:0b:3f:a9:0a:38:b2:4b:dd:ea:d0:2a:e4:87:
ff:14:37:d4:06:f7:68:c9:65:2f:89:cf:46:08:55:
f6:17:12:f1:40:47:e7:71:91:85:68:a0:24:65:38:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:4A:EA:D8:2E:A8:4E:17:51:46:D1:30:F3:CE:8F:14:94:E6:59
X509v3 Authority Key Identifier:
keyid:39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:58:c8:b3:34:49:4a:15:a3:68:b3:a2:be:88:e2:d5:88:3f:
39:d8:c4:85:ad:87:71:2e:ad:43:1f:00:0d:fc:22:0a:aa:78:
46:19:13:33:f1:0b:6e:9a:a3:1f:4d:47:b6:c2:9b:c0:24:9e:
50:72:b7:a4:db:3b:a3:d1:17:36:64:d1:a5:68:cb:9a:b9:f5:
a2:1b:fb:d8:37:bd:19:e0:fb:67:9d:9f:5e:6a:75:d3:52:4a:
6d:e0:a0:7d:04:ac:93:be:67:64:67:01:a0:d2:cf:f4:2b:7b:
d4:de:b0:d2:53:e1:8c:f3:22:d7:c1:28:55:7d:7d:42:c1:c5:
7b:f5:cf:67:2d:e4:89:c0:17:d8:73:a8:b0:02:1a:37:e7:cc:
93:12:5c:8b:d2:1e:ba:7c:48:fa:4e:f8:6f:78:ce:fa:01:b3:
b4:a2:28:d4:a1:c9:84:2e:51:08:69:8e:3f:1b:a8:78:9b:32:
31:80:84:77:8b:28:fa:c6:85:97:b1:9c:26:21:ba:16:57:87:
a5:6b:d2:2f:11:27:42:24:5f:38:51:3b:2f:20:46:2c:93:96:
d6:a8:6b:4c:50:b3:5f:8c:87:08:27:e0:f8:c5:f4:9a:22:84:
cc:c7:fe:3e:3d:f8:b9:b0:72:3d:32:57:e0:c4:10:3d:4a:e7:
4a:5e:34:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:51 2025 by rpki-client