Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: HkCfnSx/UQpVRUG/O2R739OrDcwUDQDAVraJKGaGp38=
Subject key identifier: DC:82:08:99:3C:AA:E1:72:36:3A:BE:21:28:F2:0E:CC:28:44:E0:34
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 0199FD34872DD6F1E62EE12B0B0BFC6EFB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0D98
Signing time: Sun 19 Oct 2025 16:01:41 +0000
Manifest this update: Sun 19 Oct 2025 16:01:41 +0000
Manifest next update: Mon 20 Oct 2025 16:01:41 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: tAI9+F5e+Pb4moTH3gwJWdPQ54SLY6cqJqhAZlW4wfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:87:2d:d6:f1:e6:2e:e1:2b:0b:0b:fc:6e:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: Oct 19 16:01:41 2025 GMT
Not After : Oct 20 16:01:41 2025 GMT
Subject: CN=dc8208993caae172363abe2128f20ecc2844e034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:c4:71:14:75:f0:1f:6f:85:73:c0:6f:3f:
e2:27:94:fc:26:d8:1b:0b:92:28:94:bb:8c:c9:45:
c9:c1:2f:fc:5c:15:17:9a:a1:42:d9:fc:5e:4a:b2:
06:be:23:53:bf:e4:3a:81:96:5f:95:d5:9b:bd:b9:
8d:e1:2c:a9:d0:10:e2:90:dc:90:26:e4:b0:2b:06:
68:72:1f:5e:7b:d7:d9:06:57:cb:1d:4a:88:29:cb:
bd:aa:5b:86:6c:a2:a6:54:74:5c:b6:d9:28:06:92:
b5:23:81:94:c1:be:33:86:d3:8c:32:9c:24:72:ec:
39:f9:90:9a:93:1a:d4:37:39:40:f8:09:64:8d:b8:
b6:86:00:5b:f0:45:bb:47:a9:ee:c6:f6:e5:c1:50:
4a:fc:15:79:f8:ed:f6:47:e5:9e:53:2f:30:03:e7:
13:a0:47:36:65:66:97:64:2f:4e:2d:54:e1:81:91:
49:81:63:ac:16:5c:07:9b:3e:92:fa:b6:3a:e1:0c:
be:e5:b1:11:33:16:be:52:2d:35:0a:ee:0b:f0:4f:
8e:b4:f9:15:6d:2a:62:22:39:62:a1:15:bc:2e:69:
5f:7e:a5:43:49:c6:98:40:ab:86:c6:92:75:ab:5e:
95:4c:e6:9a:aa:af:66:b4:f0:23:5b:8c:bf:10:ba:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:82:08:99:3C:AA:E1:72:36:3A:BE:21:28:F2:0E:CC:28:44:E0:34
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6d:12:9b:fd:8d:76:1a:18:4a:e6:0a:95:6e:60:13:8d:50:
10:6a:21:dd:f4:95:49:b6:67:6b:83:c1:20:e4:16:96:92:8b:
12:1c:7a:91:aa:fb:79:a6:db:51:ca:d4:de:e3:bf:da:9d:9c:
64:2b:2e:94:ba:ee:52:b3:e8:3f:c0:ba:21:7f:6f:e8:4c:ce:
4f:c5:94:ec:b8:55:41:01:20:1b:a9:c4:70:90:68:24:2d:89:
b2:e7:f8:4a:c1:8f:20:f3:67:97:da:78:11:9d:c3:47:75:21:
e0:22:ac:02:53:64:c0:17:80:ff:77:b0:98:ef:fb:76:e9:38:
95:b9:37:7b:15:05:83:9d:35:e9:1c:56:a2:19:95:03:e8:58:
3f:35:41:86:04:82:b8:67:c2:07:8e:1e:c5:d3:cc:ba:68:45:
83:d6:f6:94:2a:83:41:a4:b5:9c:43:48:59:73:80:1e:09:78:
37:42:2e:d3:db:cc:cf:b0:84:bf:09:b9:1a:b0:8b:fd:dc:c4:
72:af:03:ec:b1:77:df:6e:a3:f6:27:d0:13:ee:71:d0:da:0c:
45:bf:b2:c0:e7:ab:3f:1a:49:e6:d9:c7:1f:3a:1e:dd:d0:4b:
92:b8:7d:7d:dc:da:32:b0:d8:02:82:fd:9b:d4:0e:1f:61:75:
7a:62:5a:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIct1vHmLuErCwv8bvsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjI0Yzk2ZTZhZGU2MDg4MTBjMzBkOWExMzA3Y2M2OWFm
OWZmNGQwHhcNMjUxMDE5MTYwMTQxWhcNMjUxMDIwMTYwMTQxWjAzMTEwLwYDVQQD
EyhkYzgyMDg5OTNjYWFlMTcyMzYzYWJlMjEyOGYyMGVjYzI4NDRlMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lnEcRR18B9vhXPAbz/iJ5T8Jtgb
C5IolLuMyUXJwS/8XBUXmqFC2fxeSrIGviNTv+Q6gZZfldWbvbmN4Syp0BDikNyQ
JuSwKwZoch9ee9fZBlfLHUqIKcu9qluGbKKmVHRcttkoBpK1I4GUwb4zhtOMMpwk
cuw5+ZCakxrUNzlA+Alkjbi2hgBb8EW7R6nuxvblwVBK/BV5+O32R+WeUy8wA+cT
oEc2ZWaXZC9OLVThgZFJgWOsFlwHmz6S+rY64Qy+5bERMxa+Ui01Cu4L8E+OtPkV
bSpiIjlioRW8LmlffqVDScaYQKuGxpJ1q16VTOaaqq9mtPAjW4y/ELpPswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyCCJk8quFyNjq+ISjyDswoROA0MB8GA1UdIwQY
MBaAFDjyTJbmreYIgQww2aEwfMaa+f9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84YWYxY2QtNTAyMS00NjNiLTk5YTMt
MDRlNGE4NGE3NGFjLzEvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84YWYxY2QtNTAyMS00NjNiLTk5YTMtMDRlNGE4NGE3NGFj
LzEvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbW0Sm/2N
dhoYSuYKlW5gE41QEGoh3fSVSbZna4PBIOQWlpKLEhx6kar7eabbUcrU3uO/2p2c
ZCsulLruUrPoP8C6IX9v6EzOT8WU7LhVQQEgG6nEcJBoJC2Jsuf4SsGPIPNnl9p4
EZ3DR3Uh4CKsAlNkwBeA/3ewmO/7duk4lbk3exUFg5016RxWohmVA+hYPzVBhgSC
uGfCB44exdPMumhFg9b2lCqDQaS1nENIWXOAHgl4N0Iu09vMz7CEvwm5GrCL/dzE
cq8D7LF3326j9ifQE+5x0NoMRb+ywOerPxpJ5tnHHzoe3dBLkrh9fdzaMrDYAoL9
m9QOH2F1emJaEg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:36 2025 by rpki-client