Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: CCrXQaAKmqpfw3NrfwLlZKqTUem+xe7798nMpMVfVEI=
Subject key identifier: D0:7D:DA:17:81:08:72:C9:E5:D1:6B:5E:56:BE:55:E9:98:1B:05:8E
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 0199FBEBC36543F5B80CC1E1E1BC4F63A594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0CE5
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: RF7QQkOSMkJWe8f7nXToqWWNl2IhUKRU8Igje+9xjcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c3:65:43:f5:b8:0c:c1:e1:e1:bc:4f:63:a5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=d07dda17810872c9e5d16b5e56be55e9981b058e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:bf:ed:3c:ff:5d:af:e4:87:bc:5d:30:0d:
02:a2:97:64:16:cb:b0:f4:e7:7c:3e:e1:78:04:1d:
a8:25:e7:c3:32:53:2e:b9:6c:19:eb:96:b7:20:b9:
3c:06:45:dc:0a:8e:b4:ab:a6:77:9c:7d:f7:7a:a3:
b7:42:17:d7:3c:cc:49:80:0e:94:c5:53:c1:f0:7c:
bb:99:9e:fb:c8:0f:d2:a7:cb:00:bf:79:5c:f7:5e:
44:ef:09:62:19:56:c8:c7:b3:94:85:64:3e:8c:42:
86:91:72:90:af:09:5c:05:32:ca:87:09:5b:bd:0d:
6f:a8:22:d3:df:30:15:86:a2:d7:21:9c:35:23:97:
49:0e:78:67:41:9e:25:7b:44:11:f9:ac:c0:12:3a:
0d:98:84:1c:12:bd:22:46:31:f8:31:db:61:66:6c:
77:6a:74:2f:76:ba:ef:cb:68:93:0e:10:4d:5a:c6:
93:57:3f:2c:df:38:e3:f5:ab:2c:8c:1a:d3:d7:b0:
a5:45:05:8f:f3:b7:7d:ee:a8:d2:b2:40:bc:f6:fd:
42:e6:ea:21:ea:9a:54:c3:3a:14:2e:4e:a5:78:59:
98:c2:c5:f2:84:61:41:64:bd:cb:25:09:3b:f6:32:
94:27:59:9b:d1:52:f4:55:47:53:e3:7b:fa:9f:c6:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7D:DA:17:81:08:72:C9:E5:D1:6B:5E:56:BE:55:E9:98:1B:05:8E
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:38:10:82:59:4d:4c:ad:e8:cc:59:ba:d3:ea:ea:0c:10:61:
74:9b:58:53:b6:0e:79:71:64:bb:63:58:79:3a:95:00:bd:96:
5a:b6:f2:2e:d0:19:66:63:2a:2c:7f:43:2c:57:ec:22:1c:c3:
45:94:7d:30:b7:42:91:dc:f6:82:72:76:cc:7f:36:ea:50:fe:
64:69:fa:95:46:48:83:eb:4d:cc:3e:8d:ba:c9:3a:17:9d:81:
6f:a0:6e:cd:fe:0e:77:5e:4f:cb:e4:e3:e2:6f:db:72:78:c7:
fd:8c:38:a2:7f:ec:73:dc:c7:b1:6f:c4:30:23:e4:70:0f:62:
41:4e:50:ba:25:3a:21:1b:61:89:21:ad:f7:80:20:88:10:79:
e1:67:ad:d6:f6:06:89:ca:c6:fa:7d:d5:e5:ff:04:3b:e4:33:
fa:c0:0c:14:6b:5c:c2:ae:1f:0f:ce:9d:22:cc:bf:a3:88:fc:
a0:23:3a:fd:cc:95:36:77:da:be:96:62:51:22:1f:2d:4a:b5:
a8:d8:ab:b5:3a:2d:fb:0e:06:f7:1d:13:43:a6:90:72:f4:92:
22:10:c4:b7:1c:17:60:b0:cc:49:de:80:ae:9a:99:4d:a2:e6:
78:ec:c1:13:62:71:7b:31:1b:0e:01:3d:2b:d2:72:63:ad:4f:
17:3d:71:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:47 2025 by rpki-client