Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: LJWmvYEI1d7G6jMf8fCleOXoMMQTTy+V9ZYD1RBUtAA=
Subject key identifier: 2F:6D:71:B9:71:E7:FA:7C:C9:9B:C4:8D:BA:62:F6:39:F2:00:CB:F5
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 0199C7C5EB9A227DA49F7A354D9F6FA34312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0BEA
Signing time: Thu 09 Oct 2025 07:01:00 +0000
Manifest this update: Thu 09 Oct 2025 07:01:00 +0000
Manifest next update: Fri 10 Oct 2025 07:01:00 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: WizP0qnruTdSf4v/A18+S7VCfZeo+cnpTdydNPJJ62c=)
2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:c5:eb:9a:22:7d:a4:9f:7a:35:4d:9f:6f:a3:43:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Oct 9 07:01:00 2025 GMT
Not After : Oct 10 07:01:00 2025 GMT
Subject: CN=2f6d71b971e7fa7cc99bc48dba62f639f200cbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:2b:45:1d:10:b4:f1:3e:0b:a6:22:aa:f4:
84:c3:54:8c:8b:57:cb:97:14:b5:d1:a2:77:67:25:
ef:2d:ea:c5:43:43:68:cc:59:75:ae:6f:9f:92:d0:
38:c6:7e:34:42:ca:76:e1:1a:54:9a:94:20:31:63:
76:69:24:c0:15:f9:fa:1f:7a:16:8c:88:e6:ac:ee:
25:50:69:de:32:b8:b8:ea:5e:bd:64:6e:d6:64:fc:
a8:18:2a:17:9d:7f:45:4a:7a:01:cb:0b:48:90:0b:
0a:d0:d2:8b:c1:75:20:54:8a:0f:b5:d1:d6:f9:b2:
34:68:20:9f:cb:9d:e7:bf:3d:8f:95:44:ae:7e:64:
58:ab:b3:58:a2:e6:33:b5:42:14:00:34:69:12:1f:
60:0a:49:9d:1a:21:c4:24:9c:30:23:ac:1f:69:80:
21:89:57:19:b7:ce:d8:cb:bc:ed:25:09:d7:0f:b3:
b7:2f:95:e0:3f:3b:ef:5e:d2:67:b9:2b:e5:e2:3c:
45:57:31:46:75:80:a2:ca:3e:9a:85:a9:0a:30:a0:
03:bc:41:da:36:f3:af:c7:8d:bf:66:64:d1:87:03:
ea:63:c8:8b:7a:e1:62:a8:0c:06:c0:33:ee:5f:5a:
59:b7:c2:fa:6d:92:bc:a8:15:c3:eb:5a:f1:18:0c:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6D:71:B9:71:E7:FA:7C:C9:9B:C4:8D:BA:62:F6:39:F2:00:CB:F5
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:22:93:4b:27:57:41:56:11:65:e5:59:d7:54:5c:15:d6:fc:
21:e6:c3:8c:b3:9e:3f:e1:e5:6e:98:41:50:fa:16:6c:76:4f:
f4:ba:b9:d6:28:7a:c1:d9:4e:75:d7:b3:84:73:a3:16:fa:9c:
22:fd:3a:85:33:44:5b:99:f2:90:49:bd:d2:9f:5d:09:e0:85:
93:97:36:cb:72:27:a9:e3:26:07:b9:ab:1d:0e:42:5b:36:65:
66:07:1b:87:ed:cb:2a:26:47:10:22:fd:71:b9:87:ab:65:9b:
2e:03:9e:92:50:c6:39:e5:0e:e0:9e:b9:22:e1:a1:fa:fc:e3:
9f:ae:61:59:12:3e:ee:c9:d8:62:c7:5f:75:09:cd:92:bc:aa:
65:2e:08:70:56:8b:80:26:7f:d5:ed:c6:ff:cd:e7:87:76:73:
14:22:d5:b8:a4:f5:f9:62:a0:b9:61:78:34:50:a0:f1:3f:2d:
17:94:0e:15:4d:3c:33:34:e2:e5:9d:b4:d7:4c:b6:3e:80:2f:
47:f7:30:6c:83:7d:dd:35:d4:16:fd:8e:4a:e8:52:3d:ab:62:
2d:87:bf:86:9c:5e:4f:d9:da:a0:f5:02:e6:b6:2d:a1:05:77:
a1:8d:4e:a1:f1:2f:60:be:16:9e:c9:5f:8b:7a:f4:a7:29:b3:
cd:c6:16:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 09:17:41 2025 by rpki-client