Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: mt8a3Jh+N5iM6btBjM9JCQPhHM6uhZwZoubkcZlt5YE=
Subject key identifier: C7:88:B0:33:68:38:19:B9:48:18:E6:C3:2C:3E:70:70:89:26:40:BF
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 019A12A8C42C8AB8038993031A2B31A8B186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 16F3
Signing time: Thu 23 Oct 2025 20:00:41 +0000
Manifest this update: Thu 23 Oct 2025 20:00:41 +0000
Manifest next update: Fri 24 Oct 2025 20:00:41 +0000
Files and hashes: 1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=)
2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: 64hIAAtDYijgspDkhVNqH/6FOerCEncxeCKrmtoIU4E=)
3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=)
4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:a8:c4:2c:8a:b8:03:89:93:03:1a:2b:31:a8:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Oct 23 20:00:41 2025 GMT
Not After : Oct 24 20:00:41 2025 GMT
Subject: CN=c788b033683819b94818e6c32c3e7070892640bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:8e:3f:53:fc:b9:43:3d:26:67:6b:0b:b7:
c4:6d:28:30:30:fe:a3:da:f5:d6:f6:53:ec:2f:d1:
94:7c:a1:09:5c:b7:6f:a4:ec:57:7c:47:e0:1d:5f:
63:f8:1a:10:a7:82:4a:d0:7b:86:96:4d:ab:7e:2b:
b5:0f:ff:cb:1b:2c:2c:3f:cf:c5:0c:6b:b2:1c:e4:
a8:3d:0b:6e:ed:6a:f9:f6:e2:43:0f:1a:31:17:e5:
2c:29:0f:cb:63:25:1d:2c:a2:ce:cd:e9:93:31:ec:
52:fb:cf:58:9b:b4:26:d8:92:0a:e6:e6:c6:99:27:
fe:62:32:04:9e:14:90:c6:67:67:4f:b1:da:e8:38:
54:ae:b4:a3:44:dc:5e:7a:31:b1:31:9e:0b:99:8c:
2b:ec:86:6a:9b:a4:42:0c:ab:98:04:c5:11:80:47:
80:f1:3f:3d:04:8c:19:dd:58:88:5c:36:17:0b:48:
c7:85:20:23:9a:0a:9b:f3:64:f4:87:bd:7f:9a:9e:
57:97:0d:9d:3c:81:d7:48:ab:cb:86:4c:c7:74:ca:
98:5c:ea:ef:c3:89:d6:29:90:44:57:e1:41:5f:78:
22:5d:7c:2d:11:c6:ca:82:99:2e:c8:c5:63:20:d0:
d4:9c:f8:6c:a5:db:fe:cb:4d:8d:57:60:b7:f6:bc:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:88:B0:33:68:38:19:B9:48:18:E6:C3:2C:3E:70:70:89:26:40:BF
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ab:5a:2e:8e:7f:30:40:71:b9:f1:b6:25:db:df:87:55:8b:
41:6c:18:c4:8f:06:1a:fc:6a:31:20:ed:11:c6:22:06:e5:cf:
15:3a:6c:5c:05:56:36:7e:82:7f:58:fa:58:a0:d4:e8:d6:18:
69:7a:69:4b:68:92:99:ed:3e:dc:ed:9d:07:fd:ea:85:b0:37:
07:c8:24:0a:60:54:34:95:22:e6:11:5c:2e:bd:4c:66:1c:a5:
df:e8:a6:db:51:3a:a5:c9:cf:3f:ee:b5:34:15:db:43:17:59:
a0:0b:10:86:48:7d:64:05:53:3e:34:5e:44:e9:a2:b7:28:90:
c6:5e:0e:43:fe:47:2f:f1:9e:26:0c:80:72:40:15:5a:fd:c8:
c9:ec:8d:1b:2f:73:b9:3b:8f:eb:80:1e:83:7a:a8:7e:e1:59:
4f:69:15:4d:d0:55:3d:dc:43:35:3f:50:fb:5c:5b:13:54:cd:
bf:3f:54:70:6b:e8:15:49:90:8a:25:e0:a7:47:94:2f:c3:c5:
90:6b:05:b2:0f:dd:1d:38:8f:3e:87:18:25:ca:ed:16:64:bd:
11:79:80:ec:8e:55:80:37:b9:21:36:c6:e4:12:5e:78:f7:76:
01:37:18:d6:03:57:2a:6b:aa:cf:f4:cc:02:f8:be:99:6e:3f:
fe:ca:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 04:12:08 2025 by rpki-client