Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: Otaubj4qJjWeGh81DI6m/JqIrcJ3qsAox2QX2kbutNc=
Subject key identifier: 97:36:E6:93:E4:31:BC:47:B6:02:98:02:36:BA:13:4B:2B:3B:1B:1A
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 019A70DC61168EBA6044A48E97F8850DD902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 0E31
Signing time: Tue 11 Nov 2025 03:01:22 +0000
Manifest this update: Tue 11 Nov 2025 03:01:22 +0000
Manifest next update: Wed 12 Nov 2025 03:01:22 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: g3e4HQ4tmtmnrJDXKst1aI9AWrV50WxVEngK2QCOkXg=)
2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:61:16:8e:ba:60:44:a4:8e:97:f8:85:0d:d9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Nov 11 03:01:22 2025 GMT
Not After : Nov 12 03:01:22 2025 GMT
Subject: CN=9736e693e431bc47b602980236ba134b2b3b1b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:39:7e:45:e5:fe:e4:4e:ea:6f:e8:27:12:
a8:d1:e7:94:bd:a6:8f:b2:83:f5:19:ab:6b:02:91:
99:ef:6c:2d:36:41:6f:7f:22:8b:a8:f1:8a:b3:19:
bc:a1:d3:00:60:0a:3f:de:bd:37:9e:ee:6d:2d:cd:
74:61:08:2b:cd:02:e7:2e:7b:b1:b4:81:c4:47:8b:
b9:5a:e8:9a:9a:f4:6b:21:30:57:d2:0c:76:c4:5d:
0d:a7:70:c9:12:eb:22:c2:84:0e:48:be:4a:05:c6:
a0:3e:23:70:b2:d9:1e:03:c1:e2:f9:8c:ee:e9:c0:
c9:56:20:75:62:6c:f8:94:58:55:80:88:a8:30:85:
b5:b8:8a:18:1d:1c:0d:61:bb:2e:96:57:af:69:e1:
81:f4:9d:a9:d2:e2:cb:03:7a:3c:27:51:a3:e9:a5:
2c:ec:95:e9:40:d9:d1:11:71:51:c3:1c:99:68:3c:
64:af:02:60:00:99:4d:ef:5b:dd:6f:2e:d0:99:57:
8f:e8:b2:10:78:bd:72:62:57:5b:ef:90:a9:44:bb:
71:1b:f4:91:71:58:e5:38:36:db:ca:9f:c6:17:43:
ad:61:79:76:2c:2d:fa:15:bb:4d:d6:5d:0d:6d:ac:
2c:af:53:84:95:bf:a6:42:7e:ba:22:f2:9d:e6:0d:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:36:E6:93:E4:31:BC:47:B6:02:98:02:36:BA:13:4B:2B:3B:1B:1A
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:09:0a:62:35:81:3f:6a:db:67:33:49:de:9b:05:23:64:34:
d9:f5:0c:e4:a2:8b:e4:9e:4d:ae:77:2e:71:cb:c1:20:6f:7a:
30:d8:1f:ae:1c:bb:b8:bb:f9:e3:c5:98:01:82:8f:eb:28:51:
a7:85:32:23:2d:2f:f5:a6:fe:8f:b0:91:03:4b:ac:eb:17:01:
9a:da:79:e6:70:d1:d0:05:e5:82:2d:dc:d1:3b:76:1f:67:00:
14:34:48:42:bd:4c:23:a5:d2:19:e3:89:3f:42:02:80:60:72:
95:f7:6f:87:d6:68:52:10:70:b6:e4:2a:85:3d:f2:51:dd:d4:
1a:10:e6:e2:3e:4b:ee:ff:7f:77:69:eb:80:52:51:68:20:47:
39:51:27:7e:86:70:53:46:bd:80:dc:d2:37:44:ee:b8:d1:43:
9e:1e:9a:3a:97:1b:58:18:e3:da:ac:13:6d:f5:5b:5e:d0:ea:
71:cb:2b:37:46:5a:90:c0:53:f6:d0:6b:e2:af:24:27:d8:78:
6c:22:51:dd:ec:bd:88:d5:f0:6b:2e:99:4c:14:0a:70:84:ee:
2c:36:bc:cf:0d:49:ab:80:09:56:f7:86:db:50:e7:4e:ad:84:
13:b4:28:f9:08:e3:ce:d4:c5:f4:06:ca:28:74:ea:4f:2e:2f:
cd:b2:1c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3GEWjrpgRKSOl/iFDdkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWMxM2M2YjNjMWRjNmIyMjE1MDM1YTY0MmYxZWZiOWIw
MGRkZjUwHhcNMjUxMTExMDMwMTIyWhcNMjUxMTEyMDMwMTIyWjAzMTEwLwYDVQQD
Eyg5NzM2ZTY5M2U0MzFiYzQ3YjYwMjk4MDIzNmJhMTM0YjJiM2IxYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuY5fkXl/uRO6m/oJxKo0eeUvaaP
soP1GatrApGZ72wtNkFvfyKLqPGKsxm8odMAYAo/3r03nu5tLc10YQgrzQLnLnux
tIHER4u5WuiamvRrITBX0gx2xF0Np3DJEusiwoQOSL5KBcagPiNwstkeA8Hi+Yzu
6cDJViB1Ymz4lFhVgIioMIW1uIoYHRwNYbsullevaeGB9J2p0uLLA3o8J1Gj6aUs
7JXpQNnREXFRwxyZaDxkrwJgAJlN71vdby7QmVeP6LIQeL1yYldb75CpRLtxG/SR
cVjlODbbyp/GF0OtYXl2LC36FbtN1l0Nbawsr1OElb+mQn66IvKd5g319wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc25pPkMbxHtgKYAja6E0srOxsaMB8GA1UdIwQY
MBaAFDicE8azwdxrIhUDWmQvHvubAN31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMt
NjIxMGVhYjA1YjcwLzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMtNjIxMGVhYjA1Yjcw
LzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQkKYjWB
P2rbZzNJ3psFI2Q02fUM5KKL5J5NrncuccvBIG96MNgfrhy7uLv548WYAYKP6yhR
p4UyIy0v9ab+j7CRA0us6xcBmtp55nDR0AXlgi3c0Tt2H2cAFDRIQr1MI6XSGeOJ
P0ICgGBylfdvh9ZoUhBwtuQqhT3yUd3UGhDm4j5L7v9/d2nrgFJRaCBHOVEnfoZw
U0a9gNzSN0TuuNFDnh6aOpcbWBjj2qwTbfVbXtDqccsrN0ZakMBT9tBr4q8kJ9h4
bCJR3ey9iNXway6ZTBQKcITuLDa8zw1Jq4AJVveG21DnTq2EE7Qo+QjjztTF9AbK
KHTqTy4vzbIchQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:10 2025 by rpki-client