Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
File: OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft (raw, json)
Hash identifier: SzxPcjD+W6JEO0T3ATXHWkEojt3Ed01ezxE+820g7vM=
Subject key identifier: 61:A6:75:42:4C:10:74:2A:2C:BF:3F:6D:DD:62:2F:22:F6:3B:D0:FE
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 019A7112B1217660370CD32D67BEB6B74176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl (hash: iQCWXiAnMjjW5n4zVf0EXy3RcC6G0ynd2ZlPko3su3w=)
2: Vpoq5ZpSGDP-ZXCmZlKnhArAK_Q.roa (hash: 38YyvusiUhw1DBRUCOnZouY1Y0JBlQCEkMbtx6PZeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b1:21:76:60:37:0c:d3:2d:67:be:b6:b7:41:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=61a675424c10742a2cbf3f6ddd622f22f63bd0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:71:7f:f9:40:c3:dc:54:e8:45:06:22:15:
5c:b4:82:61:66:60:79:d9:9d:65:e3:c7:4e:9f:17:
41:98:17:23:0c:05:88:c1:39:f2:59:88:ff:c7:1e:
c3:d2:a6:bf:6f:65:06:51:c4:2c:d5:3e:d2:1a:d7:
96:69:67:4b:89:58:33:a9:63:7a:77:1c:2b:ad:4b:
98:39:86:eb:26:63:51:1d:c9:d8:1a:6c:49:22:32:
9a:96:3c:8d:1d:24:36:20:80:3a:19:28:b3:3f:3a:
02:ff:9b:65:70:72:d6:2b:62:48:2f:75:b1:0a:ca:
0d:60:39:a3:ee:d8:33:7e:d5:94:00:7a:6b:6c:e1:
64:f5:69:f1:51:35:a7:e1:d1:3d:48:8e:c1:81:72:
ae:3f:5f:54:56:54:a0:06:25:36:35:ca:b4:5a:cf:
1e:4d:cf:7f:94:62:36:ab:0f:ea:6e:b5:8c:2c:62:
ba:a1:a1:19:5e:25:94:d3:37:76:be:a6:11:a1:6c:
b8:64:b7:b8:0a:de:d3:f1:28:61:4e:c5:01:44:34:
f5:07:c2:a5:b7:fa:7c:58:1c:b7:5d:da:89:26:a1:
04:cc:35:39:34:42:88:f0:7b:db:9a:e1:21:0a:73:
98:fc:23:f2:ac:9a:cf:8d:ae:c3:83:be:13:e0:ec:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A6:75:42:4C:10:74:2A:2C:BF:3F:6D:DD:62:2F:22:F6:3B:D0:FE
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:29:f7:fc:86:67:92:c5:eb:8c:d3:b1:8c:2c:f3:58:8b:bf:
38:a4:95:32:37:b8:ef:62:dd:50:f8:85:31:22:30:ca:0e:90:
34:33:1e:de:07:23:40:59:9f:6d:f4:7a:37:b8:8f:38:c1:80:
b0:09:4c:a0:88:df:fc:5a:52:f0:b0:9d:63:4f:fd:95:0c:b4:
89:64:ff:6e:a8:56:ec:0e:be:9b:46:2d:dc:92:45:9b:bd:16:
30:4f:81:31:6d:6d:95:ef:5a:09:7b:5e:b4:31:5a:17:f4:eb:
27:67:8a:8b:50:2b:fe:33:ab:34:71:2e:10:ab:a3:b1:71:34:
92:29:9a:b0:09:88:e2:9a:a1:ce:ef:77:d3:2b:83:65:f4:06:
11:c8:c6:0a:32:d2:de:75:ca:af:5a:5b:d5:90:1e:43:bb:3e:
2b:22:55:73:84:0b:b5:f5:22:f8:55:4a:de:c9:c0:1f:ed:5c:
99:fe:db:d8:6d:81:88:b8:25:c1:14:4f:c5:ee:dc:15:cf:b8:
77:40:bc:d1:5d:3f:20:c3:e5:4b:c5:27:e7:b3:6c:ef:6a:9d:
59:3e:61:5a:9a:fb:01:d0:28:c9:65:90:95:50:85:ac:d4:e2:
5f:b1:3d:95:31:51:3a:8b:5d:84:02:d6:a3:63:06:27:ad:77:
0c:af:1b:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxErEhdmA3DNMtZ762t0F2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjIzNzk4YjY3MzkzZTQwMzllM2Y5NTU1ZTIxNGQ2NzM3
YzEzNTEwHhcNMjUxMTExMDQwMDQxWhcNMjUxMTEyMDQwMDQxWjAzMTEwLwYDVQQD
Eyg2MWE2NzU0MjRjMTA3NDJhMmNiZjNmNmRkZDYyMmYyMmY2M2JkMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArttxf/lAw9xU6EUGIhVctIJhZmB5
2Z1l48dOnxdBmBcjDAWIwTnyWYj/xx7D0qa/b2UGUcQs1T7SGteWaWdLiVgzqWN6
dxwrrUuYOYbrJmNRHcnYGmxJIjKaljyNHSQ2IIA6GSizPzoC/5tlcHLWK2JIL3Wx
CsoNYDmj7tgzftWUAHprbOFk9WnxUTWn4dE9SI7BgXKuP19UVlSgBiU2Ncq0Ws8e
Tc9/lGI2qw/qbrWMLGK6oaEZXiWU0zd2vqYRoWy4ZLe4Ct7T8ShhTsUBRDT1B8Kl
t/p8WBy3XdqJJqEEzDU5NEKI8HvbmuEhCnOY/CPyrJrPja7Dg74T4OwpAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGmdUJMEHQqLL8/bd1iLyL2O9D+MB8GA1UdIwQY
MBaAFDjyN5i2c5PkA54/lVXiFNZzfBNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQt
NzMwZmNkMGU1ZGNhLzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQtNzMwZmNkMGU1ZGNh
LzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyn3/IZn
ksXrjNOxjCzzWIu/OKSVMje472LdUPiFMSIwyg6QNDMe3gcjQFmfbfR6N7iPOMGA
sAlMoIjf/FpS8LCdY0/9lQy0iWT/bqhW7A6+m0Yt3JJFm70WME+BMW1tle9aCXte
tDFaF/TrJ2eKi1Ar/jOrNHEuEKujsXE0kimasAmI4pqhzu930yuDZfQGEcjGCjLS
3nXKr1pb1ZAeQ7s+KyJVc4QLtfUi+FVK3snAH+1cmf7b2G2BiLglwRRPxe7cFc+4
d0C80V0/IMPlS8Un57Ns72qdWT5hWpr7AdAoyWWQlVCFrNTiX7E9lTFROotdhALW
o2MGJ613DK8bGw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:34 2025 by rpki-client