Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File: OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier: zulk5ebeT29ep0Q9DKjBuopXjZwxww8RS8ORPba6v1Q=
Subject key identifier: 38:72:1C:BC:60:FF:0D:8D:29:7C:70:74:A2:96:42:AA:8D:B2:8D:23
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial: 019A447067F44962291A1589F4E553489BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number: 13C9
Signing time: Sun 02 Nov 2025 12:00:08 +0000
Manifest this update: Sun 02 Nov 2025 12:00:08 +0000
Manifest next update: Mon 03 Nov 2025 12:00:08 +0000
Files and hashes: 1: LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa (hash: FOOM9kMpwPkSzslFZMnKyIoaQBQCR3WyFVCTjxN9D/4=)
2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: LIl65e4V5oxIGihhc4c1cN+YV5S8vZlKetVSsj+PZmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 12:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:70:67:f4:49:62:29:1a:15:89:f4:e5:53:48:9b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Validity
Not Before: Nov 2 12:00:08 2025 GMT
Not After : Nov 3 12:00:08 2025 GMT
Subject: CN=38721cbc60ff0d8d297c7074a29642aa8db28d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:55:01:70:b9:79:d6:f4:90:65:5f:34:dd:
24:b1:72:da:8c:f2:21:31:b4:d7:8b:31:bf:4c:52:
43:1e:bf:15:0a:76:13:ea:0a:47:a2:bc:71:d9:df:
a8:7e:95:65:4c:65:30:82:15:a4:8a:25:18:f4:dd:
41:f9:b6:57:9b:00:aa:6c:a5:7a:16:11:0c:fe:4e:
55:aa:cf:f3:03:fe:fd:2b:63:75:1b:27:bd:5f:00:
39:66:48:6c:c8:bd:2a:e8:d2:6f:8d:99:09:69:5c:
ae:12:c7:07:19:c7:c4:98:e4:7e:a9:b6:c1:ce:44:
3f:e9:91:ac:0e:75:9a:3d:25:04:1a:44:d7:ae:42:
aa:fd:d8:6c:ae:2b:60:cb:f0:cf:a4:36:34:78:13:
b4:38:d2:f1:64:02:c6:58:ba:dd:fc:60:c6:3b:73:
f4:38:dd:d2:3c:82:0b:46:50:7f:78:b2:e9:ca:a4:
77:b7:04:b2:0a:e1:eb:e3:b9:9b:60:d6:6a:6f:7f:
af:97:ba:a5:81:38:ad:ca:07:e4:86:6a:f3:ff:a5:
6f:56:e5:99:13:94:ff:9f:57:07:c3:91:5e:13:92:
fa:4b:17:02:01:b9:eb:6c:6c:f4:02:c5:32:c8:7b:
ae:98:99:b4:ae:53:6e:3c:d3:59:91:2b:0b:d2:80:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:1C:BC:60:FF:0D:8D:29:7C:70:74:A2:96:42:AA:8D:B2:8D:23
X509v3 Authority Key Identifier:
keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cd:ca:69:74:b2:09:f3:1c:47:81:38:3e:27:8c:c5:e6:b1:
03:e7:59:f7:68:d2:61:bd:c9:d7:2d:6b:bc:68:cf:43:48:f2:
fb:d4:65:c8:94:a6:f6:39:b2:ee:d5:a2:e3:ab:0a:cf:37:ff:
20:48:e8:77:50:b6:fb:90:3a:d8:e5:b6:da:7d:a8:e6:35:54:
48:d3:14:fc:33:5f:a9:7b:b1:73:85:ee:49:2a:30:3d:0a:aa:
ab:18:30:0c:4f:dd:48:4e:30:67:76:86:e2:51:86:b3:5c:e0:
8d:c4:b5:c4:19:62:1c:12:cc:d5:76:ed:e8:db:ea:b9:1d:3b:
1b:fd:9d:0f:4b:97:f0:a1:f5:13:b6:f1:81:32:60:a1:88:80:
e6:f8:f2:03:60:0d:0e:d8:52:08:77:38:f5:cd:af:4c:10:8a:
ab:78:49:db:e0:20:d6:e0:01:b4:a8:67:66:25:82:c9:a5:cd:
36:a7:0c:ed:99:f2:09:27:e2:d6:bd:ef:3c:51:25:cf:d1:14:
78:f9:ca:41:c5:bd:5d:c1:a5:85:29:be:29:29:70:60:77:cd:
57:ba:82:7c:af:31:69:4d:c3:36:27:17:3a:50:c9:a1:ea:c1:
4e:3d:e9:04:3b:25:ac:9d:b7:b9:82:f6:94:5e:ee:c4:88:a2:
44:40:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 21:24:47 2025 by rpki-client