Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json)
Hash identifier: MSTJH1N5/NM9Ep6qokF3PQ17r37YE30hTHhYK9qhK2M=
Subject key identifier: B4:94:5D:64:90:51:74:D2:F2:97:9C:81:50:36:A0:ED:7C:50:8A:A8
Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Certificate serial: 019A71B8892118BA5D90E349BD8B295EEE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: 6kCBLIZL1Utyl61fy1p6EW7akTU.roa (hash: NMn7Jz/myMcH5rlH91oLz3Top7oHGVHXBAR/Jc98yhE=)
2: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: 6Mswso5odxd2ESHNzneI/vAPFnRpkCBi3O97BghctpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:89:21:18:ba:5d:90:e3:49:bd:8b:29:5e:ee:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=b4945d64905174d2f2979c815036a0ed7c508aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:1c:17:5a:91:0a:8b:fa:ff:0b:e8:c9:c8:
cb:44:4a:56:de:32:4b:f9:c9:aa:30:01:ae:d6:0d:
09:8c:9e:ea:cb:c1:f8:bb:f3:4f:49:7c:67:d3:33:
9d:bc:04:e3:26:72:2f:e7:e0:a2:f2:bd:22:52:c3:
50:dd:5b:bd:d6:11:7e:ec:3b:ca:d7:0d:f8:e2:41:
11:cd:2e:61:bc:dc:bf:ca:ee:fb:ea:cc:49:34:13:
c0:a5:62:5d:f9:86:50:d5:81:45:85:18:73:a7:b2:
7c:61:9d:84:48:75:c1:2e:fb:c8:0f:cf:72:3d:7d:
ef:55:b6:fc:1a:ab:5f:7d:23:e6:88:2f:a6:23:9f:
02:46:f9:af:15:57:37:57:cc:35:d7:61:b3:3f:58:
9a:dc:93:bd:fc:41:51:95:d7:99:b0:5f:1e:7d:c1:
94:6c:8d:5e:30:3d:89:f3:df:3b:59:cf:47:e0:18:
b6:dd:63:25:37:a5:ff:49:2e:c9:0c:bf:04:ff:ce:
44:a4:e3:37:2b:5e:9c:cb:0f:b4:bc:3a:01:e6:a1:
76:36:8a:07:43:f3:d5:1c:5d:c3:78:40:f2:c8:10:
65:cc:cf:bc:fa:0b:6e:7f:63:c4:e0:3a:4e:3a:e0:
a0:47:0a:87:27:4c:bd:15:5d:09:10:29:f0:99:82:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:94:5D:64:90:51:74:D2:F2:97:9C:81:50:36:A0:ED:7C:50:8A:A8
X509v3 Authority Key Identifier:
keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f7:f9:c4:10:be:4d:44:fd:de:07:af:cd:00:e9:a2:cd:e5:
2f:53:cc:59:be:da:b0:5d:0a:a8:4b:44:35:f3:08:a1:7a:1d:
4d:49:88:c5:49:70:2e:6b:ca:ad:5f:72:e6:5a:97:42:c0:73:
92:24:88:a8:4f:c6:b6:03:dd:94:0f:04:f6:4d:ee:10:27:cf:
3a:53:30:08:e9:03:69:8c:b8:8e:a8:d8:d6:1a:47:2d:46:95:
b6:7a:7e:a0:5e:6b:8d:1e:ef:9b:96:8c:18:40:39:87:f8:27:
48:2f:65:44:9b:4b:20:d9:e6:f6:40:a1:be:23:18:b8:1e:0d:
df:bc:3c:c0:7f:ae:61:07:fd:17:48:4d:cc:b7:01:a9:c5:fe:
86:a0:2a:4f:b8:94:26:7a:c5:2c:82:f8:2e:53:74:88:a8:42:
59:d9:48:e6:9e:fa:02:36:cc:04:37:ee:26:3f:0c:ca:3d:72:
59:a5:f7:6f:fa:24:7a:f6:8f:b3:62:01:d0:0d:9b:31:a8:59:
e3:9a:7c:0d:c0:6b:cf:3e:74:55:c4:7c:05:b7:91:e9:1a:45:
c2:64:82:4d:14:1d:e6:21:8f:81:69:16:ae:75:22:54:97:e4:
1c:f7:f6:bb:e6:67:f2:07:a5:d1:53:df:a0:4a:24:88:57:72:
b2:b1:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:30 2025 by rpki-client