Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
File: OVUKm3Usc5f29p6qaoDwm6f32Co.mft (raw, json)
Hash identifier: SOQR5pj7RTx088JwD4JpnIR8et0v0FW+SMkrIUc42jc=
Subject key identifier: BF:5D:08:30:01:AE:7C:39:3C:63:0F:94:C2:DF:85:AA:61:57:0D:64
Authority key identifier: 39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
Certificate issuer: /CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Certificate serial: 019A70DC0A1F24B1CEAA651E02899A43D67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
Manifest number: 011B
Signing time: Tue 11 Nov 2025 03:00:59 +0000
Manifest this update: Tue 11 Nov 2025 03:00:59 +0000
Manifest next update: Wed 12 Nov 2025 03:00:59 +0000
Files and hashes: 1: OVUKm3Usc5f29p6qaoDwm6f32Co.crl (hash: wxlZEpicBHrenF9TaksuIl1wbKWqgflWdZ/nhKfbRRk=)
2: ylMtZ7R7fkeUU1B9KHOMXQfIdGs.roa (hash: DSXOCCTFabtrlzKxDb8ds7fUzGa0VH3hHQbIA5SQrgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0a:1f:24:b1:ce:aa:65:1e:02:89:9a:43:d6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Validity
Not Before: Nov 11 03:00:59 2025 GMT
Not After : Nov 12 03:00:59 2025 GMT
Subject: CN=bf5d083001ae7c393c630f94c2df85aa61570d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:c6:e7:d2:1d:81:a7:91:66:c5:a6:59:b7:
8f:3d:9b:9f:94:26:26:e0:db:db:49:79:ba:40:f8:
6c:0b:04:24:6b:c4:14:4f:2f:bb:1a:a4:55:9f:6f:
cc:6e:eb:dc:3c:76:6b:93:5f:4a:ad:e6:b4:b0:11:
9f:4a:b3:bf:22:bf:7f:6b:cf:ac:df:eb:52:23:db:
48:ac:f1:b5:7f:d9:98:61:9e:d6:13:12:d2:8f:5b:
cc:45:8c:1c:3a:1d:6e:7d:d1:62:7a:4d:a3:ae:de:
c0:9e:bb:44:f4:c0:f4:66:9b:62:32:a3:1c:66:40:
65:89:63:4d:12:5b:21:f0:0a:5b:b7:6b:1b:a3:15:
d8:d2:61:a6:9f:6c:2c:71:7b:3f:2c:0a:ec:ea:bc:
89:20:1c:13:98:6e:81:af:aa:0a:51:c4:64:80:d9:
a0:ae:e1:fb:17:e3:b5:bd:ba:2e:6c:95:4f:84:d2:
56:1f:ac:9a:35:65:84:9d:4b:33:3f:86:86:e6:81:
17:b9:39:6e:77:51:77:87:1e:ef:ba:41:46:0f:e0:
e1:8f:a9:ab:08:f3:b8:bb:63:20:e6:c2:33:22:a6:
c3:dc:14:dc:05:b5:d1:00:fd:e1:e8:bb:32:c3:3e:
7c:e9:9d:54:27:83:5f:57:40:32:af:c6:40:a1:1f:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5D:08:30:01:AE:7C:39:3C:63:0F:94:C2:DF:85:AA:61:57:0D:64
X509v3 Authority Key Identifier:
keyid:39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:54:59:17:f2:b2:7d:61:b0:1b:e1:15:0d:df:e3:aa:76:ec:
9a:9c:4c:8d:bf:e3:84:26:c9:bf:86:7e:72:ff:e4:1f:db:96:
24:93:76:c8:a0:66:93:bd:7e:b6:f2:a4:c6:d6:d0:f2:de:e4:
f9:ef:b8:69:12:4d:96:ca:6a:fc:4f:80:de:93:3a:d0:46:c8:
aa:46:59:32:59:52:3e:28:71:b5:d3:30:06:49:cd:e2:3e:98:
f1:5a:85:53:35:61:c9:f4:eb:af:d4:77:d8:46:ee:6f:38:16:
be:99:bb:e0:41:28:e4:36:5d:f5:36:ff:94:80:34:2e:52:e7:
45:26:81:5f:e6:03:0a:5c:03:89:f6:b2:b4:66:89:3d:9e:0b:
df:a9:d1:f2:62:6f:27:c0:72:68:f8:9a:55:32:ed:ff:c8:04:
83:4d:19:1a:03:20:51:b4:68:84:e7:1d:01:92:3b:fb:aa:3a:
55:ec:02:b1:01:29:6f:92:26:48:cb:b1:38:5c:86:78:ee:2f:
7e:b7:fd:4d:4a:34:7a:a8:60:1c:40:40:2a:c6:1d:30:41:5e:
3e:04:28:da:24:74:57:36:cc:d2:39:20:9d:e9:fb:a1:af:db:
20:21:97:04:07:a8:73:a2:fd:cb:e0:91:45:dc:b4:28:cb:21:
26:7c:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:31 2025 by rpki-client