Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: yUetsmJix8Jiot9RrGLB/vg2wuqOAZUl3QOky1feCfo=
Subject key identifier: BE:75:5A:DC:10:DE:B4:F8:CE:9F:99:FB:01:F3:04:8E:76:39:CF:A5
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 019A71EEE7D704FCCA30D7601DDE2D7EAC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 0F08
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: LVniV-fBUsD2XHyiKXh59lNaKck.roa (hash: e7ROoJyN3pM39RDR+x9hRmjX8OTAnl8OOTQ8mCyFwtU=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: qX8r4NzJNO+8WLRtZichu2p6vyncEvpcH3+SPc6m/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e7:d7:04:fc:ca:30:d7:60:1d:de:2d:7e:ac:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=be755adc10deb4f8ce9f99fb01f3048e7639cfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:bd:e9:e1:39:bf:4a:e7:1b:e7:56:ac:0c:
59:ae:b9:9b:03:ab:a7:ef:87:50:c2:86:67:ff:ef:
42:7a:0c:bb:31:81:ad:2a:8c:9a:8e:07:98:28:f5:
ef:c6:f8:79:44:a1:60:d2:dc:69:66:63:38:e4:bc:
27:3e:98:41:5b:5c:9e:67:9e:ca:5a:19:d4:7e:61:
e8:ba:1b:31:c0:ba:65:39:7f:3f:a9:30:dc:67:28:
30:05:85:cd:ff:80:19:98:c0:b8:8e:51:4b:3e:b0:
51:0c:7d:22:51:d1:a0:08:79:f3:59:dd:53:0f:a3:
d7:ee:a9:59:1d:64:21:7d:28:a8:6a:9f:e5:4b:6d:
a0:f4:db:a4:99:c2:d2:1a:c9:ac:2f:75:0e:1f:58:
bb:da:43:b6:33:a7:9b:0d:a4:e3:5a:da:70:ed:10:
a3:de:d0:29:ba:1b:90:42:6d:20:7c:d7:58:79:96:
cb:c1:48:07:97:76:e5:53:bb:aa:16:0f:20:8e:16:
b4:97:ba:19:cb:3f:18:13:d1:d7:36:e8:c4:d1:c1:
84:7c:4f:4c:41:65:71:80:c8:20:d1:7e:02:f6:79:
9a:54:83:22:a2:dd:55:f7:ee:7d:c6:83:98:39:e3:
9d:25:bb:c5:ac:a4:a2:2d:3e:c6:a5:8e:28:98:ce:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:75:5A:DC:10:DE:B4:F8:CE:9F:99:FB:01:F3:04:8E:76:39:CF:A5
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:63:11:eb:28:08:92:35:ee:d4:b5:c2:9b:a8:93:13:98:
d1:30:42:3f:5c:06:bb:8a:73:e0:6e:83:39:e2:c7:fa:5e:92:
9d:1d:8c:9b:dd:ae:56:d3:9b:83:4f:b9:ff:1e:d3:25:b5:1d:
37:69:04:e5:1c:1b:8e:63:54:c9:e0:e8:72:89:b4:bd:35:e5:
b5:cf:79:d2:3b:53:cf:ea:ef:66:dd:de:7a:fe:94:e1:91:c8:
a1:4a:07:04:47:db:bc:40:24:58:4d:15:1d:d0:84:a1:34:7e:
1a:39:3d:cf:18:cf:ec:e6:36:05:6b:11:12:8a:82:14:11:c6:
e8:a6:06:d5:55:74:b9:86:7b:61:e0:11:ae:fc:06:b9:70:f3:
f2:5d:33:c7:fb:6e:0b:3c:e0:f9:9b:f9:9e:e4:40:85:c7:70:
fc:c6:88:45:23:a2:f4:d7:40:fa:34:ee:da:a7:34:40:86:43:
9c:75:e6:ab:3b:21:a2:f8:0a:cd:65:69:b3:41:b9:69:83:93:
47:27:0b:e5:33:14:c6:fc:1d:08:f5:02:71:2f:9f:05:72:17:
ba:ab:cd:81:9e:4f:9a:c3:7f:aa:19:3a:79:f0:16:f4:05:66:
b4:c0:7d:da:0f:0b:0c:6c:8d:30:3d:7b:8f:8e:ef:73:bc:e9:
73:f4:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:24 2025 by rpki-client