Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: TM+/9ZebZtEutPOrhVx+BJBYPdPUbnHz3GlvElP/jeI=
Subject key identifier: E4:3E:F0:AC:B4:EC:EE:48:E0:F7:6E:2A:C9:E2:65:FC:46:18:E7:E1
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 019A2C32064AE5B54B023378388DF61DDA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 0D91
Signing time: Tue 28 Oct 2025 19:01:07 +0000
Manifest this update: Tue 28 Oct 2025 19:01:07 +0000
Manifest next update: Wed 29 Oct 2025 19:01:07 +0000
Files and hashes: 1: Gn-kDrXRDHHv43q56kRDHjj8q1w.roa (hash: Tu0d5Ny8jllovtj2b3OGyqwDSE7dzSUuYk4aE5120L8=)
2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: lkZoo44VYpu5Xn16r3icRE8zoe6emWO7sh1ncvavVsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:32:06:4a:e5:b5:4b:02:33:78:38:8d:f6:1d:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Oct 28 19:01:07 2025 GMT
Not After : Oct 29 19:01:07 2025 GMT
Subject: CN=e43ef0acb4ecee48e0f76e2ac9e265fc4618e7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:8a:e5:60:d1:75:df:73:90:93:ac:60:40:
c7:77:34:28:8f:0f:9e:95:ab:5d:13:29:49:2e:89:
1f:12:26:2b:89:35:eb:4c:40:e7:e5:a0:43:71:89:
8c:c2:30:38:6f:8d:91:62:ae:f7:93:77:10:26:ed:
b4:dc:e6:c2:94:1d:8f:44:b1:48:14:f7:1c:b2:7f:
66:e3:83:99:27:6c:1a:02:12:7c:e2:71:fc:0d:00:
56:01:f9:af:2f:71:e4:11:e4:e0:60:e2:35:2b:07:
6a:fc:71:f0:0e:ea:7f:8c:2d:10:4f:72:d2:14:bf:
e5:e9:90:e8:32:d6:25:6a:d2:82:25:5f:6e:35:78:
d9:62:db:f0:7e:55:98:b6:bd:b5:ab:5d:e0:39:65:
73:08:15:0d:fb:15:51:bb:bb:67:b8:6a:04:42:a1:
49:a0:46:0a:48:47:d3:3b:03:e1:69:46:d6:35:43:
e9:af:b8:93:c0:ba:e1:79:35:74:e1:be:0d:0e:6a:
40:58:93:78:84:b7:84:c8:a4:2e:42:9b:41:dd:4c:
b0:97:b7:f6:66:ff:de:1a:f1:30:6d:6e:7b:a2:19:
e7:52:59:7e:37:21:37:05:14:94:81:d8:cb:a8:ef:
89:7d:c9:7d:e0:10:0d:0c:b5:74:4b:8f:5d:e7:45:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:F0:AC:B4:EC:EE:48:E0:F7:6E:2A:C9:E2:65:FC:46:18:E7:E1
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cf:10:f5:46:ac:d5:ba:ea:8b:03:6f:e3:24:c1:97:56:8b:
77:a7:5b:f3:b3:f1:8d:3b:01:29:ba:02:89:a6:e1:04:bd:a5:
4b:71:0f:e7:72:ab:77:8e:82:be:bc:52:9e:83:e0:70:cd:6b:
a4:67:e1:0e:5a:05:86:4d:a1:45:71:9d:fc:a7:6f:05:64:3f:
69:71:a5:99:3b:b1:c5:35:e5:6f:24:b9:7b:0f:a6:a9:fa:b3:
91:b7:77:89:54:74:8f:94:58:db:e0:95:a0:63:2c:0c:68:3b:
77:54:6a:3a:64:ba:f8:e4:a9:bf:90:dc:15:cd:0c:41:d0:24:
86:ac:e4:d7:25:60:ac:87:39:eb:83:dd:63:06:bf:8c:07:e4:
6d:89:b2:3c:08:da:84:6d:3c:4f:b1:19:8b:69:10:7d:f6:9e:
8b:e4:0c:a7:9b:60:6b:ad:38:0f:43:fa:f0:b9:78:01:13:7b:
a2:52:bc:f1:94:2b:db:e1:09:75:16:06:47:55:c0:cc:af:5d:
22:19:da:d4:6d:9e:47:1a:7e:27:02:b6:0e:89:57:16:94:77:
f4:d7:0c:d7:28:40:64:69:a6:84:45:ad:26:3e:e9:bc:e3:4a:
7b:be:0c:76:5a:c6:32:7f:fe:c2:04:d7:2f:43:09:0d:d1:bb:
c9:bd:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:09:15 2025 by rpki-client