Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: oD5lmddpoNB/sp1GYcocNqKl4aOsJTRrQWnw9yR/vso=
Subject key identifier: 2C:F6:C6:DD:33:51:BD:D9:B0:BE:9F:FF:FE:DD:E6:9D:62:62:D7:1C
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 019A518778AF2D014A2AEA8D6259EC540E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 07EB
Signing time: Wed 05 Nov 2025 01:00:24 +0000
Manifest this update: Wed 05 Nov 2025 01:00:24 +0000
Manifest next update: Thu 06 Nov 2025 01:00:24 +0000
Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: EXCF0K6230T/cN0fr3WUazvUHjimg95ckYbWar6HtPM=)
2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:78:af:2d:01:4a:2a:ea:8d:62:59:ec:54:0e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Nov 5 01:00:24 2025 GMT
Not After : Nov 6 01:00:24 2025 GMT
Subject: CN=2cf6c6dd3351bdd9b0be9ffffedde69d6262d71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:45:cd:58:7e:c3:4e:0b:41:5a:5c:35:3f:
6a:8c:7e:bf:8c:90:82:9c:5e:85:54:b1:14:c0:3f:
eb:44:0b:91:44:9e:90:a5:0e:a3:f3:89:a2:ed:27:
8c:14:80:04:18:14:6f:00:35:52:2b:6c:10:b9:61:
2e:9b:37:b2:58:91:d1:61:57:e4:9d:a4:3a:f4:48:
6c:b6:86:3c:8c:1b:de:41:e5:20:8f:bd:f9:3c:cb:
81:87:76:97:d2:76:0b:32:d4:4b:fa:af:68:62:7e:
96:a1:71:20:72:13:9e:08:a3:d7:88:f4:80:6d:58:
2f:14:5c:76:df:91:58:94:47:87:ae:78:50:4f:ae:
7d:f8:52:45:cb:cf:41:7a:21:e0:4d:3d:d1:ca:6e:
e8:8e:82:45:4b:61:e2:67:cb:c3:06:a0:ab:be:ba:
89:06:3d:c0:39:94:8a:23:10:65:5d:2e:41:d4:96:
96:af:ab:30:e0:88:58:fb:42:e0:cd:06:77:e2:60:
23:64:da:1e:a3:90:0a:a3:7f:f6:f6:8d:0b:2d:36:
3f:10:72:f4:6e:ac:3c:ef:b0:7a:4a:02:b0:69:a1:
a6:c0:15:c8:68:ba:b9:a3:98:4b:d3:75:44:1c:26:
c2:56:68:cd:c6:82:f6:76:83:2c:5e:4f:29:ef:68:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:C6:DD:33:51:BD:D9:B0:BE:9F:FF:FE:DD:E6:9D:62:62:D7:1C
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:76:02:c0:3f:2f:6f:75:fc:9b:44:a4:e5:46:17:c6:33:b4:
ad:fe:ff:e4:9f:b8:08:bc:fc:4b:33:cd:4a:27:76:7c:1a:72:
ca:9b:d0:b8:2a:d9:c6:6e:88:8d:4d:35:c1:ca:f8:ee:f9:8d:
16:dd:46:c4:f0:8b:fe:d4:15:bc:c4:78:49:4b:e5:be:89:d1:
a8:13:0b:71:ba:b0:f2:3d:fd:c5:65:ba:d2:fb:56:0f:6d:9e:
84:d8:5b:a9:8e:aa:28:95:66:f3:fe:99:6d:d3:ac:47:f3:e8:
b0:38:33:4f:2f:09:7d:bc:85:99:5f:14:ff:76:92:49:bd:cf:
ee:59:be:b1:7e:60:61:c8:90:7b:70:fe:62:35:1d:9f:4e:60:
73:f7:7d:8b:8f:aa:62:4e:dc:39:2a:22:20:68:0f:93:ab:82:
c9:56:47:a4:69:a3:0f:71:cb:55:53:ad:ed:9a:0e:67:29:b2:
5c:26:82:8b:1a:00:1e:a7:25:ad:d8:2f:3a:c1:94:58:d4:61:
91:ab:2c:fb:fd:d0:f6:b5:7d:b7:6c:7b:48:b0:26:30:60:c9:
3a:0a:86:78:84:81:5c:08:80:a2:3a:97:0c:2a:e2:d8:d8:e6:
fa:6c:63:d1:61:38:9d:62:88:b0:8b:3c:62:f8:31:88:11:31:
46:03:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:26 2025 by rpki-client