Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: 1jJiCNcKHDQEqkY95whFwyg238oiw+edl+CyvvayM78=
Subject key identifier: C6:2D:08:D2:3B:35:D7:77:CE:43:C8:2E:DC:F8:0A:20:E5:62:E2:81
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 019A4F998F678D5DF06313A87C885E6649E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 07EA
Signing time: Tue 04 Nov 2025 16:00:55 +0000
Manifest this update: Tue 04 Nov 2025 16:00:55 +0000
Manifest next update: Wed 05 Nov 2025 16:00:55 +0000
Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: EtaeG98ENarzl5tDUGx5eYZs7sZR+nyAm5niIyO79DY=)
2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:8f:67:8d:5d:f0:63:13:a8:7c:88:5e:66:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Nov 4 16:00:55 2025 GMT
Not After : Nov 5 16:00:55 2025 GMT
Subject: CN=c62d08d23b35d777ce43c82edcf80a20e562e281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:ad:44:41:d7:3a:cb:6c:b3:ab:a8:f0:2e:
24:06:03:07:c2:36:03:50:b8:09:3c:8c:bf:b1:71:
65:f3:57:90:60:95:10:11:1e:b5:fc:2a:8a:08:6d:
e7:42:74:52:cc:46:a8:a8:3f:e8:bc:36:b9:79:3c:
26:0f:f3:5f:da:ea:a5:21:9c:60:e0:2f:ce:93:d4:
c4:ec:f5:6c:ff:ce:a9:24:88:55:24:e6:c6:8a:b8:
de:cb:32:2d:71:07:e0:fb:ca:1d:80:ee:7c:69:93:
a4:05:24:8d:d2:11:ef:0b:3a:e5:78:25:76:ef:5d:
46:4c:55:11:19:82:b9:8d:1c:a2:f9:8d:e8:b9:2d:
75:bc:d1:20:6a:7a:4a:0e:a5:39:75:8d:3d:24:95:
98:6e:ed:26:0e:89:f5:2e:ca:ec:0f:56:f4:bd:88:
5c:fb:8d:4c:52:71:e3:30:c2:7d:c7:46:4d:54:78:
47:aa:24:d8:95:9c:04:a5:09:68:02:95:d0:a0:4f:
c1:13:68:d2:36:a6:ce:d0:bb:39:88:73:ce:d7:38:
32:7c:95:6c:18:dc:31:87:85:d3:08:af:06:92:b6:
cd:7f:9d:a5:5e:fc:1d:f2:69:c7:9e:c3:ff:92:44:
a6:4e:f8:66:d7:9b:81:df:f4:ba:48:e1:c6:bb:a7:
6b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2D:08:D2:3B:35:D7:77:CE:43:C8:2E:DC:F8:0A:20:E5:62:E2:81
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0c:2b:71:f0:60:5a:22:99:56:07:18:ec:68:74:ff:23:49:
f8:fe:93:5e:db:af:83:fc:85:7a:3f:52:0a:8c:25:38:ee:a0:
71:37:32:ef:47:ad:dd:ed:ed:d5:da:50:b0:b3:1b:bd:b0:0a:
29:e4:ec:af:97:f4:9c:a1:87:2b:20:08:5c:b6:52:b2:aa:d3:
8c:7e:ff:40:8a:95:f2:2e:41:eb:a1:f6:96:45:c2:3e:a5:10:
7b:01:79:62:b7:46:e7:89:e6:88:a2:61:bc:9f:38:b9:8c:d3:
28:01:17:f2:8d:32:27:fe:6e:c5:a5:7d:de:ab:d3:67:fc:2c:
e7:2d:54:ee:10:dc:3c:9f:d1:3a:6b:ef:2b:82:1e:c5:bc:47:
5f:3e:e6:c9:9e:f7:a1:0e:09:63:bf:a1:4b:eb:0b:48:b0:81:
97:f4:dd:ac:90:73:12:20:f1:99:3b:8c:e1:ec:85:d8:ab:ee:
85:6d:3f:27:41:6f:db:b0:e6:2b:a1:bf:d2:40:45:f5:5a:34:
1a:b8:cf:2b:8d:de:c1:d6:4b:11:57:6f:18:c6:85:dd:c1:ca:
d1:df:5b:96:4c:a6:34:3d:f9:ac:3b:9e:75:d3:2f:d9:b9:29:
8e:a5:32:a7:a7:7e:de:99:b8:25:4f:05:a8:1c:5d:ff:8d:75:
4e:7d:f7:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmY9njV3wYxOofIheZknoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGIwM2VmMjdjZGFjZTc3ODNhMGVhMzgzNGQ5NzBhZjM4
YWNiZTIwHhcNMjUxMTA0MTYwMDU1WhcNMjUxMTA1MTYwMDU1WjAzMTEwLwYDVQQD
EyhjNjJkMDhkMjNiMzVkNzc3Y2U0M2M4MmVkY2Y4MGEyMGU1NjJlMjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu+tREHXOstss6uo8C4kBgMHwjYD
ULgJPIy/sXFl81eQYJUQER61/CqKCG3nQnRSzEaoqD/ovDa5eTwmD/Nf2uqlIZxg
4C/Ok9TE7PVs/86pJIhVJObGirjeyzItcQfg+8odgO58aZOkBSSN0hHvCzrleCV2
711GTFURGYK5jRyi+Y3ouS11vNEganpKDqU5dY09JJWYbu0mDon1LsrsD1b0vYhc
+41MUnHjMMJ9x0ZNVHhHqiTYlZwEpQloApXQoE/BE2jSNqbO0Ls5iHPO1zgyfJVs
GNwxh4XTCK8GkrbNf52lXvwd8mnHnsP/kkSmTvhm15uB3/S6SOHGu6drwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYtCNI7Ndd3zkPILtz4CiDlYuKBMB8GA1UdIwQY
MBaAFDnbA+8nzazneDoOo4NNlwrzisviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYt
OTUwZjA5MGU1MjJmLzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYtOTUwZjA5MGU1MjJm
LzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQwrcfBg
WiKZVgcY7Gh0/yNJ+P6TXtuvg/yFej9SCowlOO6gcTcy70et3e3t1dpQsLMbvbAK
KeTsr5f0nKGHKyAIXLZSsqrTjH7/QIqV8i5B66H2lkXCPqUQewF5YrdG54nmiKJh
vJ84uYzTKAEX8o0yJ/5uxaV93qvTZ/ws5y1U7hDcPJ/ROmvvK4IexbxHXz7myZ73
oQ4JY7+hS+sLSLCBl/TdrJBzEiDxmTuM4eyF2KvuhW0/J0Fv27DmK6G/0kBF9Vo0
GrjPK43ewdZLEVdvGMaF3cHK0d9blkymND35rDueddMv2bkpjqUyp6d+3pm4JU8F
qBxd/411Tn335Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:08:18 2025 by rpki-client