Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: 2R6ykn8aq75ajFGMZUuSZnVOgijUJSoLai4Ecpg643U=
Subject key identifier: 9A:69:0F:BB:0D:84:73:F9:5A:11:86:4F:B5:7D:56:34:24:DC:D1:90
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 019A22898FCFB97BFBD36CB7CE5684682169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 22:00:31 +0000
Manifest this update: Sun 26 Oct 2025 22:00:31 +0000
Manifest next update: Mon 27 Oct 2025 22:00:31 +0000
Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: jTXJiGo4kO2PiKE5zxYsnGCYYkWm/MoiYBoYNTyV55I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:8f:cf:b9:7b:fb:d3:6c:b7:ce:56:84:68:21:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Oct 26 22:00:31 2025 GMT
Not After : Oct 27 22:00:31 2025 GMT
Subject: CN=9a690fbb0d8473f95a11864fb57d563424dcd190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:f8:ca:b6:9d:b3:75:aa:9a:5d:eb:9b:f5:
c9:8d:0b:bd:6e:42:60:22:0f:25:73:d6:2b:80:c3:
7f:36:e4:ec:93:62:82:82:79:c8:74:ce:d4:e9:2a:
37:fb:ef:59:9f:10:9f:9a:74:b4:af:45:8c:78:e9:
75:e8:c8:cb:55:7e:6a:a7:69:b7:f9:22:92:0e:e6:
7e:f5:34:bc:f8:95:40:6c:ae:22:4a:54:1b:39:bb:
6d:b8:29:9a:b2:84:9a:6a:c3:d4:ee:ef:b5:a3:c2:
94:16:21:2f:ca:cc:69:7c:e5:64:c8:a2:11:32:30:
ef:77:19:93:83:55:e7:e3:ec:7b:e9:91:db:0e:4c:
e2:d5:51:2a:f9:28:6e:f2:27:f5:d7:65:a1:16:8e:
57:a5:c8:f7:e8:a5:ef:03:d2:17:1d:c2:91:92:06:
37:57:9a:10:da:de:25:1b:72:95:c0:07:6c:29:92:
69:22:e7:1e:54:3c:be:79:d2:36:8d:3a:fb:25:64:
38:9e:aa:2c:b8:25:fd:e8:b1:37:ad:6a:6e:ad:7a:
5e:ce:84:73:2d:2f:b1:52:c4:80:e1:df:32:6e:ec:
01:d8:74:25:c6:a2:76:a4:b5:ef:42:25:76:95:4e:
01:49:d5:9c:61:5d:4b:a0:d7:15:54:29:a9:56:bc:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:69:0F:BB:0D:84:73:F9:5A:11:86:4F:B5:7D:56:34:24:DC:D1:90
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:52:84:86:93:63:e9:b6:b1:95:f7:6f:8a:10:87:ae:d1:58:
33:95:52:0f:65:6a:4e:67:3c:6e:0a:fb:7d:c2:1b:ca:86:b0:
2d:5f:01:28:1f:5b:60:bc:75:87:0e:be:56:a8:84:cf:5f:b4:
c3:01:a2:d1:f2:7f:aa:f4:93:2c:98:db:96:77:0f:d4:64:a4:
52:61:56:7c:80:49:8a:11:ad:45:c9:67:15:3f:32:f0:77:d6:
0f:85:ee:da:f0:6e:03:48:c8:20:ef:db:f8:70:7e:a1:9a:0b:
3d:32:df:e4:5e:ae:39:8d:63:50:89:24:02:61:eb:9d:89:90:
49:b0:38:41:40:83:0a:55:ed:35:79:82:53:44:75:25:79:22:
8b:d2:af:28:60:07:c1:54:25:64:8c:5e:c2:93:75:a3:bf:53:
3d:73:48:58:a9:d8:d0:09:3f:22:49:c1:16:04:fb:9e:83:16:
2c:7d:b7:5d:fd:0b:81:2a:57:9b:fd:c8:21:a7:88:9a:16:a8:
50:42:26:10:63:bc:70:bf:86:79:ef:6f:49:02:ef:4d:de:1a:
78:bb:a3:6f:91:f6:46:44:76:f7:bb:89:31:b4:77:54:bb:70:
aa:7e:2e:62:39:b5:10:12:41:8e:2d:9b:22:0a:f0:31:22:5c:
ac:b1:93:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:32 2025 by rpki-client